Privacy Policy
Last updated 15 July 2026 · Effective 15 July 2026
This policy explains what personal information Bolrach Workspace collects, how we use it, and how we handle the files, mail, and documents your team stores. Read it with our Cookie Policy and Terms of Service.
1. Who we are
Bolrach Workspace is a productivity suite (Drive, Mail, Calendar, Docs and Meet) operated by Bolrach Technologies Limited (“Workspace”, “we”, “us”). For the EU and UK GDPR, we are the data controller for the account and usage data described here. For the content your team creates and stores, we act as a processor on your instructions. Reach us through our contact page.
2. What we collect
- Account information. When you sign in through Authvio we receive your name and email address, and your organisation membership.
- Usage information. Which apps and features you use, and basic activity, so the service works and we can keep it reliable.
- Device and connection data. IP address, browser and device type, and approximate region derived from your IP, for security.
- Cookies. As described in our Cookie Policy.
3. Your content
Files in Drive, messages in Mail, events in Calendar, documents in Docs, and meetings in Meet are yours. We store and process them so the product works, on your instruction, and we do not use your content to build advertising profiles or sell it. Drive files are stored on Bolrach infrastructure (Cloudflare R2), mail runs on our own in-house mail stack, and Meet runs on our self-hosted media servers. Access is limited to what is needed to run and support the service.
4. How and why we use it
| Purpose | Data used | Legal basis |
|---|---|---|
| Provide the apps and store your content | Account, content | Performance of a contract |
| Keep Workspace secure and prevent abuse | Device data, usage | Legitimate interests |
| Keep the service reliable and improve it | Usage, device data | Legitimate interests |
| Send you service and account notices | Account information | Performance of a contract |
| Comply with the law | As required | Legal obligation |
5. Who we share it with
- Service providers. Infrastructure and storage providers that host the service, acting on our instructions under a contract.
- Your organisation. An administrator of your organisation can manage accounts and, subject to their own policies, access content in the organisation's account.
- Legal. Where we must comply with the law or protect people and the service.
- Corporate. If Workspace is reorganised or transferred, subject to this policy.
6. International transfers
Where we transfer personal data out of the EEA or the UK, we use appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with additional measures where needed.
7. How long we keep it
We keep your content for as long as your account is active, and you can delete it at any time. When an account is closed, content is deleted after a short grace period, except where the law requires us to keep certain records longer.
8. Your rights
Depending on where you live, you can access, correct, delete, restrict, or object to the processing of your personal data, receive it in a portable format, and withdraw consent where we rely on it. Where we process content on behalf of your organisation, we will direct your request to them. Use our contact page to exercise a right. You may also complain to your local data protection authority.
9. How we protect it
We use encryption in transit, access controls, and monitoring, and we limit who can see your information. No service can promise perfect security, but we work hard to protect yours and to respond quickly if something goes wrong.
10. Children
Bolrach Workspace is a tool for organisations and their members, not a service directed at children, and we do not knowingly collect children's personal information.
11. Contact us
Questions, or want to exercise a right? Reach us through our contact page. Bolrach Workspace is operated by Bolrach Technologies Limited.