Privacy Policy — WhatsApp Business messaging platform

1. Who we are

The data controller responsible for this Platform is:

• Legal entity: Yarm Computers Ltd
• Trading name: Lucid Technology Solutions
• Contact email: info@lucidgrp.co.uk

2. Data we collect

2.1 Account and business data

• Name, email address, phone number, and job role of users who register for an account.
• Business name, address, and billing details of our customers.
• Login credentials and authentication data.
• Account settings, preferences, and configuration.

2.2 WhatsApp and messaging data

When a business customer connects a WhatsApp Business number through the Platform, we process data needed to send and receive messages on their behalf, including:

• The WhatsApp Business phone number and associated business profile.
• The phone numbers and profile names of end customers who message the business.
• Message content (text, media, and attachments) exchanged between the business and its end customers.
• Message metadata such as timestamps, delivery and read status, and conversation identifiers.

2.3 Technical and usage data

• IP address, browser type, device information, and operating system.
• Log data, pages viewed, features used, and timestamps.
• Cookies and similar technologies (see section 8).

3. How we use data

4. Meta and the WhatsApp Business Platform

The Platform integrates with the WhatsApp Business Platform operated by Meta Platforms, Inc. and its affiliates (“Meta”). To deliver messaging functionality, certain data — including phone numbers, message content, and delivery metadata — is transmitted to and processed by Meta. Meta’s handling of that data is governed by Meta’s own terms and privacy policies. We use Meta’s services solely to provide the messaging features that our business customers have configured, and we do not use WhatsApp message content for advertising.

5. How we share data

We do not sell personal data. We share data only as needed to operate the Platform:

• Meta — to deliver WhatsApp Business messaging.
• Hosting and infrastructure providers — to host and run the Platform securely.
• Payment processors — to handle billing where applicable.
• Professional advisers and authorities — where required by law or to protect our legal rights.

All service providers acting as our processors are bound by contracts requiring them to protect personal data and process it only on our instructions.

6. International transfers

Some of our service providers (including Meta) may process data outside the United Kingdom or European Economic Area. Where data is transferred internationally, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

7. Data retention

We retain personal data only for as long as necessary to provide the Platform, comply with legal obligations, resolve disputes, and enforce our agreements. Message data processed on behalf of business customers is retained in line with each customer’s instructions and applicable retention settings. When data is no longer required, we delete or anonymise it.

8. Cookies and analytics

We use cookies and similar technologies that are necessary for the Platform to function (for example, keeping you signed in) and, where permitted, to understand how the Platform is used so we can improve it. You can control cookies through your browser settings; disabling some cookies may affect functionality.

9. Your rights

Under UK GDPR and applicable data protection law, you may have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data;
• restrict or object to certain processing;
• request portability of your data;
• withdraw consent where processing is based on consent;
• lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us at info@lucidgrp.co.uk. Where we process data on behalf of a business customer, we will direct your request to that customer as the relevant controller.

10. Data deletion requests

If you would like your personal data deleted, email info@lucidgrp.co.uk with the subject line “Data Deletion Request”. We will verify your identity and process the request in line with applicable law. If the data is held on behalf of a business customer, we will work with that customer to action your request.

11. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and regular review of our security practices. No method of transmission or storage is completely secure, but we work to protect data against unauthorised access, loss, or misuse.

12. Children’s privacy

The Platform is intended for business use and is not directed at children. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, where appropriate, notify you of material changes.

14. Contact us

For any questions about this Privacy Policy or how we handle personal data, contact:

• Yarm Computers Ltd trading as Lucid Technology Solutions
• Email: info@lucidgrp.co.uk