We recommend that you read this Privacy Notice in full to ensure you are completely informed about your personal data. However, if you only want to access a particular section of this Privacy Notice, then you can click on the relevant link on the left to jump to that section.
This Privacy Notice only applies to the personal data that we collect through our website at www.shop-owl.co.uk ("Website") it is intended for individuals residing in the United Kingdom. Shop-Owl respects your right to privacy. This Privacy Notice explains who we are, how we collect, share and use personal data about you and how you can exercise your privacy rights. Scale Media, Inc. is the controller of your data. To understand the terms under which you use the services that we offer, please read our Terms of Service https://shop-owl.co.uk/page/terms-and-conditions-so.
If you have any questions or concerns about our use of your personal data, then please contact us using the contact details under the “How to contact us” heading below.
Return to top
1. What does Shop-Owl do?
Shop-Owl is a service that analyses reviews of products on websites such as Amazon.co.uk, and is headquartered in the USA.
For more information about Shop-Owl and how our services work, please see the “How it Works” section of our Website at https://shop-owl.co.uk/about.
Please note that the Website is for informational purposes about Shop-Owl products sold on Amazon.co.uk. Shop-Owl does not look to collect any information from Website visitors, except as is set out in this notice, which includes information that is technically necessary to display the Website to visitors and to facilitate any direct communications you have with us.
Return to top
2. Personal data we collect and process
a) The personal data we collect from you, either directly or indirectly, will depend on how you interact with us and with our Website. We collect personal data about you from the following different sources:
Information that you provide directly
We collect personal data directly from you when you choose to provide us with this information directly (such as data collected via customer service communications).
Information that we collect indirectly
We collect your personal data indirectly, including through automated means from your device when you use our Website. Some of the information we collect indirectly is captured using cookies and other tracking technologies, as explained further in the "Cookies and similar tracking technology" section below.
Return to top
b) The table below describes the categories of personal data we collect from and about you through our activities on our Website and communications we have with you.
| Personal Data Description |
Source |
| Identity and Contact Data such as your name, telephone and email address should you chose to contact us directly. |
Directly from you |
| Device Data collected using log files, including your IP address, browser type, internet service provider, referring/exit pages and date/time stamps, data and time of access, amount of data sent in bytes, source/reference from which you came to the page and operating system. |
Automatic collection |
We do not collect any sensitive personal data about you, such as health-related information or information about your race or ethnicity, or sexual orientation.
Return to top
3. How we use your personal data (our purposes) and our legal basis for processing it
We use the personal data that we collect from and about you only for the purposes described in this Privacy Notice or for purposes that we explain to you at the time we collect your information. Depending on our purpose for collecting your information, we rely on one of the following legal bases:
Legitimate interests – we will use or disclose your personal data for the legitimate business interests of either Shop-Owl or a third party, but only when we are confident that your privacy rights will remain appropriately protected. If we rely on our (or a third party's) legitimate interests, these interests will normally be to: operate, provide and improve our business, including our Website; communicate with you and respond to your questions; detect or prevent illegal activities (for example, fraud); and/or to manage the security of our IT infrastructure, and the safety and security of our employees, customers, vendors and visitors. Where we require your data to pursue our legitimate interests or the legitimate interests of a third party, it will be in a way which is reasonable for you to expect as part of the running of our business and which does not materially affect your rights and freedoms. We have identified below what our legitimate interests are; or
Legal obligation – there are instances where we must process and retain your personal data to comply with laws or to fulfil certain legal obligations.
The following table provides more details on our purposes for processing your personal data and the related legal bases. The legal basis under which your personal data is processed will depend on the data concerned and the specific context in which we use it.
