Privacy

This page explains what personal data Lesnia handles, why, and what your rights are. It covers four groups of people: customers of the stores connected to Lesnia, the people who use Lesnia, the businesses we contact, and visitors to this website.

Who we are

[Company name], [Registered address], company number [Company number], runs Lesnia. Except where a section below says we act on someone else's instructions, we are the data controller. We are registered with the Information Commissioner's Office (ICO) under number [ICO registration number]. You can reach us at [Email address].

Data from the stores you connect

A store owner, or an agency working for one, connects the store's Shopify, Meta, Google Ads or Klaviyo account so Lesnia can build the weekly page. The connection is read-only: Lesnia can't change a budget, send an email or publish anything. The store, and any agency acting for it, decides to connect and is responsible for that data. Lesnia acts on their instructions, under a data processing agreement.

What we read

• From Shopify: orders, products and customer data.
• From Meta and Google Ads: campaigns, ads, spend and results.
• From Klaviyo: flows, campaigns, segments and, if you add it, the activity log.
• Optionally, spam-rate data from Gmail Postmaster Tools.

What we do with it

We use it to work out the figures and findings on the weekly page, and for nothing else. We don't sell it, share it with anyone else who uses Lesnia, or use it to market to anyone.

What we keep, and for how long

We keep the figures and findings each page is built from, where each one came from and when we read it, and the access tokens that let us read each account. Disconnecting a brand ends our access, and we delete the data we hold for it within [Number of days] days.

If you're a customer of one of these stores and want to see, correct or delete your data, ask the store first. It decides what happens to that data, and we'll help it respond.

People who use Lesnia

If you use Lesnia, we hold your name, work email address, role, the brands you connect and any notes you add to a page. We use them to run your account, send you the weekly pages and service emails, and talk to you about the product. Our legal basis is our contract with you or the business you work for, and our legitimate interest in running and improving Lesnia. We keep them while the account is open and for [Retention period] afterwards.

Businesses we contact

We email brands and agencies we think Lesnia could help. We find a business's contact details on public sources, such as its own website or a professional directory. Where an email includes findings, they come from what anyone can see from outside, such as a brand's email authentication records and the marketing emails it sends. We don't log in to anything.

Our legal basis is legitimate interests: telling businesses about a product relevant to their work. We've weighed that against your rights, and you can object at any time. Every email says who we are and how to stop them. If you ask where we found your details, we'll tell you. If you ask us to stop, we stop, and we keep your address on a list so we don't email you again. We keep other prospect details for [Retention period] after our last contact.

Visitors to this website

This site is hosted by Vercel, which logs IP addresses and basic request details to deliver the site and keep it secure. We don't use cookies, analytics or advertising trackers on this site. If you use the form on our contact page, email us or book a demo, we keep your name, email address, company and message so we can reply and follow up, and for [Retention period] after our last contact.

Who we share data with

Service providers that help us run Lesnia, for hosting, email, scheduling and payments. They act on our instructions. We don't sell personal data. We may also share data where the law requires it.

Some providers are outside the UK. When they are, the transfer is covered by an approved safeguard, such as the UK's adequacy regulations or the ICO's standard contract terms.

Your rights

You can ask us to show you, correct or delete the personal data we hold about you, to restrict or move it, and to object to how we use it. You can always object to marketing emails. Write to [Email address] and we'll reply within one month. If you're unhappy with our answer, you can complain to the ICO at ico.org.uk/make-a-complaint.

Changes

If this page changes in a way that matters, we'll update the date at the top.