Privacy notice

Who is responsible

The controller of your personal data is the company named on the legal information page. Contact us about anything on this page at support@heathhallstore.shop.

We process personal data under the UK GDPR and the Data Protection Act 2018, and, where it applies to you, under the EU GDPR and the California Consumer Privacy Act.

What we collect, why, and on what basis

Photographs of shelf labels

This is the part worth reading twice, because it is the only place the service touches something you have photographed in a public place.

• Shop names, store numbers and loyalty-scheme wording are redacted before a photograph is stored. The redaction happens on the way in, not when something is displayed, so the unredacted form is not retained.
• Photographs that appear to contain a person are refused at upload and are not stored at all. Please crop to the label.
• Nothing you upload is used to train any model, ours or a third party’s, and this is contractually required of the provider that performs the reading.
• Photographs are held for 30 days unless you delete them sooner. You can delete them at any time.

Who we share it with

We do not sell personal data and we do not share it for anyone else’s marketing. We use:

• a hosting and database provider, to run the service;
• a model provider, to read the figures from a photograph, under terms that prohibit training on your content;
• a payment provider, to take payment — we never see or store your full card number;
• an email provider, for account and billing emails.

Each is bound by a written processing agreement and may only act on our instructions.

International transfers

Some of these providers process data outside the United Kingdom. Where they do, the transfer is covered by the UK International Data Transfer Agreement, or by the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment. You can ask us for details of the safeguards used.

How long we keep things

• Account data: until you close the account, then 30 days in backups.
• Uploaded photographs and the figures read from them: 30 days, or less if you delete them.
• Saved comparisons: until you delete them or close the account.
• Billing records: six years, because tax law requires it.
• Security and error logs: 90 days.

Your rights

You have the right to be told what we hold, to get a copy, to have mistakes corrected, to have data erased, to restrict or object to processing, to portability, and to withdraw consent where consent is the basis. If the CCPA applies to you, you also have the right to opt out of any sale or sharing — we do neither — and we honour Global Privacy Control signals.

Ask at support@heathhallstore.shop. We answer within one month and do not charge for it.

Complaints

If you think we have handled your data badly, please tell us first. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk, or by telephone on 0303 123 1113. Complaining to us first does not affect that right.

Automated decisions

There is no automated decision-making with legal or similarly significant effects. The model reads figures off a photograph; the arithmetic is done in your browser and every step is shown to you.

Children

The service is not for children under 13. Between 13 and 17 a parent or guardian must consent. If you believe a child under 13 has given us data, tell us and we will delete it.

Cookies

What is set, and what is not set unless you say yes, is on the cookies page.

Changes

We tell registered users by email at least 14 days before a material change to this notice takes effect.