PRIVACY NOTICE · VERSION 2026-10-13 · LEGAL REVIEW REQUIRED

Privacy Notice

This notice describes the intended handling of personal information by IRIS.EE. Before launch, confirm the actual business identity, contact details, hosting locations, processors, retention periods and applicable legal requirements.

Information we collect

Depending on how you use the platform, we may collect name, email address, phone number, username, delivery address, account and consent records, order and payment status/reference, support messages, wholesale application information, business evidence and identity documents where needed for restricted trade access.

Photos, device permissions and location

Profile photos are optional. When you choose to add or change an avatar, the app opens the device’s standard file/photo picker so you can select a picture. We do not need continuous or background access to your photo library, and the app should not request broad photo-library permission just to upload a selected image. You can use the service without adding an avatar.

We do not need your device GPS location for order tracking. Order tracking is based on order status and fulfilment updates. Where delivery requires an address or delivery instructions, you enter those details yourself. The app should not request precise, approximate or background location permission for the current feature set. We do not request camera or microphone access; if a future feature genuinely requires one, we will explain the feature first and request the minimum permission only when it is used.

Why we use it

We use information to create and secure accounts; process orders, payment verification, delivery and refunds; respond to support requests; evaluate wholesale access; detect fraud and protect the platform; maintain accounting, tax, audit and legal records; and send operational notifications. Marketing messages should be sent only where an appropriate legal basis or consent exists, with a clear opt-out.

Payment details

Payment is handled through the configured payment provider. IRIS.EE should not store full payment-card credentials or provider secret keys in customer-facing systems. The platform may retain transaction references, status, amount and currency for reconciliation.

Who may receive information

Information may be shared only as necessary with hosting/database providers, payment processors, delivery carriers, suppliers/packers, professional advisers and lawful authorities. Access should be role-limited, documented and protected by appropriate contractual and technical safeguards. We do not sell personal data.

Identity and business documents

Documents submitted for wholesale verification should be stored in private storage, visible only to authorised reviewers, accessed through short-lived links, and deleted or anonymised when the approved retention period ends unless a legal hold applies. Do not upload unrelated sensitive information.

Account deletion and records retained by law

You can initiate account deletion at any time from Account → Privacy & Account Control, or from our public account deletion page. We verify that you control the account before processing a request. We remove or anonymise personal information that is no longer needed, subject to applicable legal obligations, unresolved transactions, fraud prevention, disputes and legal holds. Where transaction, accounting, tax or audit records must be retained, we restrict them to those purposes and do not use retention as a reason to keep unrelated profile data. We will communicate the outcome and any categories of information that must be retained.

Retention and security

We retain each category only as long as needed for its stated purpose, applicable accounting/legal obligations, dispute handling and security. Financial records may need a longer retention period than identity documents. No system can promise absolute security, but access control, encryption, monitoring, backups and incident response should be maintained.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction or a copy of your information, and withdraw consent where consent is the legal basis. Some records may need to be retained for legal or accounting reasons. Submit a request through Account Privacy or use the public account deletion page.

International processing and updates

Service providers may process data in other countries. Any required transfer safeguards and notices must be in place before production. Material changes to this notice should be versioned and communicated; renewed consent should be requested where required.

Before launch, replace this implementation draft with the verified legal business name, working privacy contact, actual processors and international transfer safeguards, approved retention schedule, applicable regulator/contact route, and complaint procedure. This notice must match the final native app SDKs and the answers entered in Apple App Privacy and Google Play Data safety forms.