Last updated: 16 September 2025
This Privacy Policy explains how iOScanners Direct collects, uses, shares and protects your personal data when you visit www.iosscanners.flywheelstaging.com, contact us, or use our products and services (together, the “Services”). We comply with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
1) Who we are (Controller)
-
Controller: PEARLYDENT-UK LTD
-
Registered address: 75, High Street, Bagshot, Surrey, United Kingdom, GU19 5AH
-
Company number: 15125206
-
Phone: + 44(0) 2034 567 890
2) Scope
This Policy applies to personal data we process:
-
on our website(s) and customer portals,
-
during sales, support and training interactions,
-
when you receive marketing from us, or
-
when you purchase hardware, software, subscriptions or services from us.
3) Personal data we collect
Data you provide
-
Identification & contact: name, job title, organisation, email, phone, postal address.
-
Account & authentication: username, passwords (hashed), role, preferences.
-
Purchase & billing: delivery details, order history, invoices, payment method details (processed by our payment provider — we do not store full card numbers).
-
Support & training: enquiry details, call recordings (where notified), diagnostics logs you share.
-
Marketing: your content subscriptions, event registrations, competition entries, survey responses.
-
Recruitment (if applicable): CV, cover letter, interview notes.
Data we collect automatically
-
Device/usage data: IP address, device type, browser, operating system, pages viewed, time on page, clicks, referring/exit pages, and similar diagnostics.
-
Cookies/SDKs/pixels: see Cookies & similar technologies below.
Data from third parties
-
Payment processors (transaction confirmations), logistics partners (delivery status),
-
Public/professional sources (e.g., Companies House, LinkedIn) for B2B lead generation,
-
Partners/resellers (where you have engaged them and they refer you to us).
We do not intentionally collect children’s data; our Services are for professionals and businesses.
4) Purposes & lawful bases
We process your data only where lawful under the UK GDPR:
| Purpose | Examples | Lawful basis |
|---|---|---|
| Provide and deliver the Services | Set up accounts, fulfil orders, provide training and support | Contract (Art. 6(1)(b)) |
| Customer care & safety | Diagnostics, troubleshooting, product updates, quality assurance | Legitimate interests (service operation & improvement) |
| Billing & finance | Invoicing, payment processing, accounting, VAT records | Legal obligation (tax), Contract |
| Communications | Service messages (order/shipping, updates, T&Cs changes) | Contract / Legal obligation / Legitimate interests |
| Marketing to existing customers | Product news, offers, events | Legitimate interests (soft opt-in, PECR compliant) with an opt-out |
| Marketing to new prospects | Email/SMS/phone where opted-in | Consent |
| Events & webinars | Registration, attendance, CPD certificates | Contract / Legitimate interests |
| Security & fraud prevention | Access logs, abuse monitoring | Legitimate interests |
| Compliance & disputes | Record-keeping, responding to regulators, enforcing rights | Legal obligation / Legitimate interests |
| Recruitment | Evaluate candidates | Legitimate interests / Consent where required |
Where we rely on legitimate interests, we balance our interests against your rights and freedoms. You can object at any time (see Your rights).
We only process special category data if you proactively provide it and it’s necessary (e.g., accessibility needs for an in-person event) and will rely on your explicit consent or another valid condition.
5) Marketing choices
-
We may send B2B marketing to existing customers under the soft opt-in (PECR). You can opt out at any time via the link in our emails or by contacting us.
-
For all other direct marketing, we obtain your consent first.
-
Opting out of marketing will not affect service communications.
6) Cookies & similar technologies
We use cookies, pixels and SDKs to operate our site, understand performance and deliver relevant content.
Categories:
-
Strictly necessary (site security, session management) – always on.
-
Functional (preferences).
-
Analytics (e.g., page performance, aggregated usage).
-
Advertising/retargeting (to show relevant ads to professionals).
When you first visit, you’ll see a cookie banner where you can accept, reject (non-essential), or manage preferences. You can also change your choices at any time via Cookie Settings link.
7) Disclosures & recipients
We may share personal data with:
-
Service providers / processors: hosting, CRM, email/SMS platforms, webinar tools, analytics, payments, fulfilment, logistics, customer support software, IT and security providers. They act under contract and only on our instructions.
-
Partners/resellers: if you ask us to coordinate fulfilment or support.
-
Professional advisers: accountants, auditors, lawyers, insurers.
-
Authorities: HMRC, courts, regulators, law enforcement where required.
-
Business transfers: in connection with a merger, acquisition or asset sale.
We do not sell your personal data.
8) International transfers
Some recipients may be outside the UK (or EEA). Where this occurs, we ensure appropriate safeguards, such as:
-
UK Addendum to the EU Standard Contractual Clauses or the UK International Data Transfer Agreement (IDTA),
-
An adequacy regulation by the UK government,
-
Additional technical and organisational measures.
You can contact us for a copy of the relevant safeguards (redacted where necessary).
9) Data retention
We keep data only as long as necessary for the purposes above, including to meet legal, accounting or reporting requirements. Typical periods:
-
Account, order & warranty records: up to 7 years after your last transaction (tax/accounting).
-
Support tickets: 3–6 years depending on issue and limitation periods.
-
Marketing data: until you opt out or after 24 months of inactivity, whichever comes first (unless we need to retain proof of consent).
-
Recruitment: up to 6 months if unsuccessful, unless you consent to a longer talent-pool retention.
We then delete or anonymise the data.
10) Security
We use appropriate technical and organisational measures to protect your data, including access controls, encryption in transit, regular patching, least-privilege policies and staff training. No system is 100% secure; we maintain incident response processes in line with legal obligations.
11) Your rights (UK GDPR)
You have the right to:
-
Access your data and receive a copy,
-
Rectify inaccurate or incomplete data,
-
Erase data (where applicable),
-
Restrict processing,
-
Object to processing (especially direct marketing or where based on legitimate interests),
-
Data portability (for data you provided, processed by automated means, based on consent or contract),
-
Withdraw consent at any time (where processing is based on consent),
-
Complain to the ICO.
How to exercise your rights: contact us at admin@iosscanners.flywheelstaging.com. We may need to verify your identity. We will respond within one month (extendable in complex cases).
12) UK supervisory authority
If you are unhappy with how we use your data, please contact us first so we can rectify the issue. You also have the right to complain to the Information Commissioner’s Office (ICO):
ico.org.uk | Tel: 0303 123 1113 | Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
13) Third-party links
Our website may link to third-party sites or services. Their privacy practices are their own; please review their policies.
14) Changes to this Policy
We may update this Policy from time to time. The “Last updated” date shows the latest version. Material changes will be notified via our website or by email where appropriate.
15) Contact
Questions about this Policy or our data practices:
Email: admin@iosscanners.flywheelstaging.com
Post: Data Protection, Pearlydent LTD, 75, High Street, Bagshot, Surrey, United Kingdom, GU19 5AH
