Privacy notice

Who is responsible

Laneapps Limited is the data controller for DropSaz.

Information we use

• Account: your email, account identifier and sign-in records. If you choose an available Apple or Google sign-in option, that provider shares an identifier and the email and profile details you authorise. We do not receive your Apple or Google password.
• Alerts: products, sizes, price limits, excluded shops, delivery preferences and notification delivery records. Device notifications use a push subscription address and encryption keys.
• Local stock: an area or postcode you search, approximate coordinates, alert radius, and reports and confirmations you submit. Saved local alerts are linked to your account. Reports show the shop, product, time and stock status publicly, not your email.
• Photos: product recognition runs on your device. The photo and its metadata are not uploaded; a submitted report can record that a photo was used.
• Billing and support: subscription status, payment/customer references and messages you send us. Stripe handles payment details when purchases are available; we do not store full card numbers.
• Technical information: IP address, browser details, requests and error/security logs processed by the services that run the site.

You can browse without an account. An email is needed to create one; location, photos, device notifications and saved interests are optional. You can enter a postcode instead of granting browser location access.

Why we use it

• To provide the service you request: signing in, saving alerts, sending matching notifications, handling a subscription and responding to service questions. Our lawful basis is performance of our contract with you or steps you request before it.
• To keep the service reliable and prevent abuse: troubleshooting, protecting accounts and checking misuse of reports. Our lawful basis is legitimate interests in operating a secure, accurate service, balanced against your rights.
• For optional choices: remembering interests on your device and enabling device notifications or device location access. We ask for your permission where required. You can withdraw it in cookie or browser settings without affecting earlier lawful processing.
• To meet legal obligations: records required for accounting, tax or responding to valid legal requests.

Stock alerts you request are service messages. Creating an account does not sign you up to marketing emails. We do not use advertising trackers or analytics cookies, sell your personal information or make decisions with legal or similarly significant effects solely by automated processing.

Who receives information

Cloudflare hosts and protects the site. Supabase provides account sign-in, database storage and service functions. Resend delivers emails. Your browser or device’s push provider delivers notifications you enable. Stripe processes payments when Plus checkout is available. Apple or Google handles sign-in if you choose that option.

Postcode and shop searches use mapping providers, including Geoapify and postcodes.io, which receive the query needed to return results. We do not send them your account email. Retailers receive your visit when you open their links and handle it under their own privacy notices.

Our providers operate internationally, so information may be processed outside the UK or EEA, including in the United States. Applicable safeguards can include adequacy decisions and approved contractual clauses. Contact us for details of the locations and safeguards relevant to your information or to request a copy. We also disclose information when legally required.

How long information is kept

Account details and saved alerts are kept while you use the account, until you remove the alert or request account deletion. Reports and delivery records are kept as needed to show stock history, resolve delivery problems and prevent repeat or false reports. We assess continued need by the age of the record, unresolved issues and any legal obligations.

Security and support records are kept for the time needed to investigate an issue or handle a claim. Billing records may need to be retained for statutory accounting and tax periods after an account closes. Deleted information may remain in restricted backups until those backups expire. Contact us for the retention details that apply to your request.

Your choices and rights

Use My alerts to remove watches, pause email alerts or turn off device notifications. Use Cookie settings to withdraw permission to remember interests. Browser settings control location and notification permissions.

Email info@scarevision.co.uk to request access, correction, deletion, restriction or a portable copy of your information, or to object to processing based on legitimate interests. We may need to verify your identity. We normally respond within one month and will explain any lawful extension or exception.

You can complain to the UK Information Commissioner’s Office or your local EEA data protection authority. You do not have to contact us first.

Children and changes

DropSaz accounts are intended for adults. Contact us if a child has provided account information so we can investigate and remove it where appropriate. We update this notice when the service changes and will highlight material changes that affect how we use your information.