Privacy Policy

1. Who we are

SCOTT BARGAINS LTD (“Scott Bargains”, “we”, “us”) is a company registered in Scotland (Company Number SC681882), with our registered office at 99 High Street, Dalkeith, EH22 1AX, Scotland, United Kingdom.

For all data-protection matters, please contact us at support@scottbargains.com.

2. What this policy covers

This policy explains what personal data we collect when you use the Scott Bargains AI service (the “Service”), why we collect it, how we use it, how long we keep it, and the rights you have over it.

3. Data we collect

• Account data: name, email, password hash, optional profile photo.
• Brand profile data: restaurant name, cuisine, location, brand-tone preferences, primary colour, sample menus, dish photos you upload.
• Generated content: prompts you submit and outputs the AI returns, so you can re-open past generations.
• Billing data: managed by Stripe; we receive only the billing country, last 4 digits of the card, subscription status and invoice IDs.
• Usage data: page visits, feature usage, credit consumption, approximate device and browser information.
• Support data: anything you send us via email, contact form or live chat.

4. Legal basis for processing

Under the UK GDPR we rely on the following bases:

• Contract — account creation, billing, generation requests, support.
• Legitimate interests — securing the service, preventing fraud, measuring product performance, product improvement.
• Consent — optional marketing emails, non-essential cookies.
• Legal obligation — responding to lawful requests, keeping tax records.

5. How long we keep your data

• Account and brand data: while your account is active, plus 12 months.
• Generated content history: 24 months, unless you delete it sooner.
• Billing records: 7 years (HMRC requirement).
• Support tickets: 3 years.
• Uploaded photos: 30 days in the content library; you can delete them any time and we purge within 24 hours.

6. Who we share data with

• Stripe, Inc. — payments and subscription management.
• Our infrastructure providers — hosting (Vercel), application database (EU region), observability and error reporting.
• AI providers — prompts and relevant brand context are sent to trusted LLM providers under strict data-processing agreements. We do not allow those providers to train their models on your data.
• Regulators or courts — only where legally required.

7. International transfers

Some processors are located outside the UK. Where that happens, we rely on the UK’s International Data Transfer Addendum and the EU Standard Contractual Clauses to ensure equivalent protection.

8. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, the right to data portability, and the right to withdraw consent. To exercise any of these rights, email support@scottbargains.com. We respond within one month.

If you believe we have not handled your data correctly, you can lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

9. Security

We use encryption in transit (TLS 1.2+) and at rest, role-based access control, 2FA for administrative access, and regular third-party security testing. No system is perfectly secure, and we will notify you and the ICO as required in the rare event of a breach affecting your data.

10. Cookies

See our Cookie Policy for the full cookie list and how to manage your preferences.

11. Changes to this policy

We will update this page when our practices change and will notify active customers of material changes by email at least 14 days in advance.