1. Who is collecting information
Generate One Solutions Ltd. operates the ParlourTT marketplace brand. It is responsible for identifying the purposes of data collection and for administering relevant privacy requests. Read our Privacy Policy.
2. Data collected by service
| Activity | Information involved | Why it is needed |
|---|---|---|
| Visiting the site | Technical connection data, IP and access/security logs generated by hosting infrastructure | Availability, troubleshooting, security and abuse prevention |
| Creating an account (when enabled) | Name, email, contact details, authentication and confirmation information | Account access, communication, fraud prevention and eligibility controls |
| Business enrollment | Business names, representatives, registration details and storefront content | Ownership/authorization assessment, business review and display |
| Listings and photographs | Product descriptions, prices, category, location and item images | Displaying items, moderating content and preventing misleading listings |
| Private messages (when enabled) | Message content, participants, timestamps and abuse signals | Buyer–seller communication, safety and support |
| Identity verification (when separately activated) | Didit-hosted ID images, selfies, liveness information, device/IP indicators; limited provider status references in ParlourTT | Checking the presented identity and detecting impersonation/fraud |
| Reports, appeals and support | Descriptions, account references, supporting evidence and responses | Investigating concerns, remedies, enforcement and maintaining accountability |
| Sponsored placements (future) | Advertiser business details, campaigns and bounded performance information | Managing labeled advertising and reporting |
3. Where information comes from
Information may be supplied by you; generated when you use our services; supplied by authorized account representatives; derived from security events; or received as limited results from approved providers. We will not treat claims made by another user as verified facts without appropriate review.
4. Purpose and choice
We require only data reasonably connected to a stated function. Optional marketing uses, tracking and any specially regulated identity processing must be evaluated separately. You should not upload ID cards, financial details or biometric photographs to ordinary listing, chat or support fields.
The decision to provide optional information may affect optional services. Some account, security or identity checks may be necessary for the related feature, but not for unrelated browsing where registration is not required.
6. How long information is kept
Retention depends on purpose, sensitivity, operational necessity and applicable legal requirements. Account, transaction, listing, message, safety, billing and audit records do not automatically share one retention deadline.
| Category | Retention approach |
|---|---|
| Didit Sandbox session-owned verification data | Current application setting: one month; face templates configured to delete with the session. Actual vendor deletion, backups and audit exceptions remain subject to provider terms. |
| ParlourTT limited Didit session references/status metadata | Held under restricted access. A verified automatic purge period for this database is not yet established; it is a prelaunch implementation requirement. |
| Accounts, businesses, listings and messages | Purpose-based retention schedule to be finalized and enforced before commercial activation; some records may require lawful safety or dispute holds. |
| Operational, access and security logs | Limited access and period appropriate to security and troubleshooting, subject to provider settings and documented requirements. |
| Consent records, complaints and decisions | Retained as necessary to document consent, handle appeals and comply with applicable legal obligations, with access restricted. |
We will not describe any unconfigured automatic deletion mechanism as operational. Authorized staff must enforce approved schedules and document valid preservation exceptions.
7. Access, correction and deletion requests
You may ask to access, correct or delete eligible personal information, or raise concerns about collection and disclosure, subject to applicable law. We may verify that the request is legitimate without requiring unnecessary additional sensitive documents. Contact privacy@parlourtt.com. Do not email your government ID, face images or passwords without a specifically authorized secure method.
8. Security and accountability
Access to sensitive information must be role-limited, monitored and reviewed. Intended protections include secure sessions, encryption in transit, private media storage and signed provider notifications. Incident procedures, audits and controls must be tested in practice rather than assumed from these disclosures.
All privacy handling is subject to the Privacy Policy; identity-specific processing is further explained in the Identity & Biometric Verification Notice.