How we use personal information.

Who is responsible

The data controller is Glimzer Ltd, trading as Seen With Care. Glimzer Ltd is registered in England and Wales under company number 14835559. Registered office: First Floor, Swan Buildings, 20 Swan Street, Manchester, England, M4 5JW. Privacy enquiries: privacy@seenwithcare.co.uk.

Email offers and updates

If you request the 10% first-order discount, MailerLite receives your email address, consent time, form source, offer version and privacy version so it can run double opt-in, send the requested offer and deliver occasional Seen With Care marketing. The subscriber offer is limited to one eligible discounted preorder per confirmed email and ends on 30 September 2026. MailerLite is our marketing-email processor and is the plaintext subscriber ledger. Our application database stores only a keyed pseudonymous email identifier, the MailerLite subscriber identifier and the same consent evidence; it does not store the plaintext marketing email address.

Consent is optional and can be withdrawn at any time using the one-click unsubscribe link in each marketing email. We do not add someone to marketing merely because they place an order, and an unsubscribed, bounced or junk address is never automatically reactivated.

Orders and customer support

For an order we use the contact, delivery and order details needed to take payment, deliver the journal, provide updates, prevent fraud, keep accounting records and handle returns or complaints. Transactional order messages are separate from marketing. Seen With Care records the required acceptance of its Terms and Delivery & Returns policy in versioned checkout metadata before opening payment. Stripe's Checkout Form then collects the checkout email, shipping recipient name, delivery address, any promotion code and payment details. When Apple Pay is selected, it supplies the customer's Wallet email, shipping recipient name, delivery address and payment details to Stripe. Stripe first authorises the payment method without capturing funds; our server then checks the final Stripe-held details from the signed event and either captures an accepted order or cancels the authorisation. The application database stores only a keyed pseudonymous identifier derived from the checkout email and a keyed validation fingerprint to enforce subscriber-offer eligibility; it does not store the plaintext checkout email or delivery address.

To protect checkout and consent forms from automated abuse, our server briefly uses the network address supplied by our hosting provider. Our application does not store the raw network address. It stores only a keyed pseudonymous identifier, a request count and a short time window, and automatically expires each counter no later than 70 minutes after its window begins.

Payments

Payment is handled through Stripe's secure pre-built Checkout Form in the contracting seller’s account. Card and Apple Pay details are entered in Stripe's form and are not received by Seen With Care. Stripe may place a temporary authorisation on the payment method while the final delivery and offer checks run; funds are captured only for an accepted order, and a rejected authorisation is cancelled. The customer's bank may take a short time to remove a released authorisation. Stripe's own privacy information is available during checkout. After an accepted order, our transactional-email service receives the email and delivery details retrieved from Stripe only as needed to send confirmations and delivery updates.

Analytics and advertising technologies

Vercel Web Analytics is active on every page and receives anonymous, aggregated page-view information such as the time, page path, referrer, approximate location and device, operating-system and browser details. Vercel says Web Analytics does not use cookies and discards its visitor-session identifier after 24 hours. Our current Vercel Pro reporting window is 12 months, although Vercel may retain data for longer under its service terms. Vercel’s primary processing facilities are in the United States; its Data Processing Addendum incorporates the UK International Data Transfer Addendum and contractual safeguards for relevant transfers.

If you allow optional analytics, we load Google Analytics 4 to understand page use and the journey towards an order. Google receives page paths without query strings, referrers, approximate location, browser and device information, and allowlisted product, checkout, purchase or email-offer events. We do not send names, email addresses, delivery details, care information, order references or Checkout Session IDs in these events. Google Analytics uses first-party _ga cookies; we configure them not to refresh and to expire after no more than one year. Google signals and advertising personalisation remain disabled, and user-level and event-level data is retained for 14 months.

If you separately allow advertising measurement, a direct Google Ads tag may record a completed purchase using only its GBP value and currency, and the Meta Pixel may record page views, product views or selections, checkout starts, purchases and accepted email-offer requests. We do not include names, contact or delivery information, care information, diagnoses, order references or Checkout Session IDs in these event payloads. Server-side Meta purchase events are disabled because they would require matching data that this website does not send. These advertising technologies stay off before this choice. Future events stop after withdrawal, and the browser removes its stored campaign label. Google advertising personalisation and enhanced conversions remain off. We do not use customer lists, lookalikes, remarketing or health-related audience targeting for the first campaigns.

Choosing “Essential only” leaves Google Analytics, Google Ads and Meta advertising measurement switched off. You can reopen the setting from the footer and withdraw either choice at any time.

Care information

The website is not a place to store journal entries or information about the person being supported. We do not need care notes or health details to sell and deliver the journal.

How long information is kept

Paid order, refund and accounting records are normally kept for six years after the relevant financial year. Unpaid or expired checkout attempts are removed after 30 days. Short-lived request-limit counters expire no later than 70 minutes after their ten-minute window begins. Technical webhook and advertising-delivery records are removed or anonymised after 90 days unless needed to investigate an incident. Consent evidence is kept for six years from the recorded choice or withdrawal. Routine support correspondence is normally removed two years after the enquiry closes, unless a dispute or legal duty requires longer retention.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection, or withdraw consent. You may also complain to the UK Information Commissioner’s Office. Contact us first at privacy@seenwithcare.co.uk if you would like help.