Privacy Policy

Last updated: 29 July 2026

This Privacy Policy explains how Stephen Sweetland, trading as Winklab (“Winklab”, “we”, “us” or “our”), collects, uses, shares and protects personal data when you visit winklab.com, contact us, or install and use the Price Lens application (the “App”).

1. Who we are

The controller responsible for the personal data described in this policy is:

Stephen Sweetland
Trading as Winklab
41, NN6 0DU
Email: privacy@winklab.com

2. Information we collect

Information received through the commerce platform

When a merchant installs or uses Price Lens, we may receive and process:

• store identifiers, including the store name, store domain and platform store ID;
• merchant account and installation information required to authenticate the App;
• App permissions and access credentials;
• subscription, trial and billing status supplied through the platform’s billing system;
• product, variant, price and automatic discount information needed to provide the App’s features; and
• App settings and display preferences selected by the merchant.

Price Lens is designed to display existing automatic discount information. It does not require merchants to create a separate discount system.

Information collected directly from merchants

We may collect:

• contact details and the content of support requests or other communications;
• technical information contained in diagnostic reports; and
• usage and security logs, such as IP address, browser type, timestamps, request identifiers and actions performed within the App.

Information about shoppers

Price Lens is not intended to collect shopper names, email addresses, delivery addresses, payment details or order histories. The storefront extension may receive product, variant, quantity and pricing context necessary to calculate and display promotional pricing. We do not use this information to identify individual shoppers.

Website information

When you visit winklab.com, our servers may record basic technical data such as your IP address, browser type, device type, referring page, requested pages and timestamps. Where you consent, we may also use Google Analytics to understand aggregated website usage. Non-essential analytics cookies should not be set until you have given consent through our cookie controls.

3. How we use information

We use information where necessary to:

• provide, operate, secure and maintain Price Lens and winklab.com;
• authenticate merchants and maintain App sessions;
• read relevant pricing and automatic discount information and display it on product pages;
• manage trials, subscriptions and billing status;
• save merchant settings and preferences;
• provide support and respond to enquiries;
• diagnose errors, prevent misuse and improve reliability;
• understand website performance and usage where consent has been given; and
• comply with legal obligations and platform requirements.

4. Our lawful bases

Where UK or European data protection law applies, we rely on one or more of the following lawful bases:

• Contract: processing needed to provide the App or respond to steps requested before entering a contract.
• Legitimate interests: operating, securing, supporting and improving our services, provided those interests are not overridden by your rights.
• Consent: for non-essential analytics cookies or similar technologies where consent is required.
• Legal obligation: processing needed to meet legal, regulatory, accounting or compliance obligations.

5. How we share information

We do not sell personal data. We may share limited information with service providers acting on our behalf, only where needed to operate the App and website. These may include:

• the commerce platform through which Price Lens is installed, authenticated and billed;
• VPS Hosting;
• Google Analytics, where enabled with consent; and
• professional advisers, regulators or law-enforcement bodies where required by law.

Each service provider is permitted to process information only for the relevant service and subject to appropriate contractual or legal safeguards.

6. International transfers

Some service providers may process information outside the United Kingdom or European Economic Area. Where required, we use recognised safeguards, such as adequacy regulations or approved contractual clauses, to protect transferred personal data.

7. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy. In particular:

• active merchant account, installation and App configuration data is retained while the App remains installed and in use;
• following uninstallation, store data is deleted or anonymised in response to the platform’s shop-redaction process, normally within 30 days of receiving the request, unless retention is required by law;
• support correspondence is generally retained for up to 90 days;
• security and diagnostic logs are generally retained for up to 90 days; and
• billing and accounting records may be retained for the period required by applicable tax and accounting law.

Backups may retain deleted information for a limited period before being overwritten through the normal backup cycle.

8. Privacy requests and platform compliance webhooks

We support the platform’s mandatory privacy processes, including requests relating to access to customer data, customer deletion and deletion of store data after the App is uninstalled.

Merchants and other individuals may also contact us to request access, correction, deletion, restriction, portability or objection where these rights apply. We may need to verify your identity and may direct shopper requests to the relevant merchant where the merchant controls the data.

Send privacy requests to privacy@winklab.com.

9. Security

We use reasonable technical and organisational measures designed to protect information, including encrypted connections, access controls, authentication controls, restricted permissions, monitoring and secure development practices. No internet service can guarantee absolute security.

10. Cookies

We may use cookies or similar technologies that are strictly necessary for security and website operation. We use non-essential analytics cookies only where permitted and, where required, after consent. You can change your cookie choice using the cookie controls made available on the website.

11. Children

Our website and App are intended for businesses and are not directed at children. We do not knowingly collect personal data from children.

12. Complaints

Please contact us first if you have concerns about how we use personal data. You may also complain to the UK Information Commissioner’s Office or another competent data protection authority.

13. Changes to this policy

We may update this policy to reflect changes to our services, providers or legal obligations. We will post the updated version on this page and amend the “Last updated” date.

14. Contact us

Questions about this policy can be sent to:
privacy@winklab.com