Privacy Policy

This Privacy Policy explains how Coding Warehouse Limited ("we", "us", "our") collects, uses and protects your personal data when you visit our website or use the Itemise app (the "Service"). We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Coding Warehouse Limited is the data controller responsible for your personal data. We are a company registered in England and Wales (company number: 11913265), with our registered office at:

Coding Warehouse Limited
1007 London Road
Leigh-On-Sea
Essex
SS9 3JY
United Kingdom

If you have any questions about this policy or your data, contact us at hello@itemise.co.

What data we collect

Contact

When you get in touch with us (for example by email), we collect your name (if you provide it), your email address, and the contents of your message.

Photos and content you submit in the app

When you use Itemise, you upload photos of clothing and items so the Service can generate listing content. To do this, your photos are sent to our AI provider, OpenAI, for processing.

We do not store your photos on our own servers — we pass them to OpenAI to generate your listing and do not keep a copy ourselves. Your generated listing drafts are stored on your device.

Once your photos reach OpenAI, they are handled under OpenAI's own terms and privacy policy, which are outside our control. OpenAI states that data submitted through its API is not used to train its models and is retained only temporarily for abuse monitoring before deletion; however, we cannot guarantee how OpenAI handles your data beyond what they set out in their own policies.

Account data

When you create an Itemise account, we collect your email address, identifiers from your sign-in provider, and usage information such as how many listings you have generated. We use this to operate your account and apply free allowances.

Technical and usage data

Like most websites and apps, we may automatically collect limited technical information such as your device type, browser, approximate location (derived from your IP address) and how you interact with the Service. We use this to keep the Service secure and working properly.

Analytics

We use PostHog (hosted in the EU) to understand how Itemise is used — screens and pages viewed, buttons tapped, features used, and inputs you provide to generate listings (such as descriptive hints) — linked to your account where you are signed in. Session recordings are captured with all text input and all photos masked: recordings never contain your photo content or anything you type. We may use PostHog in the same way on our website as well as in the app.

How we use your data and our lawful basis

• To respond to your enquiries — based on our legitimate interests in communicating with you and supporting the Service.
• To provide the Service (analysing your photos and generating listings) — based on the performance of a contract with you and our legitimate interests in operating the app.
• To keep the Service secure and improve it — based on our legitimate interests in running a safe, reliable product.
• To understand how the Service is used (analytics, as described above) — based on our legitimate interests in understanding and improving our product.
• To prevent fraud and abuse — based on our legitimate interests in preventing abuse of free allowances and keeping the Service fair for everyone.
• To comply with legal obligations — where the law requires us to retain or disclose information.

Who we share your data with

We do not sell your personal data. We share it only with trusted service providers (processors) who help us run the Service, including:

• OpenAI — analyses the photos you submit to generate listing content.
• PostHog — provides product analytics and masked session recordings, hosted in the EU.
• RevenueCat — manages subscriptions, purchase records and entitlements on our behalf.
• Our hosting and infrastructure providers — host the website and app services.
• Apple — where you join via TestFlight or the App Store.

These providers act on our instructions and are bound to protect your data. We may also disclose data if required by law or to protect our legal rights.

Fraud prevention

When you delete your account, we retain a minimal record — your email address, sign-in provider identifiers, and usage counts — to prevent abuse of free allowances (for example, repeatedly creating new accounts to claim free usage). This record is not used for any other purpose.

International transfers

Some of our providers (such as OpenAI and RevenueCat) are based outside the UK, including in the United States. Where your data is transferred outside the UK, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses to ensure it remains protected. Analytics data processed by PostHog is hosted in the European Union, which the UK recognises as providing adequate protection.

How long we keep your data

• Photos you submit — not retained after your listing is generated.
• Account data — kept while your account is active. When you delete your account, your data is deleted except for the minimal fraud-prevention record described above and usage records (such as generation counts, processing costs and generated listing titles) retained for service accounting and abuse prevention.
• Other data — kept only as long as necessary for the purposes described above or to meet legal requirements.

Cookies

Our website does not use advertising or third-party tracking cookies. If you accept cookies via the banner on our website, PostHog analytics sets first-party cookies and uses local storage to recognise repeat visits and measure how the site is used. If you decline, analytics runs without storing anything on your device — we still count visits, but cannot recognise you between pages or visits. We remember your choice itself in your browser's local storage; clear your browser data to be asked again. We load web fonts from Google Fonts, which means your IP address is shared with Google to deliver those fonts. Any essential cookies used by our providers are limited to making the Service function.

Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate or incomplete data
• Ask us to erase your data ("right to be forgotten")
• Restrict or object to how we process your data
• Request portability of the data you provided to us
• Withdraw consent at any time, where we rely on consent

To exercise any of these rights, email hello@itemise.co. We will respond within one month.

Complaints

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We'd appreciate the chance to address your concerns first, so please do get in touch with us.

Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure, however, so we cannot guarantee absolute security.

Children

Itemise is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be communicated where appropriate.