Pillarbox

Privacy Notice — World Gig Insider Ltd

Last updated: 20 September 2026. Version 1.0. Applies to pillarboxapp.com and the Pillarbox Shopify app (together, “the Services”).

Controller. World Gig Insider Ltd a company registered in England and Wales (number 17309912), registered office 66 Paul Street, London, EC2A 4NA, United Kingdom, [email protected]. We are registered with the Information Commissioner’s Office (ICO) under number (registration in progress). (For the Shopify app, see section 9: for our merchants’ customer data we act as processor.)

  1. What we collect and why (lawful basis in brackets)
    • Calculator inputs (income, expenses, rates) are processed in your browser and are not sent to our servers unless you save them in an account.
    • Waiting lists and guides: e-mail address, and any answers you give (e.g. number of properties) — consent; you can withdraw at any time via the unsubscribe link.
    • Lead requests (e.g. a quote for insulation): name, contact details, postcode and your request, shared only with the partner named on the form — consent.
    • Support e-mails: what you send us — legitimate interests (answering you).
    • Usage data: pages viewed, approximate location from IP, device type, via analytics set only with your cookie consent — consent. Server logs (IP, timestamp, URL) for security — legitimate interests, kept 30 days.
    • Payments: handled by Stripe/Payhip; we see your name, e-mail and the last four digits of your card, never the full card number — contract.
  2. What we don’t do. We do not sell personal data; we do not use it for automated decisions with legal effects; we do not use special-category data.
  3. Who we share it with. Processors under contract: hosting (Cloudflare, London/EU), e-mail delivery (see below), payments (Stripe/Payhip), analytics (see below, only with consent). Lead partners named on the relevant form (as independent controllers). Authorities where the law requires.
  4. International transfers. We host in the UK/EEA. Where a provider processes data outside the UK we rely on the UK International Data Transfer Agreement/Addendum or an adequacy regulation.
  5. How long. Waiting-list data until you unsubscribe or 24 months of inactivity; account/bookkeeping data while you have an account and 90 days after closure unless you export or delete it earlier, or 6 years if you ask us to keep it as tax records; lead requests 12 months; support e-mails 24 months; logs 30 days.
  6. Your rights. Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent — e-mail [email protected]. We reply within one month. You can complain to the ICO (ico.org.uk, 0303 123 1113).
  7. Cookies. See the Cookie Notice; non-essential cookies are set only with consent.
  8. Children. The Services are not aimed at under-18s.
  9. Shopify app (UK Carrier Sync) — processor role. When a merchant installs the app, we process their customers’ order data (name, address, phone, e-mail, items) solely to create shipments in the merchant’s own carrier account, under our Data Processing Addendum. We keep order data for 30 days for error handling, then delete it; we honour Shopify’s customers/data_request, customers/redact and shop/redact requests automatically. Customers should direct rights requests to the merchant.
  10. Changes. We will post changes here and, for material changes, notify account holders by e-mail.