Your data.
Our responsibility.
How Drive International AG and Little Joe® look after the personal data you share with us when you scan, sign up, or visit scanlittlejoe.com.
- We are Drive International AG, a Swiss company. We make Little Joe® products. We are the controller of your data.
- We collect only what we need to run the scan experience and, if you choose, send you a confirmation.
- We never sell your data. We do not share identifying details with advertisers.
- You can ask us to show, correct, delete, or stop using your data at any time. Email privacy@scanlittlejoe.com.
- We do new things in phases. If we plan to use your data in a new way, we tell you before it happens.
Who we are
Drive International AG ("Drive", "we", "us", "our") is a Swiss company headquartered in Hergiswil NW, Switzerland. Company number CHE-479.059.917. We are the controller of personal data collected via scanlittlejoe.com.
We work with Enabled Sciences Lda (Porto, Portugal) as our data processor under a written Data Processing Agreement.
For privacy queries, write to privacy@scanlittlejoe.com. Our UK representative under Article 27 UK GDPR is being appointed and their details will appear here before we go live in the UK.
What we collect, why, and on what legal basis
We collect data in clearly defined phases. Right now, only Phase 1 is live. Phases 2-4 require additional notice and, where required, separate consent before they activate.
| Data | Why we use it | Legal basis |
|---|---|---|
| Approximate location at scan | Confirming your scan, regional charity reporting | Legitimate interest |
| Scan timestamp, product code, device type | Counting scans, charity tally, product analytics | Legitimate interest |
| Name and email (when you submit) | Sending your confirmation, building our consumer relationship | Consent + service |
| Charity selection | Honouring your charitable choice | Service performance |
| Data | Why we use it | Legal basis |
|---|---|---|
| Region + fragrance preference | Relevant product recommendations | Consent |
| Engagement signals | Sending relevant rather than mass campaigns | Legitimate interest, opt-out |
| Data | Why we use it | Legal basis |
|---|---|---|
| Photo of product or receipt | Confirming a genuine purchase, unlocking offers | Consent at upload |
| Image metadata | Counterfeit detection | Legitimate interest |
Marketing
We only send marketing if you have opted in. Every email has a one-click unsubscribe. You can withdraw consent at any time without affecting prior lawful processing.
Who we share data with
We share data only with service providers who help us deliver the service:
- Resend — sending transactional and marketing emails
- Hetzner — hosting (EU data centres, Germany)
- Drive International AG affiliates — for product and distribution decisions, in aggregated form only
We do not sell your data. We do not share identifying data with advertising platforms unless you have separately consented.
Where your data lives
Primary storage is in the European Union — Hetzner, Germany. If we ever transfer your data outside the EU or UK, we use Standard Contractual Clauses or equivalent safeguards. Copies available on request.
How long we keep it
| Data type | Retention period |
|---|---|
| Anonymous scan data (no PII) | 24 months from collection |
| Identified data with active consent | Until you withdraw, or 36 months after last interaction |
| Uploaded photos (Phase 3, when active) | 12 months |
| Anonymised aggregates | Indefinitely |
| Legal or tax records | As required by applicable law |
Your rights
Under UK GDPR and EU GDPR, you can ask us at any time to:
- Access — show you what we hold
- Rectification — correct anything wrong
- Erasure — delete your data
- Restriction — limit how we use it
- Portability — send your data elsewhere
- Object — to processing based on legitimate interests
- Withdraw consent — without affecting prior lawful processing
Email privacy@scanlittlejoe.com to exercise any right. We respond within 30 days.
You can also complain to your supervisory authority — in the UK: the Information Commissioner's Office. In Switzerland: the Federal Data Protection and Information Commissioner.
Cookies
scanlittlejoe.com uses essential cookies to make the site work. Analytics cookies are only set if you consent via the cookie banner. We do not use advertising cookies. If we ever do, we will ask first.
Security
We use industry-standard technical and organisational measures including encryption in transit, access controls, and audit logging. If a breach affects you, we will notify you and the relevant authority within the timeframes required by law.
Children
scanlittlejoe.com is not directed to children under 16. If we learn that we have collected data from a child without appropriate consent, we will delete it promptly.
Changes
If we change anything material, we will email you at least 14 days before it takes effect where we have your address.
Pre-launch testing
scanlittlejoe.com is currently in pre-launch testing. All data captured to date is test data only — not used for marketing, profiling, or any commercial purpose. All pre-launch test data will be deleted before public launch.
Processor: Enabled Sciences Lda · Porto · Portugal