LegalLast updated: January 2026

Privacy Policy

LayrCake Ltd ("LayrCake", "we", "us", or "our") is committed to protecting your privacy and handling personal data responsibly.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you use the LayrCake website, platform, and related services (the "Services").

1. Who We Are

LayrCake Ltd

United Kingdom

For data protection purposes, LayrCake Ltd is the data controller.

Contact: privacy@layrcake.com

2. What Data We Collect

We collect only the data necessary to operate and improve the Services.

2.1 Information You Provide

  • Name
  • Email address
  • Company name
  • Billing and payment details
  • Account credentials
  • Communications with us

2.2 Information Generated Through Use

  • User activity logs
  • Configuration data
  • Metadata relating to system usage
  • Support interactions

2.3 AI-Related Data

  • Prompts, inputs, and generated outputs may be processed to provide AI-assisted functionality
  • AI inputs and outputs are treated as Customer Content

We do not intentionally collect special category data (e.g. health, biometric, or political data).

3. How We Use Personal Data

We use personal data to:

  • Provide and operate the Services
  • Manage accounts and subscriptions
  • Process payments
  • Provide customer support
  • Improve platform performance and security
  • Comply with legal obligations

We do not sell personal data.

4. Legal Basis for Processing (GDPR)

We process personal data under the following lawful bases:

  • Contractual necessity: To deliver the Services
  • Legitimate interests: To operate, secure, and improve the platform
  • Legal obligation: For compliance and record-keeping
  • Consent: Where explicitly given

5. AI Processing and Customer Content

AI-assisted features may process Customer Content to generate or modify code and logic.

  • Customer Content remains owned by the Customer
  • LayrCake does not use Customer Content to train public AI models
  • AI processing occurs within defined architectural constraints

Customers remain responsible for reviewing, testing, and validating AI-generated outputs.

6. Data Sharing

We may share personal data with:

  • Trusted service providers (e.g. hosting, payments, analytics)
  • Professional advisors (legal, accounting)
  • Authorities where required by law

All third parties are contractually required to protect data and process it only on our instructions.

7. International Data Transfers

Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as:

  • UK adequacy regulations
  • Standard contractual clauses

8. Data Security

We implement reasonable technical and organisational measures to protect personal data, including:

  • Access controls
  • Encryption where appropriate
  • Monitoring and logging

No system is completely secure. Customers remain responsible for securing their own deployment environments.

9. Data Retention

We retain personal data only for as long as necessary:

  • For the duration of the subscription
  • To comply with legal and regulatory obligations

Upon termination, data is deleted or anonymised in accordance with our retention policies, unless legally required to retain it.

10. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion
  • Restrict or object to processing
  • Request data portability

Requests can be made to privacy@layrcake.com.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

11. Cookies

LayrCake uses essential cookies and limited analytics cookies to operate the website and Services. Where required, consent is obtained before non-essential cookies are used.

12. Children's Data

The Services are not intended for individuals under 18. We do not knowingly collect children's personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified where required by law. Continued use of the Services constitutes acceptance of the updated policy.

14. Contact

For privacy or data protection enquiries:

privacy@layrcake.com