| Purpose/Activity |
Type of personal data |
Lawful basis for processing including basis of legitimate interest |
| Respond to your communications regarding your enquiries, requests or complaints. |
Identity and Contact Data |
As necessary for our legitimate interests to communicate with you. |
| Keep our business, including our Website secure and address threats to your safety or the safety of others; to detect and prevent fraud. For example, online we use malware and spyware monitoring tools to detect suspicious activity and algorithms to detect unauthorised access. |
Device Data |
Necessary for our and our third parties’ legitimate interests (to operate and provide our business, including our Website; to detect or prevent illegal activities (e.g. fraud) and/or to manage the security of our IT infrastructure, and the safety and security of our employees, customers, vendors, and visitors). |
| To administer and maintain our Website and our IT systems (including monitoring, troubleshooting, data analysis, testing, system maintenance, repair and support, reporting and hosting of data). |
Device Data |
Our and our third parties' legitimate interests (to operate, provide and improve our business, including our Website; to detect or prevent Illegal activities (e.g. fraud) and/or to manage the security of our IT infrastructure). |
| Comply with legal and regulatory obligations to which we are subject, including our obligations to respond to your requests under data protection law. |
Identity and Contact Data Device Data |
Legal obligation. |
| Protect our legal rights (including where necessary, to share information with law enforcement and others), for example to defend claims against us and to conduct litigation to defend our interests. |
Identity and Contact Device Data |
Our legitimate interests to protect our business interests. |
Return to top
4. Who we share your personal data with
We share your personal data with the following categories of recipients:
• our group companies, who provide data processing services necessary to provide you with our goods and services (for example, to support the delivery of, provide functionality on, or help to enhance the security of our Website), or who otherwise process personal data for purposes described in this Privacy Notice;
• third party service providers and partners who provide data processing services to us as necessary to provide you with our Website (to support with web hosting and to help enhance the security of our Website), or who otherwise process personal data for purposes described in this Privacy Notice.
• third party services when you use third party shopping services linked through our Website, for example Amazon.co.uk,, your personal data will be collected by the provider of such services. Please note that when you use third party services, their own terms and privacy notices will govern your use of their services. We are not responsible for your use of third party services, please consult each third party site's privacy notice;
• any competent law enforcement body, regulatory, government agency, court or other third party (such as our professional advisers) where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
• a buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal data only for the purposes disclosed in this Privacy Notice; or
• any other person with your consent to the disclosure (obtained separately from any contract between us).
Return to top
5. Cookies and similar tracking technology
We use cookies and similar tracking technology (collectively, “Cookies”) to collect and use personal data about you.
Cookies are small data files that are placed on your computer or mobile device when you visit a website. Our server log files collect Device Data (including your IP address) as part of an automated process for the regular function of the Website. We only deploy essential website cookies and these are strictly necessary for troubleshooting and maintaining the website and server, and for monitoring and maintaining website security. Because these cookies are strictly necessary to deliver the Website to you, you cannot refuse them.
When visiting our website, we collect the Device Data that is technically necessary for us to display the website to you.
Return to top
6. How we keep your personal data secure
We use appropriate technical and organisational measures to protect the personal data that we collect and process about you. The measures are designed to provide a level of security appropriate to the risk of processing. Encryption technologies are used when receiving and transferring sensitive information that is exchanged with our website to continuously protect your information.
Return to top
7. International data transfers
In some cases, where your personal data is transferred to another Scale Media Inc company or third parties, it is processed in countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective).
Specifically, our Website servers are located in the USA, and our group companies are located in the USA. Our third party service providers and partners operate around the world. This means that when we collect your personal data we will process it in any of these countries.
Where we transfer your personal data to countries and territories outside of the European Economic Area and the UK, which have been formally recognised as providing an adequate level of protection for personal data, we rely on the relevant “adequacy decisions” from the European Commission and “adequacy regulations" (data bridges) from the Secretary of State in the UK.
Return to top
8. Data retention
We retain the personal data we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements). The specific retention periods depend on the nature of the information and why it is collected and processed and the nature of the legal requirement. For example: to deal with and resolve requests and complaints and for litigation or regulatory matters (for example we would retained your information if there was an ongoing legal claim and the information was relevant to the claim. This information would be retained until the legal claim had been concluded.).
When we have no ongoing legitimate business need or legal reason to process your personal data, we will either delete or anonymise it or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible.
Return to top
9. Your data protection rights
Individuals located in the UK and EEA have the following data protection rights. To exercise any of them see specific instructions below or contact us using the contact details provided under the “How to contact us” heading below.
• You may access, correct, update or request deletion of your personal data.
You have the right to complain to a supervisory authority about our collection and use of your personal data. For more information, please contact your local supervisory authority. Contact details for supervisory authorities in Europe are available here and for the UK here. Certain supervisory authorities may require that you exhaust our own internal complaints process before looking into your complaint.
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
Return to top
10. Updates to this Privacy Notice
We may update this Privacy Notice from time to time in response to changing legal, regulatory, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if, and where, required by applicable data protection laws.
You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.
Return to top
If you have any questions or concerns about our use of your personal data, please contact us using the following details: support@shop-owl.com.
