Privacy Policy

1. Introduction

productrue ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our product information management platform.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered address is 128 City Road, London, EC1V 2NX.

2. Data We Collect

We collect and process the following types of personal data:

2.1 Account Information

• Name and email address
• Company name and business details
• Password (stored securely using one-way hashing)
• Billing information (processed securely by Stripe)

2.2 Usage Data

• Log data (IP address, browser type, pages visited)
• Device information
• Feature usage and interaction data

2.3 Business Data

• Product information you upload to the platform
• Dealer and customer contact information you manage
• Order and inventory data

3. How We Use Your Data

We use your personal data for the following purposes:

• Service Delivery: To provide and maintain our platform
• Account Management: To manage your account and subscription
• Communication: To send service updates, security alerts, and support messages
• Improvement: To analyse usage patterns and improve our services
• Legal Compliance: To comply with legal obligations
• Marketing: With your consent, to send promotional communications

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: Processing necessary to perform our contract with you
• Legitimate Interests: For our legitimate business interests (e.g., improving our services)
• Legal Obligation: Where required by law
• Consent: Where you have given explicit consent (e.g., marketing emails)

5. Data Sharing

We may share your personal data with:

• Service Providers: Third parties who help us operate our platform (e.g., hosting providers, payment processors)
• Professional Advisers: Lawyers, accountants, and auditors where necessary
• Law Enforcement: When required by law or to protect our rights

We do not sell your personal data to third parties.

6. International Transfers

Your data is primarily stored in the United Kingdom. Where we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfil the purposes described in this policy. After account deletion, we may retain certain data for up to 7 years for legal and regulatory compliance.

8. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Restriction: Request limitation of processing
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent

To exercise any of these rights, please contact us at [email protected].

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and penetration testing
• Access controls and authentication measures
• Employee training on data protection
• Incident response procedures

10. Cookies

We use cookies and similar technologies to provide and improve our services. For detailed information, please see our Cookie Policy.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through our platform. The "last updated" date at the top indicates when the policy was last revised.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Address: 128 City Road, London, EC1V 2NX

14. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated:

• Website: ico.org.uk
• Phone: 0303 123 1113