BallooNote
Effective date: 14 May 2026 · StartApp House Limited
This policy explains what data StartApp House Limited (“we”, “us”) collects when you visit balloonote.com or purchase BallooNote software, why we collect it, and your rights under UK GDPR.
StartApp House Limited is the data controller for personal data collected through this website. We are registered with the Information Commissioner’s Office (ICO) under registration reference ZC151307. You can contact us at support@startapphouse.com for any privacy-related enquiries.
We collect the minimum data needed to operate the site and fulfil orders.
With your consent, we use Google Analytics to measure how visitors use the site — pages viewed, time on site, and download events. No analytics data is collected unless you explicitly accept cookies. You can withdraw consent at any time by declining cookies in the banner (your preference is remembered in your browser).
Legal basis: Consent (UK GDPR Art. 6(1)(a)).
Data processor: Google LLC. See Google’s Privacy Policy.
When you purchase a licence, payment is processed by Stripe, who collect your email address, billing name, billing address, and card details under their own privacy policy. We receive and store your email address, billing name, billing address, and optional company name solely to issue your licence and manage seat assignments.
If you ask us to delete your data, we will remove our copy. Stripe holds their own independent copy — to request deletion from Stripe, contact them directly via stripe.com/gb/privacy.
Legal basis: Performance of a contract (UK GDPR Art. 6(1)(b)).
Retention: Kept for as long as your licence is active and as required by applicable law.
To prevent abuse, we apply a rate limit of 2 demo downloads per hour. We store a one-way SHA-256 hash of your IP address alongside a download count in AWS DynamoDB (eu-west-2, London). The hash cannot be reversed to recover your IP address.
Legal basis: Legitimate interests (UK GDPR Art. 6(1)(f)) — protecting the service from automated abuse.
Retention: Automatically deleted after 2 hours.
Before downloading the demo, we ask a short optional survey (industry, team size, use case). No name, email, or other identifying information is collected. If you skip the survey, “Not answered” is recorded in place of each field.
Legal basis: Legitimate interests (UK GDPR Art. 6(1)(f)) — understanding who uses BallooNote to improve the product.
Retention: Indefinite; the data is not linked to any individual.
The site is hosted on AWS Amplify. Backend services (Lambda functions, DynamoDB, transactional email) run on AWS in the eu-west-2 (London) region. All personal data is stored and processed within the UK/EEA.
We use one first-party cookie (bn_cookie_consent) to remember your cookie preference. This cookie contains no personal data and is strictly necessary to honour your choice. It is set regardless of whether you accept or decline analytics cookies.
Google Analytics sets its own cookies (_ga, _ga_*) only if you accept analytics. These expire after 2 years.
Under UK GDPR you have the right to:
To exercise any of these rights, email support@startapphouse.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
We may update this policy from time to time. The effective date at the top of the page will reflect the date of the latest revision. Material changes will be announced on this page.