Privacy

This service receives, uploads and stores no photograph. There is no upload control anywhere in the interface — not a disabled one, not a hidden one. There is nowhere to put a picture.

That is a decision, not an oversight. Your pictures are your own record of your own home; they should not pass through anybody else’s server; a picture that never left the device that took it is not something you ever have to explain; and a home somebody has lived in contains their whole life.

Our own file storage is used for the cards and lists this service generates and for nothing else. There is no code path in this service that receives, transmits or stores a photograph belonging to a user.

The company behind Checkoutshot is the controller of the personal data described here. Its registered details are on the legal information page.

For anything to do with your data, write to support@djklettings.shop.

The sentence you type describing your home is not used to train any model, and neither is anything else you enter here.

Where a model is used, it is used once, to sort a description into one of six categories, and the text is not retained by us afterwards. We use aggregate counts — how many lists were built, which pages were read — with nothing in them that identifies anybody, to see what is working.

We do not sell personal data, and we do not share it for anybody else’s advertising. It is handled by the suppliers who make the service run:

• The company hosting the site and its database.
• The payment provider configured for this service, which handles card details directly — we never see or hold a full card number.
• The provider that sends transactional email, such as your order confirmation.
• The provider of the model used to sort a description, where one is configured.

Each of those is bound by a contract that limits them to what we ask them to do. We will also disclose data where the law requires it.

Some of those suppliers process data outside the United Kingdom. Where they do, the transfer is covered either by United Kingdom adequacy regulations, or by the International Data Transfer Agreement, or by the United Kingdom Addendum to the European Commission’s standard contractual clauses, together with whatever additional measures the transfer requires.

• Account data: until you close the account, then removed within thirty days.
• Records of payments: six years, because tax law requires it.
• Server logs: ninety days.
• The sentence describing a home: not retained after the kind of home has been decided.
• Your list and your ticks: in your own browser, until you clear them. You can clear them from inside the tool at any time.

Under the United Kingdom General Data Protection Regulation and the Data Protection Act 2018 you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, hand it over in a portable form, or stop processing it where we are relying on a legitimate interest. Where we rely on your consent, you can withdraw it at any time.

If you are in California, you may also ask what has been collected and ask for it to be deleted, and you may opt out of any sale or sharing of personal information. We do not sell or share personal information in that sense, and we honour Global Privacy Control signals.

Ask at support@djklettings.shop. We answer within one month.

If you think we have handled your data badly, tell us and we will look at it. You also have the right to complain to the Information Commissioner’s Office, the United Kingdom’s data protection regulator, at ico.org.uk/make-a-complaint. You do not have to come to us first.

This service is not for anybody under thirteen. Between thirteen and seventeen, a parent or guardian must agree to the terms. If we learn that an account belongs to somebody under thirteen we will close it and delete the data.

Where we change this page in a way that materially affects you, we will tell registered users at least fourteen days before the change takes effect.