Skip to content

Privacy policy

Effective date: 27 October 2026

1. Who we are

This policy explains how LL Ventures Ltd, trading as BioBuds ("BioBuds", "we", "us"), handles personal data collected through biobuds.co.uk (the "Site"). We are the data controller. LL Ventures Ltd is registered in England and Wales (company number 16485979), and our registered office is 66 Kerridge Court, London, N1 4AL. You can reach us at hello@biobuds.co.uk.

BioBuds is developing bio-based, biodegradable disposable earplugs for businesses. The Site has no online store and no user accounts.

2. What we collect

Information you give us. When you send an enquiry through the contact form, we collect:

  • your name and email address
  • your company and, if you give it, your role
  • the message you choose to write
  • your confirmation that we may contact you about your enquiry

Spam protection. The contact form uses Cloudflare Turnstile to check that it is being sent by a person. To do this, Cloudflare processes your IP address and technical information about your browser and device. We do not store this information.

Analytics, only with your consent. If you accept analytics cookies, Google Analytics collects information about your visit: pages viewed, time on page, device and browser type, the website that referred you, and approximate location. If you decline, analytics cookies are not set.

Technical logs. Our hosting provider keeps short-lived logs of requests and errors to keep the Site secure and working. These record technical request details, such as the page requested, the time and your browser, and are deleted automatically within 7 days. They do not include what you write in the contact form.

3. How we use it and our legal basis

We rely on the following legal bases under Article 6 of the UK GDPR:

  • Replying to your enquiry and discussing your needs (for example trials, pricing or supply): we use your form details. Our basis is taking steps you ask for before a possible contract (6(1)(b)) and our legitimate interest in responding to business enquiries (6(1)(f)).
  • Understanding demand for our product: we use your company, role and message to understand which industries are interested. Our basis is our legitimate interest in developing our product and business (6(1)(f)). We may share summary figures, such as the number of enquiries by industry, with investors and partners. These figures do not identify you.
  • Blocking spam: we use Cloudflare Turnstile. Our basis is our legitimate interest in keeping the Site secure (6(1)(f)).
  • Measuring how the Site is used: we use Google Analytics data. Our basis is your consent (6(1)(a)), which you can withdraw at any time.
  • Keeping the Site secure and working: we use technical logs. Our basis is our legitimate interest in security (6(1)(f)).
  • Complying with the law: we use any of the above, as required. Our basis is legal obligation (6(1)(c)).

We do not sell your personal data, use it for advertising, or make automated decisions about you that have legal or similarly significant effects. We will not add you to a marketing mailing list without asking you first.

4. Who we share it with

We share personal data only with service providers that run the Site for us, under contracts that limit their use of it to providing their service:

  • Cloudflare, Inc. (United States and global network): hosting, security, spam protection (Turnstile) and delivering contact form submissions to us by email.
  • Google LLC (United States): email (Google Workspace), where we receive and reply to enquiries, and Google Analytics only if you consent.

Enquiries are read by the BioBuds founders, who handle them directly.

We may also disclose personal data if the law requires it, to protect our rights or the safety of others, or to a buyer or successor if BioBuds is involved in a merger, investment or sale of its business. In that case we will tell you before your data becomes subject to a different policy.

5. International transfers

We are based in the United Kingdom. Some of our service providers process data in the United States. Where they do, we rely on the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge"), under which these providers are certified, and on the UK International Data Transfer Addendum to the European Commission's Standard Contractual Clauses where a provider's agreement includes it.

6. How long we keep it

  • Enquiries: for as long as we are in contact with you, then for up to 24 months after our last contact, unless a business relationship or legal obligation requires us to keep them longer.
  • Google Analytics data: 14 months, after which Google deletes it automatically.
  • Technical logs: up to 7 days.
  • Your cookie choice: 6 months, after which we ask again.

7. Cookies and similar technologies

The Site asks for your consent before setting analytics cookies. You can change your choice at any time with "Cookie settings" in the Site footer.

  • cc_cookie (strictly necessary, no consent needed): remembers whether you accepted or declined analytics. Lasts 6 months.
  • Cloudflare Turnstile (strictly necessary, no consent needed): may store technical information in your browser to tell people from bots on the contact form.
  • _ga (Google Analytics, needs consent): distinguishes visitors. Lasts 2 years.
  • _ga_ followed by our analytics ID (Google Analytics, needs consent): keeps the state of your visit. Lasts 2 years.

We do not use advertising cookies. You can also block or delete cookies in your browser settings.

8. Your rights

Under UK data protection law, you have the right to:

  • access the personal data we hold about you and receive a copy
  • correct data that is inaccurate or incomplete
  • have your data deleted
  • restrict or object to our use of your data, including use based on our legitimate interests
  • receive your data in a portable format
  • withdraw your consent to analytics at any time, without affecting earlier use

To use any of these rights, email hello@biobuds.co.uk. We will reply within one month and may need to confirm your identity first.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first, so please contact us before going to the ICO.

9. Children

The Site is for businesses and is not directed at anyone under 16. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

10. Security

The Site is served only over encrypted connections (HTTPS), and access to enquiries is limited to the people who need to respond to them. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data.

11. Changes to this policy

We may update this policy when the Site or the law changes. We will post the new version on this page with a new effective date, and highlight significant changes on the Site.

12. Contact us

For questions about this policy or your data: