Privacy policy

Last updated: July 2026

The short version: we never hold anything about your staff, because we never ask for it. Here's the detail.

Who we are

BossKit is a trading name of Cwtch Digital Ltd, a company registered in England and Wales (company number 17047763), registered office 4 Gwel Y Mynydd, Llanberis, LL55 4GA — the data controller for your information. For any privacy question, emailhello@bosskit.co.uk. We have applied to register with the Information Commissioner's Office (ICO), application reference C1994620; our registration number will be shown here once the ICO confirms it.

We never ask about your staff

The BossKit Builder brands your documents with your businessdetails — your name, address and logo. Anything about a person is left as a blank space to fill in by hand.

That means we never collect, store or see employee names, sickness or absence records, disciplinary notes, or anything else about the people who work for you. Not because we delete it — because we never ask for it in the first place. If you do type something like a staff name onto a rota, it stays in your browser and is never sent to us.

What we do hold

• Your business details, if you create an account — your business name, address and logo, so your branding follows you between your home and work computers. Accounts are optional; you can buy without one.
• Your email, if you join our list or download a free document. We use it to send you what you asked for and, if you opt in, occasional updates. You can unsubscribe any time.
• Purchase records — when you buy, our payment provider processes the payment and shares limited order information (like your email and what you bought) so we can deliver your files and provide support.

Who helps us run BossKit

We use a small number of trusted providers, and only share what's needed:

• Lemon Squeezy — payments and file delivery (seller of record).
• Supabase — secure database for optional accounts (your business profile) and purchase records.
• MailerLite — our email list.
• Cloudflare — website hosting.
• Plausible — privacy-friendly, cookieless website analytics that doesn't identify you.

We never sell your data. We don't use advertising trackers.

Your rights

Under UK GDPR you can ask us for a copy of the data we hold about you, ask us to correct or delete it, or object to how we use it. Email us and we'll help. You can also complain to the ICO at ico.org.uk.