Effective 7 September 2026

Privacy notice

This notice explains how Look We're Live, handles personal data when you visit, create an account, subscribe, build or publish a seller page, request a live-show reminder, choose optional Look We're Live email updates, contact support or manage billing.

1. Controller and contact

Controller: Look We're Live. Registered address: Configure LEGAL_REGISTERED_ADDRESS before enabling live payments.. Privacy contact: Configure LEGAL_PRIVACY_EMAIL before enabling live payments.. Support contact: Configure LEGAL_SUPPORT_EMAIL before enabling live payments..

2. Personal data we process

Depending on how you use the service, we may process your name, email address, account identifier, selected customer type, business/trading name and business country where relevant, authentication and account status information, subscription status, Stripe customer and subscription identifiers, invoices and payment-status information, support correspondence, security and audit events, and records of your acceptance of terms or consumer service-start request.

We also process the seller-page content you choose to provide, including text, logos, images, product information, live-show information, public links, slug and publishing settings. Content you publish is intentionally made public on the internet.

Technical information may include IP-derived country, browser, device type, operating system, requested route, performance metrics, security logs and similar operational information. Optional Vercel Analytics and Speed Insights are loaded only after the visitor accepts analytics in the site privacy controls.

If a visitor asks for a reminder for a specific published show, we process the email address, a hashed version used for duplicate and abuse controls, confirmation status, selected reminder timing, cancellation status and delivery records to confirm and deliver that specific reminder. Requesting a show reminder does not by itself mean that the visitor has agreed to marketing. Reminder addresses are not exposed to sellers or added to seller marketing lists. Sellers may receive non-identifying aggregate reminder statistics. Reminder and confirmation emails are delivered through Resend. Unconfirmed reminder requests expire after up to 48 hours; confirmed reminder email data is deleted or anonymised within 30 days after the show ends, while non-identifying aggregate metrics may be retained. Every reminder can be cancelled separately.

A visitor can separately choose an optional, unchecked consent box to receive occasional marketing emails from Look We're Live about upcoming live shows, recommended sellers, platform news and live-shopping discovery. If this option is selected, we process the email address, a hashed version, the exact consent wording and version, consent source, request timestamp, email-verification timestamp, consent status, withdrawal timestamp where applicable and limited email-delivery records. The marketing choice is separate from the one-show reminder itself. The checkbox records the visitor's marketing choice; confirming the requested show reminder verifies control of the same email address and activates that marketing subscription. No separate marketing-confirmation click is required. We do not provide sellers with the raw email audience collected for Look We're Live marketing.

3. Payment-card data

Stripe-hosted Checkout collects payment-card details. Look We're Live does not receive or store full card numbers or card security codes. We receive billing identifiers, subscription state, payment outcome, invoice references and related information needed to operate the paid service and meet accounting, fraud-prevention and legal obligations.

4. Why we use personal data

We use account and seller data to create and secure accounts, provide the builder and public seller page, save drafts, publish content, deliver images, manage subscription access, process cancellations and eligible withdrawal requests, send transactional messages, provide support, prevent abuse, investigate incidents and comply with law.

We use reminder data only to provide the specific reminder requested, maintain the confirmation and cancellation flow, protect the feature against abuse and measure the feature in aggregate. We do not infer marketing permission from requesting a reminder or adding a show to a calendar.

We use the optional Look We're Live email-updates audience only when the visitor has actively selected the separate marketing checkbox and the same email address has then been verified through confirmation of the requested show reminder. Those emails may cover the categories stated in the consent text: upcoming live shows, recommended sellers, platform news and live-shopping discovery. Marketing permission can be withdrawn independently of any reminder or account.

5. Lawful bases

Where UK GDPR or EU GDPR applies, processing is generally based on one or more of: performance of a contract or steps requested before a contract; our legitimate interests in operating, securing, improving and defending the service; compliance with legal obligations; and consent where consent is the appropriate basis, including optional analytics controls where used.

For a one-show reminder requested by a visitor, we process the minimum data needed to provide that requested, non-marketing service and to operate it securely. For optional Look We're Live marketing emails, we rely on the visitor's separate consent where consent is required by applicable data-protection and electronic-marketing law. The reminder-confirmation step verifies the email address; it does not replace the separate marketing checkbox. Withdrawing marketing consent does not cancel a separately requested show reminder.

