Privacy Notice

Lens+ is operated by Barratt Squires Ltd, which is the data controller for the personal data described in this notice. Contact: hello@bsplusa.com.

• Account data — name, work email address, login credentials and two-factor authentication details.
• Account configuration — company name, websites you add, tracking settings and plan choices.
• Usage and telemetry — how you use the dashboard, device identifiers and IP address (for security and abuse prevention).
• Support messages — anything you send us when you contact support.

Analytics data collected from your website visitors by the Lens+ tracker is first-party and aggregate: it does not include IP addresses, form field values or identity resolution.

• Creating and managing your account and providing the service — performance of a contract.
• Security, fraud prevention and enforcing plan limits — legitimate interests.
• Product improvement and anonymised usage analysis — legitimate interests.
• Customer support — performance of a contract.
• Service emails (trial, billing and renewal notices) — performance of a contract; marketing only with your consent.
• Meeting tax and accounting obligations — legal obligation.

• Paddle, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Service providers who host and operate the service (cloud hosting, analytics infrastructure, email delivery and support tooling), under contract.
• Professional advisers (legal and accounting) where needed.
• Authorities where required by law.

We never sell your personal data.

Some of our service providers process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

We keep account data while your account is active. When an account closes, analytics data is deleted after 30 days and residual account records are kept only as long as tax and accounting law requires, then deleted or anonymised.

You have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent where processing is based on consent. We respond within one month. You also have the right to complain to your supervisory authority (in the UK, the ICO). To exercise any right, email hello@bsplusa.com.

We apply appropriate technical and organisational measures, including encryption in transit and at rest, access controls, mandatory two-factor authentication for dashboard access and audit logging of sensitive actions.

The Lens+ dashboard uses essential cookies only (sign-in and security). The Lens+ tracker installed on customer websites honours each site's own consent banner and does not set tracking identifiers without consent where the site is configured to require it.