The short version. Your cable descriptions are not used to train any model. Nothing is sold to anyone. Nothing is used for advertising. No profiling and no automated decision with legal effect is carried out. You can get a copy of everything held about you, or have it deleted, by sending one email.
Who is responsible
CHARLY COMTEX LTD, trading as Whichcable, is the data controller for the personal data described here. Company details are on the legal information page. Questions about data go to support@charlycomtex.shop. There is no statutory obligation on this business to appoint a data protection officer, and none has been appointed; the email address above reaches the person who is responsible.
What is collected, and on what basis
| Data | Why | Lawful basis | Kept for |
|---|---|---|---|
| Email address and password hash | To give you an account and let you sign in | Performance of a contract | Until you delete your account, then 30 days |
| What you type about a cable | To produce your reading; on paid plans, to save your own list | Performance of a contract | Until you delete it; free plan readings are not stored beyond your session |
| Plan, billing period and payment status | To take payment and to know what you are entitled to | Performance of a contract | 7 years, as required by tax law |
| Support emails | To answer you and to check we did | Legitimate interests — answering customers | 3 years |
| Server logs (IP address, time, page) | Security, abuse prevention and diagnosing faults | Legitimate interests — keeping the service up and safe | 30 days |
| Measurement of how the site is used | To see which parts of the site work | Consent — only if you accept | 14 months |
No special category data is asked for and none should be sent. Please do not put anything sensitive into the description box — it is a box for describing a cable.
Training
What you type is not used to train, fine-tune or evaluate any model, ours or anyone else’s. It is used to produce your reading and, on a paid plan, to keep your own list for you. Where a third-party model provider is used, it is used under terms that prohibit the provider from training on the content sent to it.
Who your data is shared with
Only with the suppliers needed to run the service, each under a written contract:
- A hosting and content-delivery provider, to serve the site.
- A database and authentication provider, to hold your account and your saved readings.
- A payment provider, to take payment. We never receive or store your full card details.
- An email provider, to send account, billing and support email.
- A model provider, where a reading is produced with automated help, under no-training terms.
Nothing is sold, rented or handed to data brokers or advertisers. Data is disclosed to a public authority only where the law requires it.
International transfers
Some suppliers process data outside the United Kingdom. Where they do, the transfer is protected by either the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the European Commission’s standard contractual clauses, together with a transfer risk assessment. Where UK adequacy regulations cover the destination country, we may rely on those instead. A copy of the mechanism used for any particular supplier is available on request.
Your rights
Under the UK GDPR and the Data Protection Act 2018 you have the right to:
- be told what is held about you and get a copy of it;
- have inaccurate data corrected;
- have data erased, where the reason for holding it has gone;
- restrict how it is used while a dispute is sorted out;
- receive the data you gave us in a portable form;
- object to processing based on legitimate interests;
- withdraw consent at any time, where consent was the basis — withdrawing it is as easy as giving it.
Send one email to support@charlycomtex.shop. You will get a response within one month, free of charge. No reason has to be given.
Complaining to the regulator
You have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, if you think your data has been handled wrongly. The ICO can be reached at ico.org.uk/make-a-complaint, by telephone on 0303 123 1113, or by post at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. You are welcome to raise it with us first, but you do not have to.
Automated decision-making
Producing a reading involves an automated step, but it produces a reference and not a decision about you. No decision producing legal effects concerning you, or similarly significantly affecting you, is made by automated means. There is no profiling.
Security
Traffic is encrypted in transit. Passwords are stored hashed and never in readable form. Access to production data is limited to those who need it. If a breach occurs that is likely to result in a risk to your rights, the ICO is told within 72 hours and you are told without undue delay.
Children
This service is not for anyone under 18. If we learn that an account belongs to a child, it is closed and the data deleted.
Changes
If this notice changes materially, account holders are told by email before the change takes effect. The date at the top always reflects the current version.