Privacy Policy

Version 1.2 · Effective 15 August 2026

Panelicious Limited (company number 17258409) (“we”, “us”, “our”) operates the Panelicious website at panelicious.com and the Panelicious display management platform (collectively, the “Service”). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use the Service and tells you about your privacy rights and how the law protects you.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we provide services to individuals in the European Economic Area (EEA), we also comply with the EU General Data Protection Regulation (EU GDPR).

By using our Service, you acknowledge this Privacy Policy.

Throughout our website we may link to other websites owned and operated by trusted third parties. Those third-party websites may use cookies or similar technologies in accordance with their own separate policies. For privacy information relating to them, please consult their policies as appropriate.

When an organisation uses Panelicious to manage its screens, we act as a data processor on behalf of that organisation, and its own privacy notice governs how your data is handled in that context.

1. Definitions

In this policy, “we”, “us”, and “our” refer to Panelicious Limited (company number 17258409), the operator of this website and the Panelicious display management platform.

Personal data: Information relating to an identified or identifiable individual (known as a data subject).

Processing: Any operation or action performed on personal data, for example collection, recording, organisation, structuring, storage, alteration, deletion, or otherwise using personal data.

2. Information we collect

Account and registration data. We collect your name, contact details including email address, and credentials such as your password (which we store in hashed form). For third-party sign-ins, we receive the basic profile information that provider shares.

Billing and subscription data. We collect billing details, subscription tier, and billing history. Payment processing is handled by Stripe; we do not store your full card number on our systems.

Screen and device data. We collect device identifiers, pairing codes, device model and operating system, connection status, the IP address a connected device reports from, and diagnostic logs such as errors and uptime.

Content data. We store the content you configure the Service to display, such as images, media, playlists, schedules, and dashboard layouts.

Usage data. We collect your IP address, browser type and version, referrer data, the pages of our Service you visit, the time and date of your visit, unique device identifiers, and other diagnostic data.

Communications data. We collect the content of messages and your email address when you contact us for support.

Location data. We do not collect precise geolocation. We may infer an approximate region (such as a country or city) from an IP address for security and analytics purposes.

3. How we use your data and lawful basis

We use your personal data to:

• provide, maintain, and operate the Service, including pairing and controlling the screens you connect (contract performance)
• process payments and manage your subscription (contract performance, legal obligation)
• respond to your support requests and communicate with you about the Service (contract performance, legitimate interests)
• monitor usage, detect and prevent abuse, and keep the Service secure (legitimate interests)
• analyse and improve the Service, and develop new features (legitimate interests or consent)
• send you service-related notices, and marketing messages where you have asked to receive them (legitimate interests or consent)
• comply with our legal obligations and enforce our agreements (legal obligation, legitimate interests)

Legitimate interests. Where we rely on legitimate interests as our lawful basis for processing, those interests are: sending product and service updates to existing customers; monitoring and improving the security and performance of our services; analysing how our services are used in order to improve them; and operating and developing our business generally. We have considered whether those interests are overridden by the rights and interests of the individuals whose data we process, and we are satisfied that they are not, given the limited and reasonable nature of the processing involved and the controls we have in place.

Children. Our services are intended for use by businesses and are not directed at individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from someone under 18, please contact us at support@panelicious.com and we will delete it promptly.

4. Retention of data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. The factors we consider include: how long we need the data to provide our services; our legal obligations (including tax, accounting, and regulatory requirements); whether the data may be needed to establish, exercise, or defend legal claims; and any applicable limitation periods under law. Billing and financial records are retained for as long as required by applicable tax and accounting law. Support and communications records are retained for a sufficient period to address complaints and disputes, taking into account applicable legal limitation periods. Usage data is retained for a limited period before being deleted or anonymised. Aggregated data that does not identify any individual may be stored indefinitely. Once data is no longer required, it is securely deleted or anonymised.

Notwithstanding the above, we may retain personal data for longer where we are required to do so by law, court order, or other legal obligation; where we have received a valid request from a law enforcement or regulatory authority; or where retention is necessary for the establishment, exercise, or defence of legal claims. In such cases, the relevant data will be retained for as long as necessary and deleted once the obligation or proceedings have concluded.

5. Marketing communications

We may from time to time send you information about our products, services, and new features. Where we do so, we will rely on your consent or, where you are an existing customer, our legitimate interests in keeping you informed about developments relevant to the services you use. You can opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, or by contacting us at support@panelicious.com. Opting out will not affect service-related communications such as receipts, account notices, or support messages.

