1. Who we are
Li is a product and service operated by LogistiCarl Systems Ltd. For the personal information described in this policy, LogistiCarl Systems Ltd is the data controller unless we state otherwise.
Privacy and data-protection enquiries can be sent to privacy@logisticarlsystems.com.
2. Information we use
We apply data minimisation: we collect information needed to provide, secure and administer Li rather than collecting information simply because we can.
Account and identity information
This may include your email address, account credentials in protected form, verification status, account preferences and information needed to recover or secure access to your account.
Organisation information
If you use Li for an organisation, we may process the organisation name, membership, role and authority information needed to control access and administer organisation assets.
Recovery assets and tags
We process the identifiers required to associate Wallet Cards, Key Tags and Asset Tags with the correct Li account or organisation, together with names or internal labels you choose to give them, activation state and relevant production/fulfilment records.
Orders and delivery
When you order physical products, we process the information needed to take and fulfil the order, such as customer and delivery details, order contents, prices, postage, order status, payment references and fulfilment records.
Recovery interactions
When a Li product is scanned and a Recovery interaction begins, we process the recovery-session information and messages needed to route communication, show conversation state, prevent inappropriate continued messaging after handover and maintain the integrity of the recovery process.
Security and technical information
Li records limited technical and audit information where needed to protect accounts and investigate security events. This can include IP address, browser/user-agent information, timestamps and records of events such as successful logins, password changes and password resets. An IP address may provide an approximate network location, but Li does not use it as a live item-tracking system.
3. Why we use information and our lawful bases
| Purpose | Typical information | Lawful basis |
|---|---|---|
| Creating and operating your Li account and Recovery service | Account, asset, activation and Recovery information | Contract — processing necessary to provide the service you request. |
| Taking, administering and fulfilling orders and memberships | Order, delivery, payment-reference and membership information | Contract; and legal obligation where records must be retained by law. |
| Protecting Li, accounts and the integrity of Recovery | Audit events, IP address, user agent, timestamps and relevant account/session records | Legitimate interests in securing our service, preventing misuse and establishing or defending claims. |
| Responding to privacy requests and legal obligations | Account/contact information and records relevant to the request | Legal obligation. |
| Optional health information in an Emergency Profile | Health information you choose to enter | Consent under Article 6 and explicit consent under Article 9(2)(a) UK GDPR. |
Where we rely on legitimate interests, those interests are operating a secure and accountable recovery platform, preventing abuse and maintaining evidence needed to understand security or service events. We consider those interests against the rights and interests of the people affected.
4. Recovery scans, messaging and finder privacy
A finder does not need a Li account to begin the public Recovery journey. Li is designed to allow the finder and owner to communicate without publishing the owner's email address, telephone number or home address on the physical product.
Recovery is not a zero-retention service. We retain the session, message and status information necessary to operate and safeguard the recovery interaction. Like other websites, our infrastructure may also receive ordinary connection information such as an IP address and browser/user-agent data when a device connects.
Li does not ask a finder to provide precise GPS location as part of the standard Recovery journey, and we do not use a scan to track the owner's or finder's real-time location.
5. Optional Emergency Profile and health information
A Custom Wallet Card may allow an account holder to enter information intended to help in an emergency, including medical conditions, allergies, medications, communication needs, emergency contacts and instructions.
Health information is special category personal data. We process health information only when you deliberately choose to use this optional feature and provide the required explicit consent. You choose the information entered and the information selected for the physical card.
Emergency information is owner-declared. Li does not diagnose, verify or maintain medical records on behalf of a healthcare provider. You are responsible for keeping information accurate and current.
You may withdraw consent for continued processing of optional health information. Withdrawal does not make earlier processing unlawful. Some information already permanently engraved on a physical Wallet Card cannot be remotely erased; you should stop using or replace a card if its printed/engraved emergency information is no longer appropriate.
