Visualiser Privacy Notice

Who is responsible

One Stop Creative Agency Limited, trading as Screenli, is the controller of your information. We are registered in England and Wales with company number 11417088, and our registration number with the UK's data protection regulator (the ICO) is ZB015275. Contact us at info@screenli.co.uk or on +44 7838 279 496.

What we collect

• Your full name, email address and business name.
• Your answers about your business and your screens, including your type of business and your town.
• The website and listing links you give us, with the public text and images we read from them. That text can include names of people who appear on your website, such as your staff.
• Photos and logos you upload. We save photos again as new files, which removes hidden details such as location data.
• Your phone number and the best time to call, if you ask us to call you, and any message you send with a request.
• Your choice about marketing emails, with the date and the wording you saw.
• A record of the terms and notice you accepted and of your confirmation that you can use your photos, with the date and a shortened form of your IP address.
• Security and usage records, such as a shortened or coded form of your IP address, when you used the service and the result of our bot check.

Why we use it, and our lawful basis

• To make your visualisation and send it to you, because you asked us to. This is in our legitimate interests in answering your request and showing your business what a screen could look like. If you are a sole trader or a partner, it is also a step you asked us to take before a possible contract.
• To keep the service secure and stop misuse, for example with bot checks and usage limits. This is in our legitimate interests.
• To answer a quote or call request you make. This is in our legitimate interests, and a step you asked us to take.
• To send you marketing emails, only if you tick the box for them. You can withdraw that consent at any time with the link in any marketing email, or by emailing us.
• To keep a record of your choices and of what we delete. This is in our legitimate interests, and sometimes a legal obligation.

Where we rely on legitimate interests, you can ask us for details of how we balanced them against your rights.

How AI is used

We use Anthropic's Claude AI models to read the text from your website, check it for anything unsafe, pick out short facts such as your services and draw the concepts. Claude sees only text: your answers, your business name and town, and text from your website. It never sees your email address, phone number, photos or logos.

Anthropic may not use the information we send to train its models. It deletes it within 30 days, except content flagged under its usage policy, which it may keep for up to 2 years.

A person on our team reviews concepts before they reach you. The concepts are illustrations, and we do not use them, or any automated check, to make decisions about you that have legal or similarly significant effects. If you think one of our automated checks has wrongly refused or limited your request, email us and a person will look at it.

Who helps us run it

We share information only with the providers that run parts of the visualiser for us:

• Anthropic, for the AI steps described above.
• Firecrawl, which reads the public web pages you name.
• Cloudflare, which stores uploads and concepts, runs our bot check, shows your concept previews and checks them in a browser. Cloudflare also uses information from the bot check to improve its bot detection, for its own purposes.
• Vercel, which hosts our website and the code that runs the visualiser.
• Supabase, which hosts our database.
• Resend, which sends your code, links and updates.

We may also share information with our professional advisers, with a company that takes over the Screenli business, or where the law requires it.

We do not sell your information.

Information leaving the UK

Some of these providers are based in the United States or use services there. Anthropic, Vercel, Cloudflare, Resend and Firecrawl process information in the United States, and Supabase's support teams may access it from outside the UK. Where your information leaves the UK, we rely on the safeguards UK data protection law provides: the UK-US data bridge where the provider is certified under it, or the International Data Transfer Addendum to the EU standard contractual clauses. You can ask us for details.

How long we keep it

• Email links and codes: 20 minutes, and our record of them for seven days.
• Your session on this device: 7 days, or 30 days once you have confirmed your email address.
• Requests that were never confirmed: 30 days. Uploads made before you confirm your email: seven days.
• Your photos: 30 days after your concepts are ready.
• Requests we check before starting: if we have not approved one within seven days, it lapses. We delete a request we did not go ahead with 90 days after it began waiting.
• If we cannot make your concepts: your photos 30 days later, and the rest of your request after 90 days.
• Text we read from your website: 30 days.
• Your answers and concepts: 90 days. You can view the concepts for the first 30.
• Your contact details, if you do not become a customer: 12 months after your last activity.
• Security records: 12 months, with IP details shortened after 30 days.
• Emails we send you are also kept by our email provider for 30 days.
• If you ask us to stop emailing you, we keep a coded copy of your email address so we can respect that.
• If you become a customer, we keep what we need under our customer terms.

Your rights

You can ask us for a copy of your information, ask us to correct or delete it, ask us to restrict or stop using it, object to our using it, and ask us to move it to another provider. Email info@screenli.co.uk. You can also delete your visualisation yourself from your results page.

If you are unhappy with how we use your information, please tell us first at info@screenli.co.uk, with "Data protection complaint" in the subject line. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay. You can also complain to the UK's data protection regulator, the Information Commission (known as the ICO), at ico.org.uk.

Cookies

The visualiser sets one essential cookie that keeps you signed in to your visualisation. Other sites cannot read it, and it lasts 7 days, or 30 days once you have confirmed your email address. It also stores a small note in your browser that you have started a visualisation. Cloudflare's bot check may store information needed for the check. We only use analytics cookies if you accept them in the cookie bar. Our Cookie Notice has the details.

Changes to this notice

We will update this notice when our use of your information changes. The version and date at the top show which notice applies.