6. Transfer of data

Some of our third-party service providers are based outside the UK, including in the United States. Where we transfer your personal data outside the UK, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner, or reliance on the UK–US Data Bridge where applicable.

Our current sub-processors, the countries they operate in, and the safeguards relied on for each are published in full at https://panelicious.com/subprocessors. You can find further information about the safeguards each provider has in place by reviewing their respective privacy and data processing documentation.

7. Security of data

We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure. Access to personal data is restricted to those with a legitimate need. We work with established infrastructure providers who maintain high security standards. No method of transmission over the internet is completely secure. If you have any security concerns, please contact us at support@panelicious.com.

8. Cookies

We use only strictly necessary cookies. They keep you signed in and protect your account from cross-site attacks; without them you could not use the Service at all.

We do not use analytics cookies, advertising cookies, or any other non-essential cookie, and we do not track you across websites. Because strictly necessary cookies are exempt from the consent requirement in regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003, we do not show a cookie banner and there is nothing for you to accept or decline.

It is our policy not to adopt any service that would set non-essential cookies. Should we ever introduce analytics, it will be a cookieless product.

A full list of the cookies we set, with their purpose and lifetime, is in our Cookie Policy.

We do not currently respond to Do Not Track (DNT) browser signals.

9. Your rights in relation to your data

Under UK GDPR, you have the right to:

• access and receive a copy of the personal data we hold about you
• rectify any personal data we hold about you that is inaccurate
• request that we restrict the processing of your personal data
• object to our processing of your personal data
• request the deletion of personal data we hold about you
• obtain a copy of your personal data in a commonly used electronic format (data portability)

Where we rely on your consent as the basis for processing your personal data, you may withdraw that consent at any time by contacting us at support@panelicious.com or using the relevant opt-out mechanism described in this policy. Withdrawing consent will not affect the lawfulness of any processing carried out before the withdrawal.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

Whilst we are not required to appoint a Data Protection Officer, any data protection queries can be directed to support@panelicious.com.

To exercise any of your rights, please contact us at support@panelicious.com. We may ask you to verify your identity before responding.

If you are unhappy with how we have handled your personal data, we ask that you contact us in the first instance at support@panelicious.com so we can try to resolve your concern. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at any time. You can contact the ICO at ico.org.uk, by phone on 0303 123 1113, or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

10. Sharing your data with others

We may employ third-party companies and individuals (“Service Providers”) to provide the Service on our behalf. These Service Providers have access to your personal data only to perform these tasks on our behalf, and are contractually obliged not to disclose or use it for any other purpose.

Our current Service Providers are:

• Cloudflare, Inc. — Hosting, content delivery, and network and application security.
• Google Cloud EMEA Limited — Cloud infrastructure and data storage.
• Google Ireland Limited — Business email and internal document storage.
• Stripe Payments Europe, Ltd. — Payment processing and subscription billing.
• Jitbit Ltd — Customer support ticketing and knowledge base.
• Resend, Inc. — Delivery of transactional email.

This list is maintained as the single source of truth for both this policy and our Data Processing Agreement, and is published in full with locations and transfer safeguards at https://panelicious.com/subprocessors.

We may also disclose your personal data where required to do so by law, or in response to valid requests by public authorities, including law enforcement or regulatory authorities.

11. Jurisdiction-specific rights

California residents. If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to request deletion, and the right to correct inaccurate information. We do not sell personal information. To exercise your California privacy rights, please contact us at support@panelicious.com.

Other jurisdictions. If you are located outside the UK, you may have additional rights under the privacy laws of your country. We will endeavour to handle any such requests in accordance with applicable law. Please contact us at support@panelicious.com.

12. Changes to this Privacy Policy

We may update our Privacy Policy from time to time. When we make significant changes to how we process your personal data, we will notify you, for example by posting a notice on our website or by email. We encourage you to review this policy periodically.

13. Contact us

If you have any questions about this Privacy Policy, or wish to exercise any of your rights, you can contact us:

Email: support@panelicious.com

Post: Panelicious Limited, Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB

Version history

Prepared on the basis of UK GDPR and the Data Protection Act 2018. Reviewed annually or following any material change to data processing activities. This document does not constitute legal advice.