Privacy Policy & Data Processing Governance

1. Data Controller Identification

The data controller responsible for the operational website showscoopteamtons.forum is European Retail Operations Teamtons Ltd (Company Registration Number: 14829104), having its registered office at 72 Great Suffolk Street, London, SE1 0BL, United Kingdom. We operate in strict adherence to the General Data Protection Regulation (EU) 2016/679 (GDPR), the UK Data Protection Act 2018, and applicable international privacy frameworks.

For all inquiries concerning data protection, personal data correction, or information requests, our designated privacy point of contact can be addressed at: [email protected].

2. Information Collected

We collect personal and technical information strictly limited to what is necessary for fulfilling professional operational inquiries, maintaining website functionality, and evaluating resource performance:

• Contact Inquiry Data: When you complete our on-site project communication form, we process your full name, business email address, employer or company affiliation, stated retail project locations, and message contents.
• Technical Network Telemetry: Whenever you browse our pages, web servers automatically register transmission logs containing your IP address (anonymized where feasible), browser user-agent string, operating system architecture, referral URL, and timestamps of requested assets.
• Cookie & Local State Records: We store your explicit cookie consent selections via browser localStorage and essential session identifiers. Detailed breakdowns are documented in our dedicated Cookie Policy.

3. Lawful Bases for Processing

Under Article 6 of the GDPR, our legal bases for processing personal information comprise:

• Legitimate Interests (Art. 6(1)(f)): To operate, safeguard, optimize, and diagnose security anomalies across our web infrastructure, and to respond accurately to enterprise retail installation requests.
• Pre-Contractual Measures (Art. 6(1)(b)): To review project parameters, deployment timelines, and resource availability upon your direct request prior to commercial engagement.
• Consent (Art. 6(1)(a)): For non-essential analytics or performance cookies, captured via explicit, affirmative opt-in mechanisms through our cookie governance banner.
• Legal Obligation (Art. 6(1)(c)): To satisfy statutory auditing, tax, accounting, or regulatory requirements applicable under UK and European corporate law.

4. Third-Party Processors and Hosting Architecture

We do not sell, rent, monetize, or trade your personal data with third parties. Technical infrastructure hosting providers, database backups, and network routing security networks acting on our behalf process data under stringent Data Processing Agreements (DPAs) compliant with standard contractual clauses (SCCs).

Any cross-border transfers outside the European Economic Area (EEA) or the United Kingdom occur exclusively to territories benefiting from recognized adequacy decisions, or under valid Standard Contractual Clauses with robust supplementary technical safeguards.

5. Data Retention Protocols

We retain operational contact inquiries and technical server logs only as long as necessary to fulfill the operational purposes for which they were gathered. Technical server log entries are systematically flushed on a rolling 90-day cycle. Commercial correspondence, project scope estimations, and regulatory records are preserved for a period of up to 6 years to satisfy contractual dispute limitation and statutory audit mandates, after which they are permanently deleted or irreversibly anonymized.

6. Data Subject Rights (GDPR / UK DPA)

As a data subject within the European Union or United Kingdom, you possess enforceable statutory rights:

• Right of Access (Art. 15): Obtain confirmation of whether your data is being processed and receive a clear copy of stored records.
• Right to Rectification (Art. 16): Require immediate amendment of inaccurate or incomplete personal data.
• Right to Erasure ('Right to be Forgotten' - Art. 17): Request deletion of your records where retention is no longer supported by a lawful processing basis.
• Right to Restriction of Processing (Art. 18): Limit processing during verification of data accuracy or lawful challenge.
• Right to Data Portability (Art. 20): Receive your submitted data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): Object to processing predicated upon legitimate interests at any time.

To exercise any statutory right, contact us at [email protected]. We respond to verified data requests within 30 calendar days without administrative fee. If you believe your data has been handled unlawfully, you have the right to lodge a formal complaint with the UK Information Commissioner's Office (ICO) or your domestic European Data Protection Authority (DPA).

7. CCPA / CPRA Disclosures (California Residents)

For individuals residing in California under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA): we do not sell or share personal information for cross-context behavioral advertising. You possess the right to know what personal data categories are collected, request deletion, rectify inaccuracies, and be free from discriminatory treatment for exercising statutory privacy protections.

8. Security Considerations

We implement industry-grade technical and organizational measures (TOMs) including TLS 1.3 cryptographic transit encryption, strict least-privilege administrative access controls, hardened static server environments, and routine vulnerability audits to protect against unauthorized access, destruction, alteration, or disclosure.