Privacy Policy

This Privacy Policy explains how Lilypad (lilypad.link), operated by Bradleigh Ward, trading as Lilypad ("we", "us", "our"), collects, uses, and protects your personal data.

We're committed to handling your data responsibly and only collecting what we actually need to run the service.

1. What We Collect

When you create an account and use Lilypad, we collect:

• Account details: your email address and password (stored securely, never in plain text)
• Page content: anything you add to your page, such as your name, headline, photo, links, testimonials, and call-to-action details
• Billing information: handled entirely by Stripe, our payment processor — we never see or store your full card number
• Usage data: basic analytics about your published page, such as page views, click-through on your call-to-action, and approximate visitor counts
• Technical data: standard web data like IP address and browser type, used for security and to keep the service running properly

2. How We Use Your Data

We use your data to:

• Create and manage your account
• Display your published page to your visitors
• Process payments and manage your subscription
• Send you service-related emails (welcome, trial reminders, payment issues, cancellation confirmations, password resets)
• Provide you with analytics about your own page's performance
• Keep the service secure and prevent abuse

We do not sell your data to third parties. We do not use your data for advertising.

3. Who We Share Data With

We use a small number of trusted third-party services to run Lilypad:

• Stripe — for payment processing
• Resend — for sending transactional emails (welcome, billing, password reset)
• Lovable Cloud / Supabase — for hosting our database and application infrastructure

These providers only receive the data necessary to perform their specific function, and are bound by their own privacy and security obligations.

We may also disclose data if required by law, or to protect the rights, safety, or property of Lilypad, our users, or others.

4. Your Published Page Is Public

If you publish a page, the content you choose to include on it (name, photo, links, testimonials, etc.) is publicly visible to anyone who visits your lilypad.link address. Please only include information you're comfortable making public.

5. Data Retention

We keep your account and page data for as long as your account is active. If you cancel your subscription, your page content is retained (in a paused, non-public state) so you can resubscribe and pick up where you left off. If you'd like your data permanently deleted, contact us at support@lilypad.link and we'll action this within a reasonable timeframe.

6. Your Rights

Under UK data protection law (UK GDPR), you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data
• Object to or restrict certain processing
• Request a copy of your data in a portable format

To exercise any of these rights, email support@lilypad.link. We'll respond within one month.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data has been mishandled.

7. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections, access controls, and regular security review of the platform. No system is completely secure, but we work to keep your data safe and to respond quickly if anything goes wrong.

8. Cookies

We use minimal cookies necessary for the service to function, such as keeping you logged in. We don't use third-party advertising or tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email or via a notice on the site.

10. Contact

Questions about this policy or your data? Email support@lilypad.link.