Privacy notice

The data controller is the company identified on the legal information page, which operates this service as Seenby. For any data protection question, write to support@picassod.shop.

This notice is given under the UK GDPR and the Data Protection Act 2018. Where the EU GDPR applies to you it applies in the same terms, and the section on California residents below covers the CCPA and CPRA.

We do not collect special category data. We do not ask for, infer or record anything about anyone’s eyesight or colour vision — the service does not do that, and there is no field anywhere in it for it.

Most of the work this service does happens in your browser. Pairing, contrast, luminance, greyscale conversion and the colour-vision transform are arithmetic and they do not need to leave your machine, so for the most part they do not.

We use a small number of processors, each doing one job, each under a written contract:

• A hosting and platform provider, to run the site.
• A database and authentication provider, to store accounts and saved sets.
• A payment service provider, to take payments. Card details go to them and not to us.
• An email provider, to send account, billing and renewal-reminder emails.
• An analytics provider, only if you have consented to optional cookies.

We will disclose data where the law requires it. We will tell you if that happens unless we are prohibited from doing so.

Some of those providers process data outside the UK. Where they do, the transfer is covered either by UK adequacy regulations, or by the UK International Data Transfer Agreement, or by the European Commission standard contractual clauses together with the UK International Data Transfer Addendum, along with a transfer risk assessment.

Write to us if you would like more detail about a particular transfer and we will give it to you.

Under the UK GDPR you have the right to:

• ask what we hold about you and get a copy of it;
• have inaccurate data corrected;
• have data erased, where we no longer need it;
• restrict how we use it while a question about it is resolved;
• receive data you gave us in a portable form, or have it sent to someone else;
• object to processing we do on the basis of legitimate interests;
• withdraw consent for anything you consented to, at any time, without affecting what came before.

Write to support@picassod.shop. We reply within one month, usually much sooner, and we do not charge for it. There is no automated decision-making that produces legal or similarly significant effects.

You can complain to the ICO without coming to us first, though we would rather you gave us the chance to put it right.

Under the California Consumer Privacy Act as amended by the CPRA you may ask what categories of personal information we have collected, what we do with them, and to whom we disclose them; ask for a copy; ask for deletion; and ask us to correct inaccurate information. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing for you to opt out of on that front. We will not treat you differently for exercising any of these rights. Use the same email address.

The site is served over HTTPS throughout. Passwords are stored hashed, never in a readable form. Access to production data is limited to the people who need it and is logged. If a breach occurs that is likely to risk your rights and freedoms, we will tell the ICO within 72 hours and tell you without undue delay.

What is set, and how to change it, is on the cookies page. Nothing beyond the strictly necessary cookie is set before you choose.

This service is for adults. You must be at least 18 to have an account. We do not knowingly collect data about children, and if we learn that we have, we delete it.

If we change this notice materially we will tell account holders by email before the change takes effect. The date at the top always says when it was last changed.