Privacy Policy

1. Introduction

Seen Beyond the Label ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and mobile application (collectively, the "Service").

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

• Name and email address
• Password (encrypted)
• Allergy and dietary information you choose to provide
• Payment information (processed securely by Stripe)

2.2 Usage Data

We automatically collect:

• Products you scan (barcodes, images)
• Analysis results and history
• Device information and IP address
• Usage patterns and preferences

2.3 Hardship Access Applications

If you apply for Hardship Access, we collect proof of benefits documentation. This sensitive information is stored securely and used solely to verify eligibility. Documents are deleted within 30 days of verification.

3. How We Use Your Information

We use your information to:

• Provide and maintain our Service
• Analyse ingredients and identify potential allergens
• Personalise your experience based on your allergy profile
• Process payments and manage subscriptions
• Send important service updates and notifications
• Improve our AI analysis accuracy
• Comply with legal obligations

4. Legal Basis for Processing (UK GDPR)

We process your data under the following legal bases:

• Contract: To provide you with our Service
• Legitimate Interests: To improve our Service and prevent fraud
• Consent: For marketing communications (which you can withdraw at any time)
• Legal Obligation: To comply with applicable laws

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Stripe (payments), MongoDB (database hosting), AI providers for analysis
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with any merger or acquisition

We do NOT sell your personal information to third parties.

6. Your Rights (UK GDPR)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Restrict processing of your personal data
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@seenbeyondthelabel.co.uk

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Scan history is retained for 2 years. You can request deletion at any time. Some data may be retained longer for legal compliance or legitimate business purposes.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption, secure servers, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. International Transfers

Your data may be transferred to and processed in countries outside the UK. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in accordance with UK GDPR requirements.

10. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal data, please contact us.

11. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies. You can control cookies through your browser settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us: