Privacy policy

Who we are

Flyp is a product of Larkspire, operated by Larkspire Inc Ltd ("we", "us", "Larkspire"). Website: flyp.at. Company site: larkspire.co.uk. Contact: contact@larkspire.co.uk.

Controller and processor roles

• Your merchant account. When you sign up for Flyp, we are the controller of your account and business contact data (name, email, business details, billing records we keep for our own operations).
• Your customers' data. When customers submit enquiries, chat, photos, or job details through your Flyp links and threads, you are the controller of that personal data. We process it on your behalf as a processor, under our Data Processing Agreement.
• Website visitors. For the public marketing site and cookie preferences, we are the controller.

What we collect

• Account data — name, email, and business details you provide when you sign up or update Settings.
• Enquiry & chat content — messages, photos, job details, and contact info customers submit through your Flyp links (processed on your instructions).
• Invoice data — invoice details and the bank-transfer details you choose to show on invoices. Flyp does not process card payments and does not store card numbers.
• Usage & technical data — basic logs needed to run and secure the service (for example sign-in events, error reports, IP address, and device/browser metadata).
• Cookie preferences — whether you accepted optional analytics cookies (see Cookies below).

How we use it

We use personal data to provide Flyp: deliver leads and messages, send email notifications, show analytics in your dashboard, support invoicing, keep the service secure, and improve the product. We do not sell personal data or share it with third parties for their marketing.

Lawful bases

• Contract — to create and run your account and deliver the service you signed up for.
• Legitimate interests — to secure, monitor, and improve Flyp, and to communicate about the service.
• Legal obligation — where we must retain records or respond to lawful requests.
• Consent — where required (for example optional analytics cookies, or marketing where we ask for it).

When we act as your processor for customer data, your lawful basis for collecting that data is your responsibility; we process it only on your documented instructions (see the DPA).

Processors & subprocessors

We use trusted providers to operate Flyp. They process data only on our instructions (or, for Merchant Customer Data, under the DPA). Current subprocessors include:

• Vercel Inc. — Application hosting and edge delivery
• Supabase Inc. — Authentication, database, file storage, and related backend services
• Resend, Inc. — Transactional email delivery (notifications, auth emails)

We may update this list as the stack changes; material changes will be reflected on this page or in the DPA.

International transfers

Some providers may process data outside the UK. Where that happens, we rely on appropriate safeguards under UK data protection law (for example UK adequacy regulations or the UK International Data Transfer Agreement / Addendum / standard contractual clauses, as applicable).

Retention & your rights

You can export or delete your account from Settings. When you delete your account we remove or anonymise associated business data, subject to legal retention needs (for example accounting or dispute records). Merchant Customer Data is retained for as long as your account needs it to provide the service, then deleted or returned as described in the DPA.

Under UK GDPR you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. Contact contact@larkspire.co.uk. You can also complain to the Information Commissioner's Office (ICO).

Related documents

Terms of use · Data Processing Agreement

Changes

We may update this policy as Flyp grows. Material changes will be reflected on this page with a new "Last updated" date.