Legal
Privacy Policy
Please read this privacy policy carefully as it contains important information about how Back.tech handles personal information.
Overview
We take your privacy very seriously. This privacy policy explains who we are, how and why we collect, use, disclose, sell, share, store, and retain your personal information, your rights, and how to contact us or supervisory authorities.
When we offer goods and services to individuals in the European Economic Area, we are subject to the EU GDPR. For California consumers, we are subject to the CCPA as amended by the CPRA.
Personal information we collect
We may collect and use personal information, including sensitive personal information, that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular consumer or household. When processing end consumer data, we receive this information from retailers who act as data controllers and instruct us to process such data on their behalf.
How your personal information is collected
- Browser and device details, such as technical information automatically provided when you access our website.
- Directly from our website, including information you provide when interacting with our site.
- From our clients, who as data controllers share end consumer order data with us so we can provide services under their instructions.
How and why we use personal information
When processing end consumer data on behalf of a retailer, we do so solely under that retailer’s instructions and legal basis. Under data protection laws, we can only use your personal information if we have a proper reason for doing so, such as legal obligations, contract performance, legitimate interests, or consent.
Some aspects of our services involve automated processing to support fraud detection and returns eligibility decisions. Back.tech may analyse historical return patterns, order data, and behavioural indicators to generate a return score. No automated decision by Back.tech alone produces legal effects or similarly significant consequences without retailer involvement or opportunity for review.
Promotional communications
We may use your personal information to send updates about our products or services, including offers, promotions, or new services. You can opt out at any time by contacting us or using unsubscribe links in emails or STOP instructions in texts.
Who we share personal information with
When we process end consumer data on behalf of a retailer, we share such data only with authorised sub-processors and service providers engaged to support the services, in accordance with our Data Processing Addendum and the retailer’s instructions.
We may share personal information with affiliates, service providers, third parties that help run our business, auditors, law enforcement agencies, regulatory bodies, or potential buyers during a restructuring or business sale where appropriate.
Categories disclosed for business purposes
- Identifiers
- Commercial information
- Internet or electronic network activity information
- Geolocation data
- Audio, electronic, visual, thermal, olfactory, or similar information
- Professional or employment-related information
- Inferences drawn from personal information
- Sensitive personal information
How long information is kept
We keep personal information while you have an account with us or while we provide services to you, and thereafter for as long as necessary to respond to questions, complaints, or claims, show that we treated you fairly, or keep records required by law.
Your rights
California consumers have rights under the CCPA/CPRA. EEA data subjects have rights under the EU GDPR. These may include rights to access, correct, delete, restrict, object, or receive a copy of your personal information, depending on the circumstances.
If you would like to exercise your rights, contact us with enough information to identify you, proof of identity and address, and a description of the right you want to exercise.
Security and international transfers
We have appropriate security measures in place to prevent personal information from being accidentally lost, used, or accessed in an unauthorised way. Information may be held at our offices and by third-party agencies, service providers, representatives, and agents. Some third parties may be based outside the EEA, and safeguards are applied where required.
Changes and contact
This privacy notice was published on 23/10/25 and last updated on 23/10/25. We may change this privacy notice from time to time. Please contact us by post or email if you have questions about this privacy policy or the information we hold about you.
Contact
Questions about this policy?
Send us a message and we’ll get back to you about your privacy, cookie, or usage policy question.