Barryelec policy record
Privacy Policy
This Privacy Policy explains how BARRY STEWART ELECTRICAL LTD., trading online as Barryelec, handles personal data when you use barryelec.shop. We act as the data controller for the website, account, support, and billing relationship.
1. Who is responsible
Data controller: BARRY STEWART ELECTRICAL LTD., 8 King Street New Elgin IV30 6BX. Contact: support@barryelec.shop or +44 7497462672. Privacy complaints may be sent to the same contact details. UK residents may also complain to the Information Commissioner’s Office.
2. What we collect
- Account and subscription data, including name, email, plan, credits, transaction references, and account history.
- Household record inputs, such as room, visible issue, timeline, urgency, photo descriptions, and question goals.
- Generated maintenance drafts, question lists, photo checklists, version notes, and export requests.
- Files you choose to upload if an upload feature is available, plus technical metadata needed to process them.
- Support and contact content, property type, consent choices, and correspondence history.
- Device, browser, IP address, security events, cookie choices, and usage events needed to operate and protect the service.
- Payment status and limited billing identifiers from payment providers. We do not receive or store full payment card numbers.
3. Collection sources
We collect data directly from forms and workspace interactions, automatically through essential server and security logs, from your browser storage when you choose to save a record locally, and from payment, hosting, email, analytics, and AI processing providers acting for the service.
4. Why we use data and legal bases
- Contract: provide record generation, exports, credits, subscriptions, receipts, cancellation, and support.
- Legitimate interests: secure the service, prevent abuse, diagnose failures, improve reliability, and respond to enquiries.
- Consent: optional analytics, non-essential cookies, and direct marketing where required.
- Legal obligation: financial records, tax, fraud prevention, and responses to lawful requests.
We do not use user inputs, generated records, or uploaded files to train our own models. A contracted AI provider may process inputs solely to return the requested output under its service terms and our instructions.
5. AI inputs, outputs, files, and browser-saved records
Input is sent to our server to create a structured result. Where an external AI processor is used, relevant text or files may be transmitted to that processor. Do not include passwords, payment credentials, identity documents, private keys, medical details, or information you do not have permission to share.
Records saved through the “Save to workspace” control are stored in the current browser’s local storage and remain there until you remove them or clear browser data. Server-generated PDF content is prepared for download and is not intentionally retained after the response completes. Operational logs may retain request timing, status, and security metadata without retaining the full record content.
6. Who we share data with
We use processors for hosting and content delivery, payment processing through Stripe or PayPal where offered, transactional email, customer support, security monitoring, analytics with consent where required, file delivery, and AI output processing. Processors receive only data reasonably needed for their task and are subject to contractual and security controls. Payment providers process card details on their own secure pages; we receive status, transaction references, plan, amount, currency, and limited billing details, not full card numbers.
7. International transfers
Some processors may handle data outside the United Kingdom or European Economic Area. Where required, we use adequacy decisions, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, and supplementary safeguards appropriate to the transfer.
8. How long we keep data
- Account and subscription records: while the account is active and generally up to 24 months afterward, unless law requires longer.
- Transaction and tax records: normally six years after the relevant financial year.
- Support and contact records: normally 24 months after the enquiry closes.
- Security logs: normally up to 12 months.
- AI request content held by our application: only for processing and short operational troubleshooting, ordinarily no more than 30 days.
- Browser-saved records: controlled by the user in that browser and not subject to our server retention schedule.
9. Security
We use access controls, encrypted transport, restricted server credentials, payment-provider boundaries, logging, dependency maintenance, and data minimisation. No online service can promise absolute security. Users should remove sensitive details and protect access to their device and billing email.
10. UK and EU GDPR rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent; and complain to a supervisory authority. We may need to verify identity and may retain data required for legal claims, fraud prevention, or financial compliance.
11. CCPA and US state privacy rights
Eligible residents may request to know, correct, delete, or obtain a copy of covered personal information and may appeal certain decisions. We do not sell personal information. We do not share personal information for cross-context behavioural advertising. We do not discriminate for exercising privacy rights.
12. Do Not Sell or Share
Barryelec does not sell personal data or share it for cross-context behavioural advertising. If our practices change, we will provide the notices and controls required by applicable law before that change applies.
13. Cookies and analytics
Essential cookies support admin and security functions. Browser local storage supports saved household records. Optional analytics or preference cookies are used only under the choices described in the Cookie Policy. You can update browser storage and cookie choices through browser controls and any consent control we provide.
14. Automated decisions and children
Generated text helps organise records and does not make legal or similarly significant decisions about users. The service is not directed to children under 18. A parent, guardian, or responsible adult should manage any household record involving a minor and should avoid unnecessary personal details.
15. Contact and complaints
Send privacy requests to support@barryelec.shop with the subject “Privacy request”. You may also write to 8 King Street New Elgin IV30 6BX. We will respond in line with applicable law and may ask for information needed to verify the request.