UK GDPR
Privacy
SPADE_CLO processes the minimum data needed to verify garments, register ownership and protect customers against counterfeit and fraud. Our lawful bases are performance of a contract (your account and registered garments) and legitimate interests (fraud and abuse prevention).
- Account
- Email address, optional display name, password (managed by our authentication provider, never visible to us).Retention: Until you delete your account.
- Ownership
- Which garments are registered to your account and when.Retention: For the life of your account. Anonymised history is kept to protect garment records.
- Verification events
- Date and time of scans and registration attempts, browser family, country, and a pseudonymised network identifier (a keyed hash of your IP address that changes monthly). Raw IP addresses are not stored.Retention: 180 days, then deleted automatically.
- Support requests
- What you send us and our notes.Retention: Up to 2 years after resolution.
Public verification pages never show an owner's name, email address or other personal information.
You can download your data from Account settings at any time, and request deletion of your account through support. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).