Payment privacy review
REVIEW COPY. Not effective. Founder and Claude approval required before publication.
The current privacy notice remains in effect. This page shows the proposed additions for paid Bloooom by Zaltt checkout. It does not replace that notice or change the terms of an existing trial.
Who is responsible
Zaltt Ltd is responsible for the personal information it uses to answer enquiries, arrange access and support the product. Zaltt Ltd is registered in England and Wales, company number 17240841, with its registered office at 124–128 City Road, London EC1V 2NX. Email hello@zaltt.com about privacy.
Paddle is the proposed reseller and Merchant of Record for paid orders. Paddle acts as an independent controller for the payment and buyer information it processes for its own purposes. Read Paddle's privacy notice for those purposes, retention arrangements, international transfers and your rights in relation to Paddle.
What paid checkout would add
Paddle handles the payment details entered in its checkout. Zaltt receives order, plan and customer contact information so that it can arrange access, support the subscription and respond to cancellation or refund requests. Neither Zaltt's enquiry form nor this review page asks for payment card details.
We use this information to perform the subscription contract or take steps you request before entering it. Where financial records must be kept by law, the basis is compliance with that obligation. Website and account security may also rely on our legitimate interest in preventing abuse.
The proposed checkout is separate from a free trial enquiry. Asking for a trial does not start a paid subscription or sign you up to unrelated marketing.
Where the information goes
The current enquiry arrangements stay the same: Microsoft Azure hosts the website and stores private form records in UK South. Microsoft 365 processes our email. A short notification containing your name and enquiry type, without your email address or full message, reaches Unmesh through Mattermost on Zaltt's server in Azure Sweden Central.
Paddle processes payment and buyer information under its own privacy notice. Do not assume that payment information stays in UK South or follows the same path as an enquiry. Zaltt uses the order information it receives to arrange access and handle support. The exact fields, storage and access controls in the payment integration must be checked before live checkout opens.
How long it is kept
The current enquiry rule stays in place: unanswered enquiries are kept for up to six months unless you become a client, start a trial or keep the conversation going. A monthly reminder supports a manual review and deletion of records no longer needed. It is not an automatic deletion timer. Email and backup copies may remain after an active enquiry is deleted.
Payment and subscription records need their own retention rule. This duration has not yet been confirmed for Zaltt's payment integration. It must be stated and approved before live checkout opens. Paddle's own retention policy applies to the information it holds as an independent controller. A render-image deletion limit must not be read as a limit on invoice, payment or support records.
Checkout storage and privacy rights
The existing website stores your theme preference in your browser. The proposed Paddle checkout may introduce additional browser storage and requests. These must be checked in the working integration, and the notice updated to describe what is actually used before launch. Do not treat the current notice's statement about the public pages as a description of an unapproved checkout.
Your rights and how to contact Zaltt remain set out in the current privacy notice. Contact Paddle for a request about the information it controls. You can also complain to the UK's Information Commissioner's Office.
This page is a review of proposed changes, not an effective payment privacy notice. No live payments are authorised by it.