Privacy Policy

1. Introduction

(a) Inreal Industries Limited ("we", "us", or "our") is a company registered in England and Wales. We are the data controller responsible for your personal data collected through our website at www.inreal.co (the "Site").

(b) We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

(c) If you have any questions about this policy or how we handle your data, please contact us at hello@inreal.co.

2. What Data We Collect

(a) Account Information: When you create an account or place an order, we collect your name, email address, and authentication credentials.

(b) Order and Payment Information: We collect your delivery address, order details, and payment information. Payments are processed by our third-party payment provider; we do not store your full card details.

(c) Images You Upload: When you use our service, you upload photographs which we use to create your custom Figurines. These images are stored securely and processed as described in Section 5 below.

(d) Technical Data: We automatically collect information such as your IP address, browser type, device information, and browsing activity on the Site through cookies and similar technologies.

(e) Communications: If you contact us, we may keep a record of that correspondence.

3. How We Use Your Data

We use your personal data for the following purposes and on the following legal bases under the UK GDPR:

(a) To fulfil your order (contractual necessity): processing your images, creating your Figurines, handling payment, and arranging delivery.

(b) To manage your account (contractual necessity): creating and maintaining your account, authenticating your identity, and providing customer support.

(c) To improve our services (legitimate interest): analysing how the Site is used, troubleshooting issues, and developing new features.

(d) To communicate with you (legitimate interest or consent): sending order updates, responding to enquiries, and, where you have opted in, sending marketing communications.

(e) To comply with legal obligations (legal obligation): where we are required to retain or disclose data by law.

4. Cookies and Tracking

(a) We use cookies and similar technologies to operate the Site, remember your preferences, and understand how you interact with our services.

(b) Essential cookies are required for the Site to function (e.g. authentication and session management). Analytics cookies help us understand usage patterns and improve the Site.

(c) You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Site.

5. Your Uploaded Images

(a) Images you upload are stored securely using encrypted cloud storage and are used solely for the purpose of creating your Figurines, unless you have given us separate consent for marketing use.

(b) Your images may be processed by automated systems, including AI-based tools, to generate a 3D model of your Figurine. This processing is necessary to perform our contract with you.

(c) We retain your uploaded images for a reasonable period after order completion to handle any support queries or reorders, after which they are deleted. You may request earlier deletion by contacting us.

6. Who We Share Your Data With

(a) We may share your personal data with trusted third parties who assist us in operating our business, including:

(b) Cloud and hosting providers (e.g. Amazon Web Services) who store and process data on our behalf.

(c) Payment processors who handle transactions securely.

(d) Delivery partners who fulfil and ship your orders.

(e) We will never sell your personal data to third parties. All third-party processors are bound by data processing agreements and are required to handle your data in accordance with UK data protection law.

7. International Transfers

(a) Some of our service providers may process your data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner's Office (ICO), to protect your data.

8. Data Retention

(a) We retain your personal data only for as long as necessary to fulfil the purposes set out in this policy, or as required by law.

(b) Account data is retained for the lifetime of your account and for a reasonable period afterwards. Order data is retained for up to 6 years for tax and legal compliance.

(c) Uploaded images are retained for a limited period after order completion and then securely deleted.

9. Your Rights

Under UK data protection law, you have the following rights:

(a) Right of access: You can request a copy of the personal data we hold about you.

(b) Right to rectification: You can ask us to correct any inaccurate or incomplete data.

(c) Right to erasure: You can ask us to delete your personal data in certain circumstances.

(d) Right to restrict processing: You can ask us to limit how we use your data.

(e) Right to data portability: You can request your data in a structured, commonly used, machine-readable format.

(f) Right to object: You can object to our processing of your data where we rely on legitimate interest.

(g) Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at hello@inreal.co. We will respond within one month.

10. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

13. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.