Your data.
Our responsibility.
How Drive International AG and Little Joe® look after the personal data you share with us when you scan, sign up, or visit scanlittlejoe.com.
- We are Drive International AG, a Swiss company. We make Little Joe® products. We are the controller of your data.
- We collect only what we need to run the scan experience and, if you choose, send you a confirmation.
- We never sell your data. We do not share identifying details with advertisers.
- You can ask us to show, correct, delete, or stop using your data at any time. Email privacy@scanlittlejoe.com.
- We do new things in phases. If we plan to use your data in a new way, we tell you before it happens.
Who we are
Drive International AG ("Drive", "we", "us", "our") is a Swiss company headquartered in Hergiswil NW, Switzerland. Company number CHE-479.059.917. We are the controller of personal data collected via scanlittlejoe.com.
We work with Enabled Sciences Lda (Porto, Portugal) as our data processor under a written Data Processing Agreement.
For privacy queries, write to privacy@scanlittlejoe.com. Our UK representative under Article 27 UK GDPR is being appointed and their details will appear here before we go live in the UK.
What we collect, why, and on what legal basis
We collect data in clearly defined phases. Right now, only Phase 1 is live. Phases 2-4 require additional notice and, where required, separate consent before they activate.
| Data | Why we use it | Legal basis |
|---|---|---|
| Approximate location at scan | Confirming your scan, regional charity reporting | Legitimate interest |
| Scan timestamp, product code, device type | Counting scans, charity tally, product analytics | Legitimate interest |
| Name and email (when you submit) | Sending your confirmation, building our consumer relationship | Consent + service |
| Charity selection | Honouring your charitable choice | Service performance |
| Community membership details — member number, email verification status | Creating and confirming your membership | Consent + service |
| Campaign claim details — claim number, claim status, the time a claim is held and confirmed | Running the first-100 Pet Bowl offer and showing you where your claim stands | Service performance |
| Delivery address — asked for only after a claim is confirmed, never at registration | Delivering a Pet Bowl you have claimed | Service performance |
| Data | Why we use it | Legal basis |
|---|---|---|
| Region + fragrance preference | Relevant product recommendations | Consent |
| Engagement signals | Sending relevant rather than mass campaigns | Legitimate interest, opt-out |
| Data | Why we use it | Legal basis |
|---|---|---|
| Photo of product or receipt | Confirming a genuine purchase, unlocking offers | Consent at upload |
| Image metadata | Counterfeit detection | Legitimate interest |
Marketing
We only send marketing if you have opted in. Every email has a one-click unsubscribe. You can withdraw consent at any time without affecting prior lawful processing.
Who we share data with
We share data only with service providers who help us deliver the service:
- Resend — sending transactional and marketing emails
- Hetzner — hosting (EU data centres, Germany)
- Drive International AG affiliates — for product and distribution decisions, in aggregated form only
We do not sell your data. We do not share identifying data with advertising platforms unless you have separately consented.
Where your data lives
Primary storage is in the European Union — Hetzner, Germany. If we ever transfer your data outside the EU or UK, we use Standard Contractual Clauses or equivalent safeguards. Copies available on request.
How long we keep it
| Data type | Retention period |
|---|---|
| Anonymous scan data (no PII) | 24 months from collection |
| Identified data with active consent | Until you withdraw, or 36 months after last interaction |
| Uploaded photos (Phase 3, when active) | 12 months |
| Anonymised aggregates | Indefinitely |
| Legal or tax records | As required by applicable law |
Your rights
Under UK GDPR and EU GDPR, you can ask us at any time to:
- Access — show you what we hold
- Rectification — correct anything wrong
- Erasure — delete your data
- Restriction — limit how we use it
- Portability — send your data elsewhere
- Object — to processing based on legitimate interests
- Withdraw consent — without affecting prior lawful processing
Email privacy@scanlittlejoe.com to exercise any right. We respond within 30 days.
You can also complain to your supervisory authority — in the UK: the Information Commissioner's Office. In Switzerland: the Federal Data Protection and Information Commissioner.
Cookies
scanlittlejoe.com uses essential cookies to make the site work. Analytics cookies are only set if you consent via the cookie banner. We do not use advertising cookies. If we ever do, we will ask first.
Security
We use industry-standard technical and organisational measures including encryption in transit, access controls, and audit logging. If a breach affects you, we will notify you and the relevant authority within the timeframes required by law.
Children
scanlittlejoe.com is not directed to anyone under 18, and you must be 18 or over to register for Community membership or to take part in any campaign offer. If we learn that we have collected data from a person under 18 without appropriate consent, we will delete it promptly.
Changes
If we change anything material, we will email you at least 14 days before it takes effect where we have your address.
Pre-launch pilot data
scanlittlejoe.com ran a pilot period before public launch. Data collected during that period is retained pending final disposition, and is not used for marketing or profiling. Your rights in section 7 — including access, objection and erasure — apply to this data in the same way as to any other personal data we hold.
Processor: Enabled Sciences Lda · Porto · Portugal