Privacy Policy

This privacy notice explains how Idoru Live processes personal data for the ROW version of www.idoru.live. It covers information we collect when you browse the site, subscribe to our mailing list, or contact us directly. It does not cover third-party services we link to, such as our shop, blog, support site or social media platforms, which publish their own privacy notices.

I. Controller and contact details
For the purposes of the UK GDPR and EU GDPR, the controller is:

Idoru Live
c/o Adam Ferns
Edinburgh Open Workshop
39-41 Assembly Street
Edinburgh, EH6 7BQ, UK
E-mail: [email protected]

II. What personal data we collect, why we use it, and our legal bases

1. Website access, delivery and security
When you visit the site, our hosting and security providers may process personal data such as your IP address, browser and device information, approximate location derived from IP, referring page, pages requested, timestamps, and technical log information. We use this data to deliver the site, keep it secure, investigate abuse, troubleshoot errors and maintain performance. Our legal basis is Art. 6(1)(f) GDPR: our legitimate interests in operating and securing the site.

2. Website analytics
We use Google Analytics to understand how visitors use the site and to improve content and performance. Depending on how the site is configured and how you use it, Google Analytics may process data such as IP-derived location, browser and device information, pages viewed, on-site interactions and referring URLs, including through cookies or similar technologies. Where cookies or similar technologies are used for analytics, the legal basis is your consent under Art. 6(1)(a) GDPR and applicable cookie rules. Where analytics data is processed without non-essential cookies, we rely on Art. 6(1)(f) GDPR: our legitimate interests in measuring and improving the site. More information is available in Google's information for sites and apps using Google Analytics and the Google Privacy Policy.

3. Mailing list subscriptions
If you subscribe to our mailing list, we collect your email address and associated subscription metadata such as the sign-up source, time of sign-up, IP address and confirmation or unsubscribe status. We use this information to send product updates, firmware news, offers and other Idoru Live news. We use Mailchimp to manage subscriptions and send emails, and the signup flow may include a confirmation email. Our legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw consent at any time using the unsubscribe link in an email or by contacting us. After you unsubscribe, we may keep limited suppression information so we can respect your opt-out request.

4. Direct enquiries
If you contact us by email or otherwise communicate with us directly, we process the personal data you provide, which may include your name, email address, organisation, and the contents of your message. We use this information to respond to you, provide support, and where relevant take steps at your request before entering into a contract. Our legal basis is Art. 6(1)(f) GDPR: our legitimate interests in running the business and responding to enquiries, and Art. 6(1)(b) GDPR where the enquiry relates to a contract or steps requested before a contract.

5. Social media and third-party links
Our site links to services such as Facebook, Instagram, YouTube, our shop, our blog and our support site. If you follow those links or interact with us through those platforms, the relevant operator will process personal data under its own privacy notice. We are not responsible for the privacy practices of third-party sites and services.

III. Who we share data with
We may share personal data with service providers who help us operate the website and business, including website hosting and infrastructure providers, analytics providers, email marketing providers, IT or support providers, and professional advisers where needed. We may also disclose data where required by law or where reasonably necessary to establish, exercise or defend legal claims. We do not sell your personal data.

The main third-party services referred to in this notice are Google Analytics and Mailchimp. Mailchimp's legal information is available at mailchimp.com/legal.

IV. International transfers
Some of our service providers may process personal data outside the UK or EEA, including in the United States. Where personal data is transferred outside the UK or EEA, we rely on a lawful transfer mechanism, such as an adequacy regulation or decision where available, or appropriate contractual safeguards made available by the provider or our contract with them.

V. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting or reporting obligations. In practice:

server and security logs are kept for as long as needed to operate, secure and troubleshoot the site;
analytics data is retained in line with our Google Analytics settings and deleted or refreshed when no longer needed;
mailing-list data is kept until you unsubscribe, withdraw consent or we stop using the mailing list, although we may keep limited suppression information to honour an opt-out; and
enquiry records are kept for as long as needed to respond to you and manage any follow-up, and for longer only where required for legal or business record-keeping reasons.

VI. Your rights
Subject to applicable law, you have the right to request access to your personal data, rectification, erasure, restriction, portability, and to object to processing based on legitimate interests. Where we rely on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. You also have the absolute right to object to direct marketing at any time.

You can exercise your rights by contacting us at [email protected]. You also have the right to complain to the UK Information Commissioner's Office (ICO). If you are in the EEA, you can also complain to your local supervisory authority.

VII. Automated decision-making
We do not use personal data collected through this site to make solely automated decisions that produce legal or similarly significant effects about you.

VIII. Security
We use reasonable technical and organisational measures to protect personal data against accidental or unlawful loss, misuse, alteration or unauthorised access. No internet transmission or storage system can be guaranteed to be 100% secure.

IX. Changes to this notice
We may update this privacy notice from time to time. The version published on this page is the current version.

Last updated April 2026

Privacy Policy

‍