ThirdRetail
ThirdRetail

Privacy Policy

Last Updated: December 28, 2025

1. Introduction

ThirdRetail ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your data when you use our website or application, in accordance with UK GDPR and the Data Protection Act 2018.

2. Data We Collect

We collect different types of data, classified as follows:

2a. Personal Data (You Own This)

  • Identity Data: first name, last name, username or similar identifier.
  • Contact Data: email address and telephone numbers.
  • Account Data: login credentials, preferences, notification settings.

You have full GDPR rights over this data, including the right to deletion.

2b. Business Analytical Data (Platform Owns This)

  • Product Detection Data: products identified in shelf images.
  • Share of Shelf Metrics: percentage calculations and analytics.
  • Store Performance Data: aggregated scores and benchmarks.
  • Market Intelligence: trends derived from aggregate data.

This data is non-personal and is retained by ThirdRetail to improve our services and provide value to all users.

2c. Technical Data

  • Internet protocol (IP) address, browser type and version
  • Time zone setting and location, operating system and platform
  • Device identifiers and usage patterns

2d. Image Data

Photos of retail shelves uploaded for analysis. We process these images to detect products. If images inadvertently contain personal data (e.g., visible faces), this data is not stored or used.

3. How We Use Your Data

We use your data for the following purposes:

  • Contract Performance: To provide and maintain our Service.
  • Service Improvement: To gather analysis and improve our AI accuracy.
  • Communication: To notify you about changes to our Service.
  • Analytics: To provide aggregate insights to brands and retailers.
  • AI Training: To improve our product detection algorithms using anonymized data.

4. Data Security

We use appropriate security measures including encryption, access controls, and secure data centers (Google Cloud/Firebase). We limit access to your personal data to authorized personnel only.

5. Data Retention

5a. Personal Data

We retain your personal data for the duration of your account plus 30 days. Upon account deletion, personal data is permanently removed.

5b. Business Analytical Data

Anonymized business data (product detections, analytics) is retained indefinitely to maintain historical insights and improve our services. This data cannot identify you personally.

5c. What Happens When You Delete Your Account

  • ✅ Deleted: Your email, name, account preferences, login history
  • ✅ Deleted: Association between you and your scans (anonymized)
  • ⚠️ Retained: Product detection data (cannot identify you)
  • ⚠️ Retained: Aggregate analytics and store performance data

6. Your Legal Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of your personal data.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Erasure: Request deletion of your personal data.
  • Right to Restrict Processing: Request limitation of how we use your data.
  • Right to Data Portability: Request transfer of your data.
  • Right to Object: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at info@thirdretail.com.

7. Data Sharing with Third Parties

7a. Brands

If you are a retailer, brands may receive anonymized aggregate data about their product presence in stores. You can opt out of brand visibility in your privacy settings.

7b. Service Providers

We use trusted service providers (Google Cloud, Firebase, AI services) to process data. These providers are contractually bound to protect your data.

8. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies. See our Cookie Policy for details.

9. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or prominent notice in our Service at least 30 days before the change takes effect.

11. Contact Details

For any questions about this privacy policy or to exercise your data rights: