# Driver shop privacy and cookies Last updated: 3 November 2026 This notice covers the iteQ Living driver shop, licence activation, downloads and related support. It does not cover every service on our main website or replace the privacy notices of Stripe and other independently operated services. ## Who is responsible ITEQ LIVING LIMITED, trading as iteQ Living, company number 06291268, is responsible for the personal information described here. Our registered office is 320 Firecrest Court, Centre Park, Warrington WA1 1RG, United Kingdom. Our correspondence address is 124 City Road, London EC1V 2NX, United Kingdom. Contact support@iteqliving.com for privacy enquiries and information requests. ## Orders, payment and checkout confirmations We receive the email address, selected products and Crestron processor MAC address entered at checkout. Our shop records the order reference, price, payment reference and status, and relevant dates. If an installer orders on your behalf, we may receive these details from the installer and send the licence email to their chosen checkout address. For purchases through the updated checkout, we record the terms version and full wording, processor-detail and immediate-delivery acknowledgements, and acceptance time. Acceptance is recorded before payment starts, so a record may exist even if you do not finish paying. We do not create retrospective acceptance records for earlier orders. Stripe handles payment details, billing information and any tax-identification information required for checkout. We send it the checkout email, product and price details and order reference needed to process payment. Our shop database does not store payment-card numbers or security codes. Stripe also returns payment-status information needed to fulfil the order. ## Licences, trials, downloads and support Licensing records include the driver product, processor MAC, licence-key hash, entitlement status, trial dates, issue and validation dates, and related purchase or replacement decisions. A processor MAC identifies the licensed installation and can be personal information when linked to a customer. It is not the identifier of the television or other device controlled by the driver. We keep download tokens and counts, delivery email addresses, encrypted licence-email contents and delivery-attempt information. This supports downloads, email retries and secure recovery of valid licence information. The licence database stores key hashes; a hash alone cannot reproduce a lost original key. Licence validation sends the product and processor information needed to check a trial or entitlement. The licensing functions do not collect the TV programme or media you are watching. Support messages include your email address, message and attachments you choose to send. Please redact passwords, device access keys, licence keys and unrelated personal information from screenshots and logs before sharing them. ## Purposes and legal bases We use information necessary to take steps at your request or perform a contract with you to respond to purchase enquiries, fulfil orders, activate licences, provide downloads and deliver included support. Where the buyer is a company or an installer acts for an installation, we use relevant individual business-contact details for our legitimate interests in administering that relationship and providing support. We also rely on legitimate interests for proportionate security, preventing duplicate purchases or repeated trials, protecting licence entitlements, investigating misuse and retaining evidence needed to resolve complaints or legal claims. These interests do not authorise unrelated tracking or marketing, and must be balanced against your rights. We use information needed to comply with tax, accounting and other applicable legal duties on the basis of legal obligation. Accepting the purchase terms or requesting immediate digital delivery is not blanket consent to marketing or all use of personal information. The purchase confirmations do not subscribe you to promotional emails. ## Information needed to provide the service A working email address and correct processor MAC are needed to supply your processor-bound licence. Trial activation needs the product and processor identifiers. Without the necessary details we cannot complete the relevant service. Stripe requests payment and billing information needed to process payment and calculate applicable tax. If you contact support without enough information to identify the order or affected installation, we may need further relevant details to investigate. We may verify an installer's authority before discussing a customer's records. ## Service providers and international processing 123 Reg provides our hosting and email services. Its support team has identified Strasbourg, France as the data centre for EU-region hosting. Provider and subprocessor access may involve other locations under the applicable processing arrangements; this is not a promise that every service processes information only in France or the UK. Stripe supplies payment, tax and related security functions. It acts as an independent controller for some activities, including optional saved-payment services. The shop also uses Google Fonts: your browser connects to Google to obtain fonts, providing technical request information such as an IP address. Providers may process information outside the UK. Their published processing terms describe applicable arrangements, including adequacy decisions and contractual transfer safeguards where relevant. You can ask us for information about safeguards relevant to your data. Links to the provider notices and 123 Reg processing agreement are below. We may share relevant information with professional advisers or authorities where needed for legal obligations, complaints, disputes or the protection of legal rights. We limit disclosures to the information needed for that purpose. ## Cookies and technical information The shop uses the PHPSESSID session cookie to remember your basket and support checkout security. It has a Session expiry and uses Secure, HttpOnly and SameSite=Lax settings. Blocking this cookie may prevent the basket or checkout from working. Some browsers restore sessions, so Session expiry is not a guarantee of deletion at a particular time or every time a browser window closes. Our host and connected services receive technical request information needed to deliver and protect their services, such as IP addresses, requested resources, timestamps and browser details. Font loading is an external connection even where it does not set an advertising cookie. Stripe-hosted checkout and optional saved-payment services have their own cookie and privacy information. The main website's navigation storage is outside this shop-specific notice. Any new non-exempt tracking or storage added to the shop will require an appropriate assessment and, where required, consent before it is used. ## Retention and review We use a manual retention-review schedule; we do not claim that an automatic deletion job runs on every record: - Driver-related enquiries that do not become a project or purchase: review for removal 12 months after the last meaningful contact. - Unpaid or abandoned orders: review after 90 days, checking payment, licence, delivery and dispute status before removal. A cancelled browser checkout alone is not proof that no payment exists. - Routine resolved support correspondence: review for removal 24 months after resolution; retain essential licence or replacement decisions separately where needed. - Accounting records: normally six years from the end of the company financial year they concern, or longer where required by law. - Essential licence, replacement, accepted-contract and recovery information: retain while needed to honour the continuing licence, download access or applicable claims. We review necessity rather than assuming that an offline processor's lack of recent validation means the licence has ended. We review the shop database monthly and review the continuing need for long-term licence and trial records at least annually. Trial history supports the one-trial-per-product-and-processor rule. We retain the minimum information needed for that purpose rather than treating trial expiry as permission to restart the trial. Recoverable encrypted licence emails are retained where needed for retries or valid key recovery; we must preserve working entitlement recovery before removing the only recoverable copy. Our hosting provider reports a single rotating backup of files and databases every 24 hours, with the next copy replacing the previous one. Its shared-hosting guidance states seven-day log rotation. It reports that deleted mailboxes can be restored within 14 days, but individual emails removed from Trash cannot be recovered from its server. These recovery windows are different from how long our active business records are needed. 123 Reg states that hosting content, including logs, is retained for 30 days after the hosting package is cancelled and removed. We do not treat this as the active-account retention period for every email log or separately retained application log. Technical records are kept according to their operational or security purpose and applicable service settings; contact us for more specific information relevant to a request. We may retain particular records longer for an unresolved complaint, dispute, investigation or legal duty. We record the reason and review date. The schedule also applies to business-held mailbox copies and exports; appropriate removal decisions need to be reapplied if data is restored from backup. ## Your rights and complaints Depending on the circumstances and legal basis, you may request access, correction, deletion, restriction, or a portable copy of information you provided. You may object to processing based on legitimate interests. These rights are not absolute: for example, we may need records for a legal obligation or legal claim. We will explain any applicable restriction. Contact support@iteqliving.com to make a request. We may ask for proportionate information to verify your identity or authority to act for an installation. Do not send identity documents unless requested through an appropriate process. You may complain directly to the UK Information Commissioner's Office; you do not have to contact us first. ## Updates We update this notice when our handling changes. A revised notice does not itself authorise unrelated new uses of existing information. Contact support@iteqliving.com with questions.