ShelfTalker Privacy Policy

1. Scope and who we are

This Privacy Policy applies to the ShelfTalker mobile App and related services. For most product and label data handled within the App, we process information on behalf of your organisation. In those cases, your organisation is the data controller and we act as a data processor. For account, authentication and service operations data, we act as the data controller.

2. Information we collect

• Account information: Email address, password, and profile details required to sign in.
• Usage data: Actions such as scans, searches, and label assignments.
• Device data: Device model, operating system, language, and App version.
• Scan data: Barcodes or NFC identifiers you scan, linked to the corresponding records in your ShelfTalker account.
• Log and diagnostic data: IP address, timestamps, crash reports, and error logs to maintain and secure the service.
• Support communications: Content of messages you send to support.

We do not collect precise location data or contact lists. The App does not include third‑party advertising SDKs.

3. How we use your information and lawful bases

We use your information to:

• Provide, operate, and secure the App.
• Authenticate users and manage accounts.
• Sync product and label data with configured POS/ESL systems.
• Monitor performance, fix issues, and improve features.
• Provide customer support and service communications.
• Comply with legal and regulatory obligations.

Our lawful bases under the UK GDPR/EU GDPR include contract (providing the service you or your organisation requested), legitimate interests (running, improving, and securing the App), legal obligation, and consent where required.

4. Sharing your information

We do not sell or rent personal data. We share information only with:

• Your organisation: Authorised administrators of your ShelfTalker tenant.
• Integrated systems you configure: POS providers, ESL platforms, signage systems, and similar services needed to operate the App.
• Service providers: Hosting, analytics, and support vendors who process data on our instructions and under contract.
• Legal and compliance: Where required by law, regulation, or to protect rights, safety, and security.

5. International transfers

We may process and store data in the UK, the EEA, or other countries. Where data is transferred outside the UK/EEA, we use appropriate safeguards such as the UK/EU Standard Contractual Clauses or another lawful transfer mechanism.

6. Data security

We protect data using encryption in transit and at rest, access controls, and other technical and organisational measures designed to prevent unauthorised access, alteration, disclosure, or loss.

7. Data retention

We retain personal data only for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Your organisation may control retention for product and label data held in its tenant.

8. Your rights

Depending on your location, you may have rights to access, rectify, erase, restrict or object to processing, and to data portability. You may also withdraw consent where processing is based on consent.

To exercise your rights, contact us using the details below. If we process data on behalf of your organisation, we may refer your request to the relevant administrator.

You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO).

9. Children’s privacy

The App is intended for business use and is not directed at children under 16. We do not knowingly collect personal data from children.

10. How to contact us

Email: support@shelftalker.io
Website: https://www.shelftalker.io

11. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this page regularly.