6. Service providers and recipients

We use Supabase for authentication, Postgres data and private Storage; Stripe for Checkout, subscriptions, billing, invoices, refunds and payment-related fraud controls; Resend for transactional email, reminder delivery, email-address verification and, where a recipient has separately consented, Look We're Live marketing email; and Vercel for hosting, deployment, infrastructure, optional Web Analytics and Speed Insights. These providers process data according to their role, our configuration and applicable data-protection terms.

Sellers do not receive the raw email addresses collected through the show-reminder flow or for the separate Look We're Live discovery audience. We may provide sellers with aggregate, non-identifying statistics about reminder activity and engagement with their shows.

Seller pages can contain links and, where a seller chooses an external image URL instead of an uploaded image, your browser may connect directly to that third-party image host. That host can receive normal network information such as your IP address and user agent. Look We're Live sends those image requests with a no-referrer policy so the seller-page URL is not intentionally disclosed in the Referrer header. Sellers should prefer uploaded images where possible.

We may also disclose information where reasonably necessary to comply with law, enforce rights, respond to lawful authority requests, prevent fraud or protect users and the service. We do not sell personal data.

7. Public seller pages

When you publish a seller page, the published title, seller content, links, images and selected public information can be accessed by anyone on the internet and may be indexed by search engines. Do not publish personal data, confidential information or third-party content you do not have permission to make public.

8. International transfers

Our providers may process data in countries different from your own. Where transfer restrictions apply, we rely on appropriate safeguards such as adequacy regulations/decisions, approved contractual clauses or another lawful transfer mechanism as applicable to the provider and transfer.

9. Retention

We retain account and seller-page data while needed to provide the service and for a reasonable period after closure where necessary for recovery, disputes, fraud prevention or legal obligations. Billing, accounting and tax records may be retained for statutory periods, commonly up to six years under UK record-keeping rules where those rules apply. Security and audit records are retained for a period proportionate to operational and legal risk. Backups may expire on a separate rolling schedule.

One-show reminder requests that are not confirmed are deleted after up to 48 hours. For confirmed reminders, the personal email data is deleted or anonymised within 30 days after the relevant show ends. Aggregate, non-identifying show metrics may be retained longer.

Optional Look We're Live marketing requests associated with a reminder that is not confirmed are deleted after up to 48 hours. Once the visitor confirms that reminder, the same email address is treated as verified and the separately selected marketing consent becomes active. An active marketing email address is retained while the consent remains active and the address is needed for the stated email purpose. When marketing consent is withdrawn, we stop using the address for marketing and remove the raw address from the sendable audience. We may retain limited pseudonymous records of the consent and withdrawal for up to two years to document compliance, respect the withdrawal and defend legal claims, unless a longer period is required by law or reasonably necessary for a live dispute. That limited evidence is then deleted under our retention process.

Billing expiry does not itself delete the seller page, slug, uploaded images or published snapshot because the product supports later reactivation. You can contact support to request account deletion, subject to data we must retain by law or for legitimate claims and security purposes.

10. Your rights

Depending on the law that applies to you, you may have rights to access personal data, correct it, request deletion, restrict processing, object to certain processing, receive portable data and withdraw consent where processing relies on consent. You may also complain to the UK Information Commissioner's Office or the data-protection authority in your country where applicable.

You can withdraw optional Look We're Live marketing consent at any time using the unsubscribe link provided with the email-updates flow or in a marketing email, or by contacting Configure LEGAL_PRIVACY_EMAIL before enabling live payments.. Withdrawal is free and does not affect the lawfulness of processing carried out before withdrawal. Cancelling marketing does not cancel a separate one-show reminder; reminder cancellation is handled separately. Where applicable, you also have the right to object to processing for direct marketing.

11. Security

We use measures including authenticated access, row-level database controls, private object storage, server-side billing credentials, signed Stripe webhooks, restricted service-role access, security logging and encrypted HTTPS transport. No internet service can promise absolute security, and we review controls as the product changes.

12. Cookies and analytics

Necessary authentication/session storage and optional analytics are described in the Cookie and analytics notice. Optional Vercel analytics components are not loaded until a visitor accepts analytics through the site controls.

13. Children

The subscription service is intended for adults aged 18 or over. We do not knowingly offer subscriptions to children.

14. Changes and contact

We may update this notice when the service, providers or legal requirements change. Material changes will be communicated where required. Privacy requests can be sent to Configure LEGAL_PRIVACY_EMAIL before enabling live payments..