Who is responsible
GARDNER CONSULTING LTD, at 8 Callum Park, Kingswells, Aberdeen, Scotland, AB15 8XJ, United Kingdom, is the data controller for Shelfshot account, product-workspace and support data. Privacy questions may be sent to support@gardnerconsultt.shop or raised by phone at +44 7735146114.
Last updated: 21 July 2026.
What we collect
We collect account identifiers, name, email, subscription status, billing and order references, support messages, consent and cookie choices, device and security logs, and usage events such as generation type and export time.
Workspace data can include product descriptions and other user input, prompts, user-entered measurements, uploaded product photographs and files, generated plans, images, layouts and videos, correction instructions and export links. Do not upload payment-card data, special-category personal data or files you are not authorised to use.
Information collection sources / Where information comes from
We receive information directly from you when you create an account, enter a product brief or prompt, upload a file, request an image or video, edit a generation, export an output, submit a support or listing-intake form, or manage a subscription.
We receive technical and usage information automatically from your browser or device when you use Shelfshot, including session, security, cookie-preference and request records. We receive transaction status, customer references and limited billing details from Stripe or PayPal, but not full card numbers or card security codes. Hosting, storage, email, security and AI processors return service records needed to store an upload, complete a request, deliver a generated output, prevent abuse or investigate an error.
User input, files, prompts and generated outputs
Product descriptions, prompts and correction instructions are sent to the generation service only to plan or produce the output you request. Uploaded files are stored so the service can retrieve them and, when used as a reference, are shared with the relevant AI processor. Generated plans, images and videos are returned to Shelfshot for display, status checking and export. We do not use these materials to profile individuals or make decisions with legal or similarly significant effects.
Shelfshot does not use customer input, uploaded files, prompts or generated outputs to train or fine-tune AI models. We limit AI providers and subprocessors to processing this content to fulfil the requested generation, provide security and reliability, and meet legal obligations; we do not authorise them to use it for their own advertising or model training. Users should avoid personal or confidential information that is not necessary for the creative task.
Why we use it and legal bases
We process account, prompt, file and output data to perform the subscription contract and deliver requested generation and exports. We use legitimate interests for service security, abuse prevention, reliability, product diagnostics and responding to business enquiries. We use consent where required for optional analytics or marketing cookies, and legal obligation for tax, accounting, dispute and regulatory records.
We do not sell personal information. We do not use customer product inputs or generated outputs to train AI models. Provider processing is limited to delivering the requested output under our service configuration and processor terms.
International transfers
Some processors may handle data outside the United Kingdom or European Economic Area. Where required, we rely on an adequacy decision, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, and supplementary security measures. Contact us for information about the safeguard relevant to a particular transfer.
Data retention and deletion
Account and subscription records are kept while the account is active and normally for up to 7 years where accounting, tax, fraud or dispute obligations apply. Support conversations are normally retained for 24 months. Security logs are normally retained for up to 12 months.
Uploaded product files that are not saved to an account workspace are retained for generation and retrieval for no longer than 30 days. AI processors may hold temporary working copies only for the shorter period needed to complete and secure the request, subject to their processor retention controls. Generated plans, images and videos saved to a workspace remain until you delete them or close the account. Deletion removes active copies promptly; encrypted backups age out within 90 days unless a legal hold requires longer retention. Example imagery built into the public site is not customer data.
You may delete saved workspace content through the service where that control is available, close your account, or email support@gardnerconsultt.shop to request deletion of an account, upload, prompt or generated output. We will also pass a verified deletion request to an AI or storage processor where its temporary copy remains. We may retain only the minimum record required for tax, fraud prevention, dispute resolution or another legal obligation and will explain that exception.
Security
We apply access controls, encrypted transport, restricted server-side credentials, logging, backups and vendor review proportionate to an online creative tool. No method is risk-free. Notify us promptly if you believe an account or upload has been accessed without permission.
UK GDPR, EU GDPR and CCPA rights
Depending on location, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting earlier processing. UK and EU residents may complain to their local supervisory authority; UK users may contact the Information Commissioner’s Office.
California residents may request to know, correct or delete covered personal information and may not be discriminated against for exercising a right. We do not sell or share personal information for cross-context behavioural advertising, so there is no sale or sharing to opt out of. We do not use or disclose sensitive personal information to infer characteristics.
Send a request from the account email to support@gardnerconsultt.shop. We may verify identity and may retain data where an exemption or legal duty applies. Authorised agents must provide appropriate authority.
Automated decisions and children
Generation is automated creative processing requested by the user; it does not make decisions with legal or similarly significant effects about individuals. Users must review outputs before publication.
Shelfshot is not directed to children under 13. Users aged 13 to 17 need verifiable permission from a parent or guardian. If you believe a minor submitted data improperly, contact us for deletion.
Contact and complaints
Contact GARDNER CONSULTING LTD at support@gardnerconsultt.shop, +44 7735146114, or 8 Callum Park, Kingswells, Aberdeen, Scotland, AB15 8XJ, United Kingdom. We will investigate privacy complaints and explain available escalation routes. Nothing in this policy limits mandatory data-protection rights.