6. Payments, Stripe and financial information
Li uses Stripe to process payments and membership billing. Card and payment-method details are entered into Stripe's payment environment rather than being stored as raw card details in the Li database. Li receives and stores the references and status information needed to match a Stripe payment, refund or subscription to the correct Li account and order.
We also retain order and transaction records where needed for fulfilment, customer service, accounting, tax, fraud prevention and legal obligations.
7. Who we share information with
We do not sell personal information to advertisers or data brokers.
We may disclose or make information available to service providers where necessary to run Li, including payment processing, website/hosting infrastructure and transactional communications. These providers may process information on our behalf or, where applicable, as an independent controller for their own regulated functions.
We may also disclose information where required by law, to protect legal rights, investigate fraud or misuse, or respond to a valid request from a court, regulator or law-enforcement authority.
International processing
Some suppliers may operate internationally. Where UK personal data is transferred outside the UK, we require an applicable lawful transfer mechanism or safeguard, such as UK adequacy regulations or approved contractual safeguards, as required by data-protection law.
8. Location, advertising and tracking
Li tags do not track you. Wallet Cards, Key Tags and Asset Tags do not contain GPS, cellular or Bluetooth tracking chips.
Li does not sell your personal information for advertising. We do not use third-party analytics, advertising trackers or behavioural profiling technologies, and we do not use Recovery scans to build advertising profiles of owners or finders.
We measure the operation of the service, not the browsing behaviour of the person using it. Operational records that Li needs to provide and secure the service — such as orders, activations, Recovery events and security/audit records — are not used to create advertising or behavioural profiles.
Li uses cookies and browser storage only for operating, securing or adapting the service to choices you make, such as maintaining an authenticated session and remembering an appearance preference. See our Cookie & Browser Storage Policy for details.
9. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing an active account or Recovery service, fulfilling orders, maintaining security/audit records and meeting legal, accounting, tax, fraud-prevention or dispute requirements.
Different records therefore have different retention periods. When deciding how long to retain a record we consider the nature and sensitivity of the information, whether an account/service remains active, operational recovery needs, security and fraud risks, legal limitation periods and statutory record-keeping requirements.
Where information is no longer required, we delete it, anonymise it, or isolate it from ordinary use where deletion must await the end of an applicable retention requirement.
10. Security
We use technical and organisational controls intended to protect Li accounts and personal information against unauthorised access, alteration, disclosure or loss. These include account authentication, access controls, security/audit records and controlled account/organisation permissions.
No internet service can promise absolute security. If we identify a personal-data breach that triggers a legal notification requirement, we will follow the applicable UK data-protection reporting and notification rules.
11. Your data-protection rights
Depending on the circumstances and lawful basis, UK data-protection law may give you rights to:
- be informed about how your information is used;
- access personal information we hold about you;
- correct inaccurate or incomplete information;
- request erasure in circumstances where the right applies;
- request restriction of processing;
- receive certain information in a portable format;
- object to processing based on legitimate interests; and
- withdraw consent at any time where processing is based on consent.
To exercise a privacy right, email privacy@logisticarlsystems.com. We may need to verify that a request relates to the correct person before disclosing or changing account information.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator. We would appreciate the opportunity to address your concern first, but you do not have to contact us before exercising your right to complain.
12. Children and accounts created for others
Li is not designed as a service for children to contract with us independently. If an adult creates or manages Recovery or Emergency Profile information for another person, that adult is responsible for having appropriate authority to provide and manage that information and for using particular care with sensitive information.
13. Changes to this policy
We will review this policy as Li develops and when our use of personal information changes. If a change materially affects how we use existing personal information, we will provide appropriate notice before the new use begins where required by law.
14. Contact us
Data controller: LogistiCarl Systems Ltd
Product: Li — Lost item
Privacy email: privacy@logisticarlsystems.com
If you contact us about a privacy matter, include enough information for us to understand the request, but please do not send passwords, payment-card details or unnecessary health information by email.