Privacy notice.

Gotoclient SLU, trading as Mr. Workwick's Workshop Studio, is the controller of personal data processed through this website and the Service. Contact: frontiermarketing.io/contact.

• Account data (name, email address, role): to sign you in by email link and manage access. Legal basis: contract.
• Workshop content (contributions, votes, comments, uploaded documents, history): to provide the Service to your space. Legal basis: contract. Within a space, the subscriber decides what is entered.
• Space settings (allowed email domains, approved participants, branding): to run your space as configured. Legal basis: contract.
• Technical data (IP address, device and browser information, logs): to keep the Service secure and prevent fraud. Legal basis: legitimate interests.
• Support messages: to answer your questions. Legal basis: legitimate interests or contract.

We do not use workshop content for marketing, benchmarks or to train AI models. Payment details are collected directly by Paddle, not by us.

• Service providers who host and run the Service, including Lovable (hosting, database, file storage and AI processing) and email delivery providers.
• Paddle.com, our Merchant of Record, for the sale of plans, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as lawyers and accountants, where needed.
• Authorities, where required by law.

We never sell personal data.

Some providers may process data outside the EEA or UK. Where they do, we rely on adequacy decisions or Standard Contractual Clauses, as set out in our providers' data processing agreements.

Account data and workshop content are kept for as long as your account exists. When an account or space is closed, or you ask us to, we delete or anonymise the data, except where the law requires us to keep records such as invoices. Technical logs are kept for a limited period for security.

Under the GDPR and UK GDPR you can ask to access, correct, delete, restrict or port your data, object to processing based on legitimate interests, and withdraw consent at any time. We respond within one month. You can also complain to a supervisory authority, in Spain the Agencia Española de Protección de Datos (aepd.es).

We use appropriate technical and organisational measures, including encryption in transit, email link sign in with no shared passwords, server side access checks, separated spaces and private file storage opened only through short lived links. Our support account can enter a space only when its admin allows it.

We use only essential cookies and local storage needed to keep you signed in and the Service working. We do not use advertising cookies. You can clear them in your browser settings, but you will then need to sign in again.

We may update this notice and will show the date of the latest version on this page.