Effective date: 2 May 2026 · Last updated: 15 May 2026 · Version: 2.1
This Privacy Policy explains how Bazema Limited, trading as Thayne (Company No. 17054726), collects, uses, stores, and protects your personal information when you use our website at thayne.app or any of our services. We are committed to handling your data responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read this policy carefully. If you have any questions, you can contact us at elliot.bazley@thayne.app at any time.
01
We are Bazema Limited, a company registered in England and Wales under Company Number 17054726, trading as Thayne. Our registered office is at 41 The Rowans, Lancashire, UK.
For the purposes of UK GDPR, Bazema Limited is the data controller for personal information collected through thayne.app. This means we determine how and why your personal data is processed. Our ICO registration number is ZC099568.
You can contact us about any data protection matter at elliot.bazley@thayne.app.
02
When you create a Thayne account, we collect:
When you complete the Thayne onboarding conversation to configure your first AI link, we collect the content of that conversation, which may include:
This information is used to generate your AI configuration and is stored in your account record.
If you upload a profile picture or avatar to your account, the image is stored on Cloudflare R2 with a public URL so it can be displayed within the platform. You can update or remove your avatar at any time from your account settings.
When someone uses a Thayne link you have created, we collect the content of the conversation they have with your AI. This may include personal information voluntarily shared by the enquirer, such as their name, contact details, budget, requirements, and any other details they provide. This information is used to generate a profile delivered to you through your Thayne dashboard.
If you subscribe to Thayne Pro, payment is processed by Stripe. We do not store your full payment card details. We receive and store limited billing information from Stripe, including your Stripe Customer ID, subscription status, and billing history. See Section 6 for full details.
We collect information about how you use the Thayne platform, including:
When you visit thayne.app, our website hosting provider (Webflow) and infrastructure provider (Cloudflare) automatically collect certain technical information, including:
03
We use the personal information we collect for the following purposes:
04
Under UK GDPR, we must have a lawful basis for processing your personal data. The bases we rely on are:
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Contract — processing is necessary to perform our contract with you |
| Delivering the Thayne service | Contract — processing is necessary to perform our contract with you |
| Processing payments and managing subscriptions | Contract — processing is necessary to perform our contract with you |
| Sending transactional and service emails | Contract — these communications are necessary to deliver the service you have signed up for |
| Sending marketing communications | Consent — you provide consent at signup, and you can withdraw this at any time |
| Sending SMS notifications | Consent — you explicitly enable SMS notifications in your account settings |
| Improving our product and protecting our service | Legitimate interests — we have a legitimate interest in developing and protecting our business |
| Complying with legal obligations | Legal obligation |
Your right to object. Where we rely on legitimate interests as our legal basis, you have the right to object to that processing. If you wish to do so, please contact us at elliot.bazley@thayne.app and we will consider your request.
05
We do not sell your personal data. We share it only with the third-party service providers necessary to operate our business, all of whom are bound by data processing agreements:
| Provider | Purpose | Location |
|---|---|---|
| Webflow Inc. | Website hosting and content management | USA (SCCs in place) |
| Cloudflare Inc. | Infrastructure, DNS, and edge computing for API requests | USA (SCCs in place) |
| Airtable Inc. | Data storage and database management | USA (SCCs in place) |
| Make (Celonis SE) | Workflow automation and data processing | EU |
| Resend Inc. | Transactional and service email delivery | USA (SCCs in place) |
| Memberstack Inc. | User authentication and account management | USA (SCCs in place) |
| Stripe Inc. | Payment processing and subscription management | USA (SCCs in place) |
| Anthropic PBC | AI language model powering Thayne conversations | USA (SCCs in place) |
| Twilio Inc. | SMS notifications (where enabled by the subscriber) | USA (SCCs in place) |
We may also disclose your information to government or law enforcement agencies where required by law, or to protect the rights and safety of Thayne, our users, or others.
06
Payments for Thayne Pro are processed by Stripe, Inc., a PCI-DSS compliant payment processor. When you subscribe to a paid plan, you will be directed to a Stripe-hosted checkout page to enter your payment details. We do not receive or store your full card number, CVV, or other sensitive payment credentials — these are handled entirely by Stripe.
We do receive and store the following from Stripe in order to manage your subscription:
Stripe's privacy policy is available at stripe.com/gb/privacy.
Subscription management. You can view your billing history, manage your payment method, and cancel your subscription at any time from your Thayne account settings. Cancellations take effect at the end of your current billing period.
