Privacy notice

The company that operates this service is the data controller for the personal data described here. Its registered details are on the legal information page.

For anything about your data, write to support@teeponyu.shop. We answer data requests within one month, and tell you if we need longer.

• We collect as little as we can and delete it when it stops being needed.
• Your photographs and descriptions are never used to train any model, ours or anybody else’s.
• We do not sell or share personal data for advertising. We never have.
• Optional analytics cookies are only set if you accept them, and refusing is exactly as easy as accepting.
• You can export or delete everything from inside your account.

We do not ask for your name, your address or your date of birth. We do not build profiles, and there is no automated decision-making with legal or similarly significant effects.

Photographs and descriptions you upload are not used to train models. Not ours, not a provider’s, not anybody’s.

When a read needs an image to be examined, the photograph is sent to the model provider configured for this deployment for the length of that request, under terms that prohibit retention and prohibit training on the content. The judgement itself, the wash limits and the durability ranges come from a fixed table held here, not from the model.

You can delete any photograph from your account at any time. Deleting removes it from our storage and from any backup within 30 days.

Only the processors we need to run the service, each under a written contract that restricts what they may do:

• hosting and content delivery for the site and its API;
• database, authentication and file storage;
• the model provider that examines an uploaded photograph, for that request only;
• the payment processor that takes your payment;
• email delivery for confirmations, renewal reminders and support replies.

We do not sell personal data and we do not share it for cross-context behavioural advertising. We disclose data to public authorities only where the law requires it.

Data is stored in the United Kingdom or the European Economic Area wherever possible. Some processors operate elsewhere.

Where personal data leaves the United Kingdom, we rely on adequacy regulations where they apply, and otherwise on the UK International Data Transfer Agreement, or on the European Commission’s standard contractual clauses together with the UK International Data Transfer Addendum, alongside a transfer risk assessment. You can ask us for the details of a specific transfer.

Under the UK GDPR and the Data Protection Act 2018, and under the EU GDPR where it applies to you, you have the right to:

• ask what we hold about you and get a copy;
• have inaccurate data corrected;
• have data deleted;
• restrict or object to processing;
• receive your data in a portable form;
• withdraw consent at any time, where we rely on consent.

Export and deletion are both available from the billing page without contacting anyone. For anything else, email support@teeponyu.shop. Exercising a right costs nothing and we will not treat you differently for it.

Under the California Consumer Privacy Act as amended, you may ask what personal information we have collected, why, and who it went to; ask for it to be deleted; ask for inaccurate information to be corrected; and opt out of the sale or sharing of personal information.

We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. We do not use or disclose sensitive personal information beyond the purposes permitted without a right to limit. We will not discriminate against you for exercising any of these rights. Use the same email address to make a request.

Please raise it with us first — it is usually quicker. If you are not satisfied, you have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection.

• ico.org.uk/make-a-complaint
• Helpline 0303 123 1113
• Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

If you are in the European Economic Area you may also complain to your local supervisory authority.

Traffic is encrypted in transit and stored data is encrypted at rest. Access to production data is limited to the people who need it and is logged. Passwords are stored only as hashes. If a breach is likely to be a risk to you, we will tell you and the ICO within the time the law allows.

If we change this notice materially we will email account holders before the change takes effect. The date at the top always reflects the current version.