Privacy Policy

Wallplan is a service operated by STYLE YOUR SPACES STUDIO LTD. For the purposes of data protection law, STYLE YOUR SPACES STUDIO LTD is the controller of the personal data described in this policy.

You can reach us about anything in this document at support@styleyourspacesedinburgh.com, by telephone on +44 7524930364 between 09:00 and 17:00 UTC on business days, or in writing at 28/3 Gayfield Square, Edinburgh, Scotland, EH1 3PA.

This policy applies to the Wallplan website and the planning tool inside it. It does not apply to sites we link out to, which run their own policies.

We collect four kinds of information, and nothing beyond what the service actually needs to work.

Information you give us

• Your email address, and a password stored only as a one-way hash.
• Photographs of the wall you want to plan, and any photographs of the pieces you intend to hang.
• The measurements you type in: wall width and height, the size and weight of each piece, and the wall construction you select.
• What you write in the planner's chat box about what you are hanging.
• What you write to us when you contact support.

Information created by using the service

• The wall plans you generate, the arrangements you keep, and the drill plans you export.
• Your credit balance and the record of what each action consumed.

Billing information

• Your subscription plan, billing period, renewal date and payment status.
• We do not receive, see or store your full card number. Card details are entered directly with our payment provider, who returns a token and the last four digits so you can tell which card is on file.

Technical information

• IP address, browser type, operating system, and the pages you visited, collected in server logs for security and troubleshooting.
• If, and only if, you agree to analytics cookies: which parts of the planner people use and where they abandon it.

To provide the service — performance of a contract

Creating and holding your account, reading your wall photograph, generating arrangements, calculating and drawing drill plans, storing the walls you save, and metering your credit usage.

To take payment — performance of a contract

Starting subscriptions, processing renewals, issuing receipts, handling refunds and responding to chargebacks.

To keep the service running and secure — legitimate interests

Server logs, rate limiting, fraud and abuse prevention, debugging, and backups. Our interest is in operating a service that stays available and is not abused; we have weighed that against your interests and limited both the data and the retention accordingly.

To improve the product — consent, for analytics

Analytics cookies run only if you accept them. If you reject them, or if your browser sends a Global Privacy Control signal, they do not run at all and the service works exactly the same.

To meet legal obligations — legal obligation

Keeping records of transactions for accounting and tax purposes, and responding to lawful requests.

We do not sell personal data, and we do not share it for advertising. We use a small number of processors, each bound by a written contract that limits them to acting on our instructions:

• A cloud hosting and database provider, which stores your account, your walls and your uploaded images.
• An AI processing provider, which reads wall photographs and renders arrangement images, under terms prohibiting the use of your content for model training.
• Our payment provider, which processes card payments and holds the card data we never see.
• An email delivery provider, for account emails, receipts and support replies.
• If you have accepted analytics cookies, a privacy-focused analytics provider.

We will also disclose data where we are legally required to, or where it is necessary to establish or defend legal claims. If we are ever asked for your data by a public authority, we will tell you unless we are prohibited from doing so.

Wallplan serves people all over the world, and some of our processors operate outside the country you are in. Where personal data is transferred across a border, we rely on one of the following safeguards:

• An adequacy decision covering the destination.
• Standard contractual clauses, together with the UK International Data Transfer Addendum where the transfer originates from the United Kingdom.
• Additional technical measures where a transfer risk assessment calls for them, including encryption in transit and at rest.

You can ask us for a copy of the safeguards that apply to a particular transfer.

• Uploaded photographs and the images generated from them: 30 days from upload, then deleted. The 30 days exist so you can come back to a wall you were part way through.
• Saved wall plans, measurements and drill points: for as long as your account is open. These are small text records and are what let you reopen a plan a year later.
• Account records: for as long as your account is open, then deleted within 30 days of closure.
• Billing and transaction records: six years from the transaction, because tax and accounting law requires it.
• Server logs: 90 days.
• Support correspondence: two years from the last message.

You can delete any wall, and every image attached to it, at any time from inside your account. That deletion is immediate in the application and completes in backups within 30 days.

If UK or EU data protection law applies to you

• Access — ask what we hold and get a copy of it.
• Rectification — have inaccurate data corrected.
• Erasure — have data deleted where there is no overriding reason to keep it.
• Restriction — have processing paused while a dispute is resolved.
• Portability — receive the data you gave us in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — for anything based on consent, at any time, without affecting what happened before.

If you are in California

• Know what categories of personal information we collect, why, and who receives it.
• Request a copy, or request deletion, or request correction.
• Opt out of sale or sharing. We do not sell or share personal information as those terms are defined, and we honour Global Privacy Control signals regardless.
• Not be treated differently for exercising any of these rights. There is no version of Wallplan that costs more because you asked us to delete something.

How to use them

Write to support@styleyourspacesedinburgh.com. We answer within 30 days, and we will tell you if we need longer and why. We may ask you to confirm you control the email address on the account, but we will not ask you for identity documents to answer a routine request.

If you are not satisfied

If you are in the United Kingdom you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the European Economic Area you can complain to your national supervisory authority. We would rather you came to us first, but you do not have to.

• Everything travels over HTTPS. There is no unencrypted route into the service.
• Stored images and database contents are encrypted at rest.
• Passwords are stored only as salted one-way hashes, so we cannot read them and neither can anyone who obtains the database.
• Access to production systems is limited to the people who need it, and is logged.
• We keep backups, and we test restoring from them.

No system is perfect. If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours and tell you directly where the law requires it.

Wallplan is for people aged 18 or over. It involves power tools and load-bearing decisions in someone's home, and it is not a service we want minors signing up to on their own.

We do not knowingly collect personal data from anyone under 18. If we learn that an account belongs to someone under 18, we close it and delete the data attached to it. If you believe a minor has given us data, write to us and we will deal with it.

We use strictly necessary cookies to keep you signed in and to protect the site. Analytics cookies run only if you accept them, and rejecting them is exactly as easy as accepting them — same row, same button, one click either way.

Full detail, including how to change your mind afterwards, is in the Cookie Policy.

If we change this policy in a way that materially affects you, we will email the address on your account at least 14 days before the change takes effect, and we will say what changed rather than only that something did.

The effective date at the side of this page is always the date of the version you are reading.