Privacy notice

1. Who we are

This website is run by Bolt Access Systems Ltd, a company registered in England and Wales (“Bolt”, “we”, “us”). For the personal data described here, we are the controller.

Questions about this notice or your data: hello@boltaccess.co.uk. A person reads it.

2. What this notice covers

This notice covers boltaccess.co.uk, the marketing website you’re reading. It does not cover the Bolt platform itself. When our customers use Bolt to run their buildings, we process that data on their behalf under a separate contract, and their own privacy notice applies.

3. What we collect

When you fill in a form

Our forms (book a demo, apply as an installer, early access, request an integration) ask for some of the following, depending on the form:

• your name and email address;
• your company, your role, and a phone number if you choose to give one;
• details about your building or business, such as building type, roughly how many doors, the area you cover or how many engineers you have;
• anything you write in a free-text box.

Along with your answers we record the time you sent the form and the country your connection came from (worked out from your IP address by our hosting provider). We don’t keep the IP address itself with your enquiry.

When you visit the site

Our hosting provider, Cloudflare, processes technical data such as your IP address and browser details to deliver pages and protect the site from abuse. We don’t use analytics or advertising cookies, and we don’t track you across other sites.

4. Why we use it, and on what basis

Replying to your enquiry and arranging a demo	Legitimate interests: you asked us to get in touch, and replying is what you’d expect.
Assessing an installer application	Legitimate interests, and taking steps at your request before entering into a contract with you.
Recording integration requests, to decide what to build	Legitimate interests.
Keeping the site running and secure	Legitimate interests.
Anything else, such as news about Bolt	Consent. We’ll only do this if you’ve said yes, and you can withdraw that at any time. There is no mailing list today.

We don’t sell your data, and we don’t use it for automated decision-making.

5. How long we keep it

We keep enquiries and the conversation that follows for 24 months from our last contact with you, then delete them. If you become a customer or partner, the contract between us sets how long we keep what we need for it. Our hosting provider may hold a short-term copy of a form submission for up to 90 days, so nothing is lost if an email fails to arrive.

6. Who else handles it

We use two service providers (processors), who act only on our instructions:

• Cloudflare: hosts the website and handles form submissions.
• Resend: delivers form submissions to our inbox by email.

Both are based in the United States, so your data may be processed outside the UK. Where that happens, we rely on the safeguards UK law allows, such as the UK–US data bridge or the UK International Data Transfer Addendum.

We’d only share your data with anyone else if the law required it, or with the installer we introduce you to, and then only with your agreement.

7. Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you;
• correct it if it’s wrong;
• delete it;
• restrict how we use it, or object to us using it;
• send it to you or someone else in a usable format, where that applies;
• stop using it where we rely on your consent.

Email hello@boltaccess.co.uk. We’ll reply within one month. It’s free.

If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or 0303 123 1113.

8. Changes to this notice

If we change how we handle your data, we’ll update this page and the date at the top.