Privacy Policy
Last updated: 15 September 2026
This Privacy Policy explains how the LaimonTree team ("we", "us") collects, uses and protects personal data when you use LaimonTree (the "Service"), including as a registered account holder or as an interview participant invited by an account holder.
1. Data we collect
- Account data — name, email address and organization, collected when you sign up.
- Engagement content — interview responses, scenario scores, criteria weightings and unit assignment data entered into the Service by you or people you invite.
- Interview participant data — when an account holder invites a stakeholder to complete an interview, we collect the responses submitted through that link, and, where provided, the participant's name and role.
- Billing data — handled by our payment processor; we do not store full card numbers.
- Usage data — log and analytics data such as pages visited, features used and device/browser information, used to operate and improve the Service.
2. How we use data
- To provide, maintain and secure the Service.
- To process the interviews, diagnostics, scenarios and charters you create.
- To communicate with you about your account, billing and material changes to the Service.
- To improve the Service, including aggregated, de-identified analysis of how it is used.
3. Legal basis
Where the EU/UK GDPR applies, we process personal data on the basis of contract performance (to provide the Service you signed up for), legitimate interest (to secure and improve the Service), and, where applicable, consent (for interview participants, obtained by the account holder inviting them).
4. Sharing
We do not sell personal data. We share data only with:
- Service providers who process data on our behalf (hosting, email delivery, payment processing, analytics), under contractual confidentiality obligations.
- The account holder who invited an interview participant, since interview responses are engagement content owned by that account.
- Authorities, where required by law.
5. Data retention
We retain account and engagement data for as long as the account is active, and for a reasonable period afterward to comply with legal obligations, resolve disputes and enforce our agreements. You can request deletion of your account and associated data as described below.
6. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected]. Interview participants who wish to exercise these rights over their responses should contact the account holder who invited them, or us directly and we will route the request accordingly.
7. Security
We use industry-standard technical and organizational measures — including encryption in transit, access controls and regular review of our systems — to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. International transfers
Data may be processed in countries outside your own. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for such transfers.
9. Cookies
We use essential cookies to keep you signed in and to operate the Service, and limited analytics cookies to understand how the Service is used. You can control cookies through your browser settings.
10. Children
The Service is intended for business use and is not directed at children. We do not knowingly collect personal data from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date.
12. Contact
Questions about this Privacy Policy can be sent to [email protected].