1. Who operates Backfoot
Backfoot is operated by Backfoot Technologies Ltd (“Backfoot”, “we”, “us”, or “our”), company number 14723767, registered in England and Wales, with registered office at 3 Place Farm, Wheathampstead, St. Albans, England, AL4 8SB.
For privacy questions, contact privacy@backfoottech.com.
2. Information we may collect
Depending on how a business uses the service, Backfoot may process:
- Business and account information, such as a business name, team-member details, login information, and account settings.
- WhatsApp Business Account identifiers and related account or phone-number identifiers made available through Meta Embedded Signup.
- Customer conversation content, including messages sent to or from a connected business, where the business uses Backfoot to receive and respond to those messages.
- Message metadata and status information, such as timestamps, delivery or read status, message identifiers, and conversation assignments.
- Technical logs and security information needed to operate, troubleshoot, protect, and improve the service, such as access records, device or browser information, and error details.
3. Why we process information
We process information to provide and maintain the shared inbox, connect a business’s WhatsApp Business Account, support authorised team access, manage message templates, display message status, respond to support requests, prevent misuse, maintain security, and comply with applicable legal obligations. Where a business uses Backfoot to handle customer information, that business is responsible for determining its lawful basis for processing and providing any required notices.
4. Roles and instructions
For business customer data, the business using Backfoot will generally decide why customer and conversation information is used. Backfoot generally processes that information on the business’s instructions to provide the service. Businesses are responsible for giving appropriate notices, obtaining any required permissions, and using WhatsApp lawfully.
5. Service providers and sharing
We may share information with service providers that help us operate Backfoot, only as needed for those services and subject to appropriate contractual or organisational safeguards. These may include:
- Meta Platforms and the WhatsApp Business Platform, when a business connects and uses its WhatsApp Business Account.
- Cloudflare, for website and application hosting, content delivery, and network security.
- Supabase, for application data storage, authentication, and related backend infrastructure.
We may also disclose information where required by law, to protect rights and safety, or in connection with a business transfer, subject to applicable requirements. We do not sell personal information.
6. International transfers
Backfoot and its service providers may process information in countries outside the country where it was collected. Where required, we will use appropriate transfer mechanisms and safeguards under applicable law.
7. Security
We use reasonable technical and organisational measures designed to protect information against unauthorised access, loss, misuse, or alteration. No internet service can guarantee absolute security. Businesses should protect their account credentials and limit access to authorised team members.
8. Retention
We retain information for as long as reasonably necessary to provide the service, support the business relationship, maintain security and records, resolve disputes, and meet legal obligations. Retention periods depend on the type of information, the business’s instructions, and applicable legal requirements.
9. Rights and requests
Depending on applicable law, individuals may have rights to access, correct, delete, restrict, or object to certain processing, and to receive a portable copy of certain information. If a request relates to a business customer’s data, we may refer the requester to that business or coordinate with the business as appropriate.
To ask a privacy question or make a request, email privacy@backfoottech.com with enough information for us to understand the request. We may verify the requester’s identity and authority before acting.
10. Policy updates
We may update this policy from time to time. We will post the updated version on this page and update the date above. If a change materially affects how we use information, we will provide any additional notice required by law.