Privacy

This Privacy Policy explains how personal data is handled through the SeenIt website and app. SeenIt is a trading name of Revived Leads Limited (referred to in this policy as SeenIt, we, us or our).

Revived Leads Limited is registered in England and Wales under company number 15692884. Our registered office is:

Revived Leads Limited
Suite 1 & 2, The Business Centre
Innsworth Technology Park
Gloucester
United Kingdom
GL3 1DL

Questions about privacy can be sent to info@seen-it.uk.

1. Who is responsible for your personal data

Who is responsible depends on why the information is being used.

When SeenIt is the controller

Revived Leads Limited is the data controller when we decide why and how personal data is used, including when we process:

• website and technical information;
• enquiries and support messages;
• customer account-owner and billing details;
• information needed to administer subscriptions;
• affiliate applications, referrals and payments;
• security and fraud-prevention information; and
• information needed to meet our legal obligations or operate our business.

When the customer is the controller

The charity or organisation holding the SeenIt account is normally the data controller for personal data processed through its account, including:

• the names and email addresses of invited users;
• user roles and permissions;
• activity carried out by owners, admins and volunteers; and
• any personal information accidentally included in catalogue photographs or records.

For that information, SeenIt acts as the customer's data processor and handles it on the customer's instructions to provide the service.

If you use SeenIt through a charity or other organisation and want to exercise your rights in relation to your app account, you should normally contact that organisation first. We will assist it where required.

2. What personal data means

Personal data is information that identifies a living person, either by itself or when combined with other information.

Information about donated goods is not normally personal data. However, a photograph may become personal data if it includes a recognisable person, name, address label or other identifying detail.

3. Personal data we collect

Depending on how you interact with SeenIt, we may collect the following information.

Website and device information

• IP address;
• browser, device and operating-system information;
• pages requested and the date and time of the request;
• security, diagnostic and server-log information; and
• cookie or local-storage preferences.

Enquiries and support

• your name, email address and organisation;
• the contents of your message;
• attachments or screenshots you choose to send; and
• our replies and records of support provided.

Customer and billing information

• account-owner name and contact details;
• charity or organisation name;
• billing address and subscription details;
• transaction status, payment references and limited card information supplied by the payment provider, such as card type and last four digits; and
• invoices, refunds, chargebacks and payment history.

We do not receive or store full payment-card numbers.

App user information

• name and email address;
• customer account, shop, role and permissions;
• invitation, sign-in and authentication records;
• actions taken in the app; and
• support and security records connected with the account.

Catalogue information

• photographs of donated goods;
• titles, descriptions, brands, conditions, categories, sizes and prices;
• records of suggested and confirmed matches; and
• information generated when app features are used.

Catalogue information should not intentionally include personal data. Customers and users must not photograph donors, volunteers, shoppers or children. If personal information is captured accidentally, the customer should delete or replace the photograph promptly.

Affiliate information

• affiliate name and contact details;
• referral link, clicks and attribution records;
• the identity or reference of a referred customer where needed to administer the referral;
• commission and payout records; and
• tax or payment information required to make a payout.

4. How we collect personal data

We collect personal data:

• directly from you when you contact us, create an account, join the affiliate programme or use SeenIt;
• from the customer that invites you to its account;
• automatically when your browser or device communicates with our website or app;
• from payment and service providers;
• from an affiliate link used by a prospective customer; and
• when a customer or user asks us for support.

5. How and why we use personal data

When SeenIt acts as controller, we rely on one or more lawful bases under UK data-protection law.

Our legitimate interests include operating and protecting SeenIt, supporting customers, understanding whether features work, preventing misuse, administering referrals and improving the reliability of the service. We consider the impact on the people concerned before relying on this basis.

Where SeenIt acts as processor, the customer decides the lawful basis for processing. We process the information under the customer's documented instructions, including its use of the app and our agreement with it.

We do not sell personal data.

6. The marketing website

The public website provides information about SeenIt and links to pricing, contact and login pages.

We do not currently use advertising cookies or third-party behavioural advertising on the marketing website. We do not treat scrolling or continued browsing as consent.

Our hosting and security systems may create limited technical logs when the site is visited. These logs help deliver the site, diagnose faults and protect it against abuse.

If a browser preference is used to remember whether you accepted or rejected optional cookies, that preference is used only to remember your choice unless this policy or the cookie notice says otherwise.

If we introduce non-essential analytics, advertising or similar technologies, we will update this policy and request consent where required before using them.

7. The SeenIt app

The app holds each customer's catalogue and details of the users invited to that account.

Customer catalogues are logically separated. We do not make one customer's catalogue available to another customer unless authorised by the relevant customer or required by law.

We do not use one customer's catalogue to train or improve matching for another customer.

Authorised SeenIt personnel may access account information when reasonably necessary to:

• provide support requested by the customer;
• diagnose or repair a fault;
• investigate a security or misuse concern;
• maintain and improve service reliability; or
• comply with the law.

Access is limited according to role and operational need. We do not routinely review customer photographs for unrelated purposes.

8. Matching and optional AI descriptions

SeenIt uses a customer's own catalogue to suggest potentially similar items. A user must review and confirm a match. SeenIt does not automatically decide the final price of an item.

Where a user requests an optional AI-assisted description, we may send the item photograph and relevant catalogue vocabulary, such as available item types, to our AI provider so it can produce the requested suggestion.

