Effective date: 25 October 2026. Last updated: 25 October 2026.
Who we are
This privacy policy explains how JustAddWater ("JustAddWater", "we", "us" or "our"), the company that develops and operates LaserLMS, with its principal place of business in India, collects and uses personal data when you visit this website, request a demo or otherwise contact us about LaserLMS.
For website visitors and enquiries, we are the data controller (under the EU and UK GDPR) and the data fiduciary (under India's Digital Personal Data Protection Act, 2023). You can contact us about privacy at privacy@laserlms.com. This address also reaches the person responsible for handling privacy grievances.
What this policy covers
This policy covers personal data about:
- visitors to this website;
- people who request a demo, a quote or information;
- business contacts at our customers, prospects, partners and suppliers.
It does not cover personal data about learners and administrators that our customers put into their own LaserLMS platforms. That data is controlled by the customer, usually your employer or training provider, and we process it on their behalf under our agreement with them. See learner data in LaserLMS below.
Personal data we collect
Information you give us
When you request a demo or contact us, we collect your name, work email address, company, job title, country, company size, the use case and deployment preferences you select, and anything you write in your message. If we correspond with you or meet you on a call, we keep records of those communications.
Information collected automatically
Our web servers record standard technical information when you visit, such as your IP address, browser type, the pages you request, the referring page and the date and time. We use this to keep the website secure and working. This website does not use analytics or advertising trackers, and it loads its fonts and images from our own servers rather than from third parties.
Cookies
This website does not set tracking cookies. See our cookie policy for details.
How we use personal data and our legal bases
| Purpose | Legal basis |
|---|---|
| Responding to your demo request or enquiry, and arranging and running the demo | Taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries; your consent under the DPDP Act where it applies |
| Sending you a proposal, pricing or follow-up about your enquiry | Legitimate interests; consent where required |
| Sending occasional product news, if you ask to receive it | Consent, which you can withdraw at any time |
| Keeping the website and our systems secure, and preventing abuse | Legitimate interests |
| Meeting legal, tax and accounting obligations | Legal obligation |
We do not use your personal data for automated decision-making that has legal or similarly significant effects on you, and we do not sell personal data.
Who we share personal data with
We share personal data only where needed for the purposes above, with:
- Service providers who host our website and systems, deliver email, process form submissions or help us manage customer relationships, under contracts that require them to protect the data and use it only on our instructions;
- Professional advisers such as lawyers and accountants, under duties of confidentiality;
- Authorities where the law requires it, or to protect our rights, our customers or others;
- A buyer or successor if our business, or part of it, is sold or reorganised, subject to this policy.
A current list of our service providers is available on request.
International transfers
We are based in India, and our service providers may process data in other countries. Where the EU or UK GDPR applies and personal data is transferred outside the European Economic Area or the United Kingdom, we use appropriate safeguards, such as standard contractual clauses approved by the European Commission or the UK authorities. Where India's DPDP Act applies, we transfer data only to countries that are not restricted under that Act.
How long we keep personal data
- Demo requests and enquiries: up to 24 months after our last contact with you, unless you become a customer.
- Customer and contract records: for the length of the relationship and as long afterwards as tax, accounting and limitation laws require.
- Web server logs: up to 90 days, unless needed longer to investigate a security incident.
- Marketing preferences: until you withdraw consent, after which we keep a record that you opted out.
Security
We protect personal data with technical and organisational measures appropriate to the risk, including encrypted connections, access controls limited to people who need the data, and regular updates to the systems we use. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authorities of a breach where the law requires.
Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate or incomplete data;
- have your data erased;
- restrict or object to certain processing, including direct marketing;
- data portability;
- withdraw consent at any time, without affecting processing that happened before you withdrew it;
- nominate another person to exercise your rights in the event of death or incapacity, under India's DPDP Act;
- have a grievance addressed by us, and then complain to a regulator.
To exercise any of these rights, email privacy@laserlms.com. We may need to confirm your identity. We will respond within the time the applicable law requires, normally within one month.
If you are not satisfied with our response, you can complain to your local data protection authority. In India, this is the Data Protection Board of India. In the EU, it is the supervisory authority where you live or work, and in the UK it is the Information Commissioner's Office.
Learner data in LaserLMS
When an organisation uses LaserLMS to train its people, that organisation decides what personal data goes into the platform and why. It is the controller or data fiduciary, and we act as its processor. We process learner data only on the customer's instructions and under a data processing agreement.
If you are a learner and have a question about your training records, or want to exercise your rights, please contact the organisation that gave you access to LaserLMS. We will help them respond.
AI features
LaserLMS includes optional AI features, such as course creation and page summaries. Customers choose whether to enable them and which AI provider to use. When they are enabled, the material needed for a request is sent to that provider under the customer's agreement with it. We do not use customer content to train AI models.
Children
This website and LaserLMS sales enquiries are intended for adults acting in a business capacity. We do not knowingly collect personal data from children through this website. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new effective date and, where changes are significant, take reasonable steps to let you know.
Contact us
JustAddWater, India
Privacy and grievances: privacy@laserlms.com
General enquiries: hello@laserlms.com