Privacy Policy
This policy explains what personal data Lime Software Ltd collects through the costcheck.cloud website, why, and what rights you have over it.
Last updated: 6 October 2026
1. Who we are
This website, costcheck.cloud, is operated by Lime Software Ltd ("we", "us", "our"), a company registered in England and Wales. It is the home of Lime² Cost Check. We are the data controller for the personal data described in this policy.
Contact for privacy queries: hello@lime-software.com.
2. What data we collect
We collect personal data in two ways: data you choose to give us, and a limited amount of technical data recorded automatically when you visit. We do not run any account system, and nothing on this site requires you to register or log in.
| Where | What we collect | How it's collected |
|---|---|---|
| "Get in touch" button and our email address | Your name, email address and anything else you choose to include in your message | Sent from your own email client via a mailto: link. The message goes straight to our inbox, not through a server we host |
| Website visits (automatic) | Your IP address and the network or organisation it belongs to; approximate location (country and city); the pages you view and when; the site or link that referred you; and your browser and device type | Recorded by our website infrastructure each time a page is requested, except for visits from the European Union, which we do not record (see below). We do not use cookies, local storage or similar technologies for this, and we place nothing on your device |
This website, not the software. This policy covers the costcheck.cloud website. The Lime² Cost Check software is different: it runs on your own infrastructure, keeps its data in a local database on your site and sends nothing to us. We do not receive or process the cost, usage or contract data held in your installation.
No forms. This site has no forms that submit data to a server we operate. The contact button opens a pre-filled draft in your own email application, which you review and send yourself. We only receive what arrives in our inbox once you send it.
Information collected automatically
When you visit this site, our website infrastructure records the technical information listed in the table above. This is separate from anything you choose to send us. We do not record these visit details for visitors in the European Union: when a request appears to come from an EU country, based on the country of its IP address at the time of the request, it is not added to our visit records. Our hosting provider still handles the connection itself in order to deliver the page and keep the site secure, as it does for every website. We do not use cookies or similar technologies to collect it. If we later add analytics or other tools that store or read anything on your device, we will update this policy and, where required by law, ask for your consent first.
3. Why we use your data, and our legal basis
| Purpose | Legal basis (UK/EU GDPR) |
|---|---|
| Responding to an enquiry you send us | Legitimate interests, replying to someone who has contacted us, and, where the enquiry leads to an engagement, performance of a contract |
| Keeping records of client communications and engagements | Legitimate interests, and legal obligations (for example accounting and tax records) |
| Keeping this website secure and detecting misuse; understanding which pages and topics interest visitors; identifying the businesses and organisations that visit, so we can contact them about services relevant to their interests | Legitimate interests: running a secure website and promoting our services to other businesses. We have weighed these interests against your rights and freedoms and use only the minimum data needed |
When we analyse visits, we focus on the organisation that visited rather than on individual people. We do not use your data for automated decision-making, we do not build profiles of individuals from visitor data, and we do not sell personal data. If we contact an organisation as a result of a visit, we will tell you who we are and how to opt out of further messages.
4. Who we share data with
We do not sell, rent or trade personal data. We may share it with:
- Service providers who support our business operations (for example email hosting and accounting software), bound by confidentiality and data-processing terms.
- Cloudflare, Inc., which provides this website's hosting, security and network infrastructure and processes visit records on our behalf.
- Professional advisors (accountants, solicitors) where necessary.
- Regulators or authorities where we are legally required to disclose information.
5. International transfers
Our service providers, including Cloudflare, may process data outside the UK and the European Economic Area, including in the United States. Where this happens, we rely on appropriate safeguards recognised under UK/EU GDPR, such as the UK and EU approved standard contractual clauses, the EU-US Data Privacy Framework and its UK Extension, or a provider's adequacy status, and we have data processing terms in place with each provider, to ensure your data remains protected.
6. How long we keep data
We keep enquiry and client correspondence for as long as reasonably necessary to handle the enquiry or engagement, maintain business records, and meet legal and accounting obligations: typically up to 7 years for engagement-related records, and shorter for unconverted enquiries. We delete or anonymise data once it is no longer needed for these purposes.
We keep individual website visit records, including IP addresses, for 12 months and then delete them. We keep a summary record of each visiting organisation (its name, network, the pages it viewed and the dates) for up to 3 years so that we can follow up relevant interest, and then delete it unless the organisation has become a customer or contact.
7. Your rights
Depending on where you are based, you may have the right to:
- Ask what personal data we hold about you and receive a copy;
- Ask us to correct inaccurate data;
- Ask us to delete your data;
- Object to or restrict certain processing;
- Ask for your data in a portable format;
- Withdraw consent, where processing is based on consent;
- Complain to your local data protection authority: in the UK, the Information Commissioner's Office (ICO), or in the EU, the data protection authority in the country where you live or work.
You have an absolute right to object to our use of your data for direct marketing, and we will stop straight away if you do.
To exercise any of these rights, email hello@lime-software.com. We will respond within one month.
8. Visitors outside the UK and EU
This site is used by visitors worldwide. UK and EU GDPR set the baseline standard we apply to everyone. If you are in the US or another jurisdiction with its own privacy law (such as the CCPA/CPRA in California), you have equivalent rights to know what data we hold, request its deletion, and opt out of its sale, noting again that we do not sell personal data. If your local law grants rights not listed above, contact us and we will accommodate the request where reasonably possible.
9. Data security
We use appropriate technical and organisational measures to protect the personal data we hold. Separately, Lime² Cost Check is designed to run on your own site, with its data kept in a local database that is not sent to us.
10. Children's data
This site and our services are directed at business professionals. We do not knowingly collect personal data from children.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.
12. Contact us
Lime Software Ltd, Norwich, UK
Email: hello@lime-software.com