Privacy Policy

i spy is the controller responsible for your personal data ("we", "us", or "our"). You can contact us at hello@ispyfinds.com.

The site is not intended for children and we do not knowingly collect data relating to children.

Identity Data: first and last name, previous names, username or similar identifier, marital status, title, date of birth, gender.

Contact Data: email address and telephone numbers.

Technical Data: IP address, device information, browser type, login data, time zone, platform, and analytics cookies.

Profile Data: saved items, moodboards, uploaded photos, preferences, and interactions.

Usage Data: information about how you interact with and use our website, products, and services.

Marketing and Communications Data: marketing opt-ins and preferences.

We do not collect or store payment details. Transactions with external retailers are processed under their own privacy policies.

We also collect aggregated, non-identifying data for analytics (for example, to measure feature usage). Aggregated data does not identify you.

Direct interactions: data you provide in online forms or when contacting us by post, phone, email, or otherwise (e.g., creating an account, uploading photos, joining the waitlist, beta tests, competitions, or surveys, contacting support).

Automated technologies: Technical and Usage Data collected via cookies and similar technologies as you interact with the platform.

Third parties: analytics providers (e.g., Google Analytics, Meta), affiliate networks, advertising or social media platforms may provide aggregated analytics/technical data.

To operate, improve, and personalise the i spy platform, including access to your account, moodboards, and visual features, and to communicate updates and offers.

Legal bases we rely on:

• Contract: to provide your account and core features.
• Legitimate interests: to operate, secure, and improve i spy (e.g., analytics, fraud prevention, relevant updates) balancing your rights and interests.
• Legal obligation: to comply with laws (e.g., record-keeping, regulatory requests).
• Consent: where you opt in (e.g., marketing emails, certain uploads, public moodboards). You can withdraw consent at any time.

Account registration: Identity and Contact data to create your account; retained while the account is active, deleted within 30 days of closure.

Visual search: uploaded images processed with consent, deleted after use (typically within 24 hours); anonymised metadata may be retained for analytics up to 24 months.

Moodboards: uploaded content, Profile, Usage, Technical data; retained while account or moodboard is active; removed on deletion or account closure (backups up to 90 days).

Affiliate redirections: Technical/Usage/transaction metadata to measure performance; retained up to 26 months per affiliate policies; no payment data stored by i spy.

Relationship management: account notices, policy updates, support responses; retained while account active or up to 12 months after inactivity.

Beta tests, surveys, feedback: Identity/Contact/Profile/Usage; retained up to 12 months after completion.

Platform security and operations: Identity/Contact/Technical; logs retained up to 12 months then deleted or anonymised.

Engagement and analytics: Identity/Profile/Usage/Technical/Marketing preferences; retained up to 24 months (aggregated or anonymised data may be kept longer).

Marketing communications: Identity/Contact/Usage/Profile/Marketing preferences; retained until you unsubscribe or withdraw consent.

Campaigns or collaborations: Identity/Contact/Profile/Usage/Marketing; retained as needed for the campaign under contract or legitimate interest.

You receive marketing only if you opt in (e.g., at sign-up or waitlist). You can opt out anytime via the unsubscribe link or emailing hello@ispyfinds.com.

Opting out of marketing does not affect essential service communications.

We may share personal data with service providers supporting the platform (hosting, email delivery, analytics), affiliate and analytics partners (e.g., Awin, Rakuten, Skimlinks, Google Analytics), professional advisers, regulators/authorities where required, or potential acquirers in a business change. Third parties must process data lawfully and only per our instructions.

Some providers are outside the UK. We use safeguards such as adequacy decisions or UK-approved Standard Contractual Clauses/International Data Transfer Addendum to protect your data.

Contact hello@ispyfinds.com for details of safeguards for specific transfers.

We use appropriate technical and organisational measures (secure hosting, encryption where appropriate, access controls, monitoring) to protect data from unauthorised access, loss, misuse, alteration, or disclosure.

Access is limited to authorised team members and trusted providers under confidentiality obligations. We investigate and respond to suspected breaches and will notify users and regulators where legally required.

We keep personal data only as long as necessary for the purposes collected, including running your account, platform functionality, and legal/security requirements. Backup copies may be held for limited periods.

Where data is anonymised for research or statistics, it may be retained indefinitely.

You can request: access, correction, deletion, restriction, objection to processing (including marketing), data portability, and withdrawal of consent where relied upon.

Contact hello@ispyfinds.com to exercise rights. We may need proof of identity and aim to respond within one month. No fee is charged unless a request is repetitive or excessive.

Contact: hello@ispyfinds.com for questions or to exercise rights.

You may complain to the Information Commissioner's Office (ICO) in the UK (www.ico.org.uk). Please contact us first so we can address your concerns.

We may update this policy from time to time. The latest version date is shown above. We will post updates on this page and may notify you of material changes.

Please keep your account information up to date so we can maintain accurate records.

The platform includes links to external retailer or affiliate sites. Once you leave our platform, their privacy practices apply; we are not responsible for their content or security.