Privacy policy

Last updated 8 November 2026

Goldfish Bowl is built and run by Net Bloom Ltd, trading as NetBloom. This policy explains what personal data we collect, why, and what you can do about it. If anything here is unclear, get in touch via netbloom.co.uk and we'll sort it out.

Two different kinds of data

Goldfish Bowl handles personal data in two separate ways, and it matters which one applies to you:

• Your own account. If you've signed up to use Goldfish Bowl, we hold your name, email address, company name and a hashed version of your password. We're the data controller for this.
• Leads you capture. If you use Goldfish Bowl at a stand or event, you'll scan badges and business cards, or collect details through our visitor form. That's personal data about the people you're talking to: their name, company, job title, contact details, and whatever you note about the conversation. You are the data controller for that data, since you're the one deciding to collect it and what to do with it. We're the data processor, storing and showing it back to you.

What we collect, and why

For your account: name, email, company name, and a hashed password, so you can log in and we know who's using the app.

For leads: whatever you capture at an event, which may include name, company, job title, email, phone number, how interested they are, whether they want a follow-up meeting, and whether they've agreed to marketing. Where someone fills in our visitor self-serve form directly on their own phone, marketing consent is recorded separately from the rest of their details, since the two need different legal grounds.

Our legal basis for processing

For your account data, it's necessary to perform our contract with you: we can't run the service without it.

For lead data, you (as the exhibitor) are relying on legitimate interests to capture business contact details from people you've spoken with at an event. Marketing consent is handled separately and only sent if the person ticked that box themselves.

Who we share data with

We don't sell or share lead data with anyone outside Net Bloom Ltd. Exports to CSV or Excel are downloaded directly by you, the account holder, not sent anywhere automatically. We're working on direct connections to CRM and spreadsheet tools (HubSpot, Salesforce, Pipedrive, Zoho, monday, Google Sheets), but none of them are connected yet, so no data currently leaves Goldfish Bowl through any of those routes.

Our hosting provider stores the underlying data on our behalf under a standard hosting arrangement, as any web application needs.

How long we keep data

We keep account and lead data for as long as your account is active. If you close your account or ask us to delete your data, we'll remove it rather than keep it indefinitely. If you're an event attendee and want your details removed from an exhibitor's leads, contact us and we'll action it.

Security

Passwords are hashed, never stored as plain text, and the site is served over an encrypted connection. We use ordinary, reasonable security practices for a service of this size. If that changes (for better or worse), we'll update this page.

Cookies

We use a small number of strictly necessary cookies, to keep you logged in and to protect forms against cross-site attacks. We don't currently use tracking or advertising cookies.

Your rights

Under UK data protection law you can ask to see what we hold about you, have it corrected, have it deleted, object to how it's used, or ask for a copy to take elsewhere. Get in touch via netbloom.co.uk for any of these. You can also complain to the Information Commissioner's Office (ico.org.uk) if you think we've got something wrong.

Children

Goldfish Bowl is a business tool for exhibitors and event organisers. We don't knowingly collect data from children.

Changes to this policy

We'll update this page if what we do with data changes, and update the date at the top when we do.

Contact

Net Bloom Ltd, trading as NetBloom.
netbloom.co.uk