Privacy Policy

Readylert Ltd ("Readylert", "we", "us", "our") is a company registered in England and Wales (Company No. 14829301). Our registered office is at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ.

We operate readylert.com and the Readylert order notification platform. For questions about this policy, contact us at privacy@readylert.com.

Vendor accounts: When you sign up as a vendor, we collect your full name, business name, business address, email address, and a hashed version of your password. We also store your Stripe customer ID for billing purposes.

Customer sessions: When a customer scans your QR code, we create an anonymous session record containing a randomly generated UUID, order number, and order status. We do not collect the customer's name, email address, phone number, or any other personal information.

Usage data: We collect standard server logs including IP addresses, browser user agents, and page request times. This data is retained for 30 days and used solely for security and performance purposes.

Communications: If you contact our support team, we retain the content of that communication to provide support and improve our service.

We use vendor account data to provide and administer the Readylert service, process payments via Stripe, send service-critical communications (e.g., account confirmations, billing notifications), and provide customer support.

We use customer session data solely to operate the order notification system — specifically, to track order status and deliver the "order ready" alert to the correct device.

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 5.

Contract performance: Processing your vendor account data is necessary to provide the services you've contracted with us.

Legitimate interests: Processing usage logs for security monitoring and service improvement.

Legal obligation: Retaining certain records as required by UK law (e.g., financial records under the Companies Act 2006).

Stripe: We use Stripe to process payments. Your payment card details are handled directly by Stripe and never stored on Readylert servers. Stripe's privacy policy applies to data processed by Stripe.

Resend: We use Resend to send transactional emails. Your email address is shared with Resend solely for this purpose.

Hosting infrastructure: Our servers are hosted on Replit Inc. infrastructure. Data is stored in the United States and is subject to standard contractual clauses for international transfers.

Vendor account data is retained for the duration of the account, plus 2 years after account closure (for legal and financial compliance).

Customer session data is retained for a period configurable by the vendor (default: 30 days), after which it is permanently deleted.

Server access logs are retained for 30 days.

Support communications are retained for 3 years.

Under UK and EU GDPR, you have the right to: access your personal data; correct inaccurate data; request deletion of your data ("right to be forgotten"); restrict processing; data portability; and object to processing based on legitimate interests.

To exercise any of these rights, email privacy@readylert.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We use a single session cookie (rp.sid) to maintain your vendor login session. This cookie is strictly necessary for the operation of the service. No marketing or analytics cookies are used. See our Cookie Policy for full details.

We may update this policy from time to time. We will notify you of significant changes by email or by displaying a notice on the platform. The "last updated" date at the top of this page will reflect the most recent revision.

For privacy enquiries: privacy@readylert.com

Readylert Ltd, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.