Evergreen Systems LLC customer privacy notice

This privacy notice tells you what to expect us to do with your personal information.

Contact details

Email: [email protected]

What information we collect, use, and why

We collect or use the following information to provide services and goods, including delivery:

• Payment details (including card or bank information for transfers and direct debits)
• Photographs or video recordings
• Email addresses and email avatars

We collect or use the following information for the operation of customer accounts and guarantees:

• Payment details (including card or bank information for transfers and direct debits)

Lawful bases and data protection rights

Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR.

Your data protection rights are:

• Your right of access - You have the right to ask us for copies of your personal information.
• Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
• Your right to erasure - You have the right to ask us to delete your personal information.
• Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information.
• Your right to object to processing - You have the right to object to the processing of your personal data.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
• Your right to withdraw consent - When we use consent as our lawful basis you have the right to withdraw your consent at any time.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide services and goods are:

• Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are:

• Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Where we get personal information from

• Directly from you

How long we keep information

We collect and retain the following types of personal information for the specified periods:

1. User email address:
   • Retention period: For the duration of account activity and 2 years after account closure
   • Reason for retention: Account management, notifications, and authentication
2. User email avatar:
   • Retention period: For the duration of account activity and 30 days after account closure
   • Reason for retention: To personalize user experience
3. Original images uploaded by users:
   • Retention period: 1 day after processing is complete
   • Reason for retention: To allow users to reprocess images within a short timeframe
4. Processed images:
   • Retention period: 90 days after creation
   • Reason for retention: To allow users to download and share the processed images
5. Stripe payment records:
   • Retention period: 7 years
   • Reason for retention: To comply with financial and tax regulations

After the retention period ends, we securely delete or anonymize this data. Users can request deletion of their personal data at any time, and we will process such requests within 30 days unless we are required by law to retain the data.

Please note that even after you request deletion of your data, we may retain some information in our backup systems for a period of time for legal and security reasons.

We regularly review our retention periods to ensure we only keep personal data for as long as necessary for the purposes we collected it for, in line with GDPR requirements.

Who we share information with

Data processors

Our data processors are: cloudflare, replicate, neon, supabase, picsart, stripe: cloudflare, replicate, neon, supabase, picsart, stripe

These data processors perform the following activities for us: Store the user's email address, store the user's uploaded pictures, process the user's uploaded pictures, store the processed pictures, record the user's credit card information

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we've used your data after raising a complaint with us, you can also complain to the ICO.

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Last updated: 14 September 2024