07
Thayne is an AI-powered service. Conversations that take place through Thayne links are processed by AI language models — currently Anthropic's Claude — to generate responses during the conversation and structured profiles afterwards.
This means:
We also use AI to generate onboarding outputs, welcome emails, and AI assistant responses within the link editor. These processes involve sending relevant account and configuration data to Anthropic's systems.
Opting out of AI processing. Because AI processing is fundamental to how Thayne operates, it is not possible to use the service without it. If you do not wish your personal information to be processed through AI systems, please do not use Thayne. If you have questions about how your data is used, contact us at elliot.bazley@thayne.app.
Anthropic's privacy policy is available at anthropic.com/privacy.
08
We retain your personal data only for as long as necessary for the purposes described in this policy. Our retention periods are as follows:
When your data is no longer needed, we will securely delete or anonymise it.
09
Under UK GDPR, you have the following rights in relation to your personal data:
To exercise any of these rights, please contact us at elliot.bazley@thayne.app. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or by calling 0303 123 1113.
10
Our website uses cookies — small text files stored on your device — to ensure the site works properly and to understand how it is used. The cookies we use include:
We do not currently use advertising or tracking cookies. You can control cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your Thayne account.
For full details of the cookies we use and how to manage them, please see our Cookie Policy.
11
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include:
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.
If you believe your personal data has been compromised, please contact us immediately at elliot.bazley@thayne.app.
12
Some of our third-party service providers are based in the United States. When we transfer your personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses (SCCs) approved by the ICO or the UK International Data Transfer Agreement (IDTA) where applicable.
By creating a Thayne account, you acknowledge that your data may be transferred to and processed in countries outside the UK. We will always ensure that such transfers are made in compliance with applicable data protection law.
13
Thayne is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us at elliot.bazley@thayne.app and we will delete it promptly.
14
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it, as required by UK GDPR.
Where the breach is likely to result in a high risk to your rights and freedoms, we will notify you directly without undue delay, explaining the nature of the breach, the likely consequences, and the measures we are taking to address it.
If you believe your data held by us may have been compromised, please contact us immediately at elliot.bazley@thayne.app.
15
When someone clicks a conversation link created by a Thayne subscriber, their conversation is processed by our systems to generate a profile. This section explains how that data is handled.
During a Thayne conversation, we collect any personal information an enquirer voluntarily shares, which may include their name, email address, phone number, professional background, budget, requirements, and any other details they choose to provide during the conversation.
Thayne subscribers are responsible for informing their enquirers that conversations are powered by AI and that a profile will be generated from the conversation. Subscribers accept this responsibility as part of our Terms of Service.
Enquirers whose data has been collected through a Thayne conversation link have the same rights under UK GDPR as described in Section 9 of this policy. To exercise these rights, enquirers should contact us at elliot.bazley@thayne.app. We will respond within one calendar month.
Controller and processor roles. When a Thayne subscriber deploys a conversation link, the subscriber is the data controller in respect of enquirer data — they determine the purposes for which it is collected and how it will be used. Bazema Limited acts as a data processor on behalf of the subscriber, processing enquirer data only as needed to deliver the Thayne service. Subscribers are responsible for ensuring their use of Thayne links complies with applicable data protection law, including obtaining any necessary consents from their enquirers and providing appropriate privacy notices before conversations begin.
16
You can request deletion of your Thayne account at any time by contacting us at elliot.bazley@thayne.app.
When your account is deleted, the following happens:
Deletion is permanent and cannot be undone. We aim to complete account deletion requests within 30 days.
17
By creating a Thayne account, you consent to receiving emails from us about Thayne, including product updates, feature announcements, and relevant information about our service.
You can withdraw this consent at any time by:
We will process your request within 10 working days. Note that even after unsubscribing from marketing, we will continue to send you essential service-related communications such as subscription confirmations, payment receipts, and important account notifications. These cannot be opted out of while your account remains active.
18
We may update this Privacy Policy from time to time as our product evolves. When we make material changes, we will notify you by email at least 14 days before the changes take effect. The updated policy will be posted at thayne.app/privacy with an updated effective date.
We encourage you to review this policy periodically. Your continued use of our website or services after any changes constitutes your acceptance of the updated policy.
19
If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us:
We aim to respond to all privacy-related enquiries within 5 working days, and to all data subject access requests within one calendar month.