Legal

Privacy Policy

Last updated 21 August 2026

Before you rely on this: this is a plain-English starting draft, not legal advice, and it has not been reviewed by a data protection specialist. Have your own counsel review it — and note that the brands using Ovnit each need their own policy too.

Two different relationships

This policy covers two distinct things, and it matters which one applies to you:

If you are a brand using Ovnit, we are the controller of your account data — the name, work email and billing details of the people on your team.
If you scanned a QR code on a product, the brand whose product you bought is the controller of your data. We process it on their instructions. Their own privacy policy governs what they do with it, and it is linked from the companion page you used.

What we collect from customers who scan

What you type into a registration form: name, email address, the retailer you bought from, and optionally a serial or batch number.
Whether you agreed to marketing — recorded separately from the registration itself, with the exact wording you were shown and the version of the notice it came from, so consent is auditable. Where our own page could not confirm the wording it displayed, the record says so rather than claiming otherwise.
If you exercise a right, or turn marketing back on from your preferences page: the date, and the network the request came from — the first three parts of an IP address (or the first three groups of an IPv6 one), never the whole address. It is kept only to corroborate a request whose address has already been confirmed by email. Nothing about your network is recorded when you register a product, report a problem, make a claim or leave feedback, because there we have no way of knowing who is at the keyboard and a network would corroborate nothing.
Anonymous interaction data: that a scan happened, which printed surface it came from, and which options were tapped. This is tied to a device identifier, not to you, until and unless you register.

What we never collect

We do not receive your Amazon account details, your order history, or your payment information. Amazon does not share those with sellers or with us.

Why we process it

To provide the service the brand asked for: registering your product, honouring a warranty, sending a safety notice.
To send you marketing, only where you gave consent, and only until you withdraw it.
To produce aggregate reporting for the brand about how their packaging performs.

Your rights

Under UK and EU data protection law you can ask for a copy of your data, ask for it to be corrected or deleted, withdraw consent to marketing at any time, and object to processing. Every marketing email carries an unsubscribe link, which takes one click and needs no account — it stops that brand's marketing immediately. Three kinds of message are not marketing and are not covered by it, so they continue after you unsubscribe: safety and recall notices about a product you registered, which rest on the brand's legal duty to reach people who hold the product; the confirmation you get when you register something; and replies about a warranty claim you opened. Nothing else is sent to you after you unsubscribe. Requests reach the brand directly; if you contact us we will pass it on and help them answer it.

How long we keep it

For as long as the brand keeps its workspace, and for up to 90 days after they close it. Warranty and safety records may be kept longer where the brand has a legal obligation to retain them.

What survives a deletion request, and why

A deletion removes your customer record, your registrations, your feedback, the problems you reported and the messages sent to you. Four things deliberately survive it, and we would rather name them here than let you find out afterwards. The page you use to delete your data lists them again before you confirm, and the first two appear on the receipt you are given.

An open warranty claim, and a registration still under warranty or attached to a live safety investigation — the brand has a legal duty to keep these, and the second is what lets it reach you if a product is recalled.
One line recording that you consented to marketing on a date, under a particular version of the wording, and when it ended. Not your address, not the device you used, not the form you filled in, not your network — those are removed. It is kept so the brand can show its messages to you were lawful if you later complain about them.
The record of who at the brand looked at your data. It holds a one-way code instead of your address and never anything that was looked at. An audit trail that could be cleared by asking would protect nobody, least of all you — and you can read it: it is included in the copy of your data you can download.

The last two are stored against a one-way code made from your address. We can still recognise the address if you hand it to us — so we count them as information about you, tell you they exist, and show them to you on request — but they cannot be turned back into an address or used to contact you.

Security

Data is encrypted in transit. Access credentials for connected platforms are encrypted at rest. Access to production data is limited to the people who need it to run the service.

Contact

Privacy questions: privacy@ovnit.co. If your question is about a specific product you registered, contacting that brand directly will usually be fastest.