Privacy Policy

1. Introduction

Priclet ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our iPhone valuation API service and website.

We are based in London, United Kingdom, and act as the data controller for the purposes of UK data protection legislation.

2. Information We Collect

2.1 API Usage Data

When you use our API services, we may collect:

• Device information submitted for valuation (model, condition, storage capacity)
• API usage statistics and performance metrics
• IP addresses and request timestamps
• Authentication tokens and API keys

2.2 Account Information

For business customers, we collect:

• Company name and business details
• Contact information (name, email, phone number)
• Billing and payment information
• Usage volume and pricing tier information

2.3 Website Usage

When you visit our website, we may collect:

• Browser type and version
• Operating system
• Pages visited and time spent on our site
• Referral sources

3. How We Use Your Information

We use your information to:

• Provide and maintain our iPhone valuation API service
• Process your requests and generate pricing estimates
• Manage your account and billing
• Improve our services and develop new features
• Communicate with you about your account and our services
• Comply with legal obligations
• Detect and prevent fraud or abuse

4. Legal Basis for Processing

Under UK data protection law, we process your personal data on the following legal bases:

• Contract Performance: To fulfill our contractual obligations in providing API services
• Legitimate Interests: To improve our services, prevent fraud, and conduct business operations
• Legal Compliance: To comply with applicable laws and regulations
• Consent: Where you have given specific consent for certain processing activities

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party companies that help us operate our business (hosting, payment processing, analytics)
• Legal Requirements: When required by law, court order, or regulatory request
• Business Transfers: In connection with a merger, acquisition, or sale of assets

All third-party service providers are contractually bound to protect your data and use it only for specified purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Specifically:

• API usage data: 12 months after the end of your subscription
• Account information: 7 years after account closure (for tax and accounting purposes)
• Device valuation requests: Not stored beyond processing requirements

8. Your Rights

Under UK data protection law, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent

To exercise these rights, please contact us at privacy@priclet.com.

9. Cookies and Tracking

Our website uses essential cookies to ensure proper functionality. We do not use tracking cookies or third-party analytics services that collect personal data without your consent.

10. International Transfers

Your personal data may be transferred to and processed in countries outside the UK. When we do this, we ensure adequate protection through:

• Adequacy decisions from the UK government
• Standard contractual clauses approved by UK authorities
• Other appropriate safeguards recognised under UK law

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on our website and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters, at ico.org.uk.