Privacy policy

Last updated: August 2026

Thermalyst is a trading name of Ludic Projects Ltd, registered in England and Wales. We are the data controller for the personal information you provide when using this website or placing a booking. This policy explains what we collect, why, and your rights.

1. What we collect

When you place a booking we collect:

• Your name
• Email address
• Phone number
• Delivery address
• Any notes you add to your order

We do not collect or store your card details — payment is handled entirely by Stripe (see section 4).

We may also collect basic technical data (IP address, browser type) via our hosting provider, Cloudflare, as a normal part of serving the website. We do not use this for profiling.

2. Why we collect it and our legal basis

• To fulfil your hire agreement — we need your name and address to dispatch the camera and process the return. Legal basis: performance of contract (UK GDPR Article 6(1)(b)).
• To send transactional emails — booking confirmation, dispatch notification, and return reminder. Legal basis: performance of contract.
• To respond to enquiries — if you contact us by email. Legal basis: legitimate interests.

We do not use your data for marketing and we do not sell it to anyone.

3. How long we keep it

We keep your order information for up to 7 years to meet our accounting and legal obligations. If you request deletion of your data before that period and there is no outstanding legal reason to retain it, we will delete it.

4. Third parties

We share your data with the following processors only, and only to the extent necessary to run the service:

• Stripe — payment processing. Stripe processes your card details under their own privacy policy and PCI-DSS compliance. We receive a confirmation of payment and a transaction reference; we never see your full card number.
• Resend — transactional email delivery. Your name and email address are passed to Resend to send your booking confirmation and any follow-up emails.
• Cloudflare — website hosting and delivery. Cloudflare handles requests to thermalyst.com and may process your IP address in the course of doing so.

All processors are contractually required to handle your data only on our instructions and to maintain appropriate security standards.

5. Cookies

This website does not set any cookies of its own. Cloudflare may set a short-lived session cookie for security purposes. We do not use analytics, advertising or tracking cookies.

6. Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data, subject to any legal retention requirements
• Restriction — ask us to limit how we use your data while a dispute is resolved
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, email hello@thermalyst.com. We will respond within one calendar month.

If you are unhappy with how we handle your data you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a revised date. Material changes will be communicated by email if we hold your address.

Contact

Data protection queries: hello@thermalyst.com