We do not intentionally include the customer's user list, physical address or unrelated account information in that request. Users must review AI-generated suggestions before saving or relying on them.

These features are intended to assist users, not to make legal or similarly significant decisions about people. We do not use app information to carry out solely automated decision-making that produces legal or similarly significant effects on individuals.

9. Who we share personal data with

We share personal data only where reasonably necessary and with appropriate safeguards. Recipients may include:

• hosting, database, storage and backup providers;
• email and authentication providers;
• payment providers, including Stripe;
• AI service providers, including OpenAI, when an optional AI feature is requested;
• security, monitoring, error-reporting and technical-support providers;
• professional advisers such as accountants, auditors, insurers and lawyers;
• regulators, courts, law-enforcement bodies or public authorities where required; and
• a buyer, investor or successor if we restructure, finance or sell all or part of the business, subject to appropriate confidentiality safeguards.

Service providers may use personal data only for the agreed service and under appropriate contractual obligations.

We may make a current list of material app sub-processors available on request or through a published sub-processor page.

Affiliate referrals

Approved affiliates may see enough information to understand whether a referral qualified and what commission was earned. Where possible, we use a customer reference or limited account name rather than disclosing unnecessary information.

Affiliates do not receive access to a referred customer's catalogue, user list, payment-card information or private account activity.

10. International transfers

We aim to store core customer catalogue data in the United Kingdom. However, some providers or their support teams may process personal data in other countries, particularly when payment, email, security or optional AI services are used.

Where UK personal data is transferred outside the United Kingdom to a country that is not covered by UK adequacy regulations, we use an appropriate safeguard where required. This may include the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful transfer mechanism. We also consider whether additional technical or organisational safeguards are needed.

You may contact info@seen-it.uk for more information about the safeguards relevant to a particular transfer.

11. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution requirements.

Typical retention periods are:

These periods may be shortened where the information is no longer needed, or extended where reasonably necessary for a legal obligation, security investigation or legal claim.

Limited copies may remain in encrypted or access-controlled backups until those backups are overwritten in the ordinary course. Backup copies are not used for ordinary business purposes.

When information is no longer required, we delete it or anonymise it so it can no longer identify anyone.

12. Security

We use appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, misuse, alteration or disclosure.

These measures may include:

• encryption in transit;
• access controls and role-based permissions;
• separation of customer accounts;
• logging, monitoring and security updates;
• backup and recovery controls; and
• confidentiality and access requirements for authorised personnel and providers.

No internet service can be guaranteed completely secure. Customers and users must also protect their email accounts and sign-in links and notify us promptly if they suspect unauthorised access.

If we become aware of a personal-data breach, we will investigate it and notify the affected customer, the Information Commissioner's Office or affected individuals where the law requires us to do so.

13. Emails and communications

If you email us, the message and related information will be stored by our email provider and may be retained as described in this policy.

Ordinary email is not always a secure way to send sensitive information. Please do not send passwords, full payment-card numbers or unnecessary sensitive personal data by email. If we need particularly sensitive information, we may provide a more suitable method.

We may send customers and users service messages needed to operate their accounts, including sign-in links, security notices, billing messages and important service updates. These are not marketing messages.

If we send optional electronic marketing, we will provide an unsubscribe method and use consent or another lawful basis where permitted. Unsubscribing from marketing will not stop essential account or service communications.

14. Children

SeenIt is not directed at children under 13, and nobody under 13 may be invited to use the app.

Customers that allow users aged 13 to 17 to access SeenIt are responsible for ensuring that this is lawful, appropriately supervised and consistent with their safeguarding and privacy responsibilities.

If you believe we have collected personal data from a child inappropriately, contact info@seen-it.uk so that we can investigate and take appropriate action.

15. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you the right to:

• ask for access to your personal data;
• ask for inaccurate information to be corrected;
• ask for personal data to be deleted;
• ask us to restrict how personal data is used;
• object to processing based on legitimate interests or to direct marketing;
• receive certain information in a portable format;
• withdraw consent where processing relies on consent; and
• challenge certain solely automated decisions.

These rights are not absolute and may not apply in every situation.

Where SeenIt is the controller, you can make a request by emailing info@seen-it.uk. We may need to verify your identity before acting on a request. We will normally respond within one month, although the law permits more time for particularly complex or numerous requests.

Where the customer is the controller, you should normally send your request to that customer. If you send it to us, we may pass it to the customer and assist it in responding.

You will not normally have to pay to exercise your rights. A reasonable fee may be charged, or a request refused, where the law allows this because a request is manifestly unfounded or excessive.

16. Complaints

Please contact us first if you have a concern about how we use personal data. We will try to resolve it.

You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection:

ico.org.uk/make-a-complaint

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

If you live outside the UK, you may also have the right to contact the data-protection authority where you live.

17. Changes to this policy

We may update this Privacy Policy to reflect changes to SeenIt, our providers, our data practices or the law.

For a material change, we will provide reasonable notice through the website, app, email or another appropriate method. The current version will always be published on this page and identified by its date. This version is dated 1 September 2026.

18. Contact us

For privacy questions, requests or complaints, contact:

Revived Leads Limited, trading as SeenIt
Suite 1 & 2, The Business Centre
Innsworth Technology Park
Gloucester
United Kingdom
GL3 1DL

info@seen-it.uk

Price it once. Your volunteers never have to ask again.