BottleScanner
Terms Privacy Cookies Home

Privacy Policy

Effective: March 2026

1. Introduction & Data Controller

This Privacy Policy describes how Tyga.Cloud Ltd (company number 14643275), registered in England and Wales ("we", "us", "our"), collects, uses, and protects personal data when you use the BottleScanner.my platform ("Service"). BottleScanner.my is a division of Tyga.Cloud Ltd.

Data Controller: Tyga.Cloud Ltd, Ground Floor, Unit 2 Mallard Court, Mallard Way, Crewe Business Park, Crewe, Cheshire, CW1 6ZQ, United Kingdom.

Data Protection Officer: dpo@tyga.cloud

2. Information We Collect

Information you provide:

  • Email address (waitlist signup)
  • Images uploaded for bottle scanning

Information collected automatically:

  • IP address and approximate location
  • Browser type, device type, and operating system
  • Pages visited, features used, and session duration
  • Referral source
  • Cookies and similar technologies (see our Cookie Policy)

Scan data:

  • AI identification results (brand, product name, spirit type)
  • Matched product information
  • Scan timestamps and source site

Images uploaded for scanning are processed in memory and are not permanently stored.

3. How We Use Information

We use your personal data to:

  • Provide, operate, and maintain the Service
  • Process bottle scans and return identification results
  • Send waitlist notifications and service updates
  • Analyse usage to improve the Service
  • Detect, prevent, and address fraud or security issues
  • Comply with legal obligations

4. Legal Basis for Processing (GDPR Article 6)

PurposeLegal Basis
Providing the scanning ServiceLegitimate interest (Art. 6(1)(f))
Waitlist signup & notificationsConsent (Art. 6(1)(a))
Analytics and service improvementLegitimate interest (Art. 6(1)(f))
Marketing communicationsConsent (Art. 6(1)(a))
Legal complianceLegal obligation (Art. 6(1)(c))

5. Data Sharing & Third Parties

We share personal data only with parties necessary to deliver the Service:

ProviderPurposeData Shared
Anthropic (Claude API)AI bottle identificationUploaded images (processed, not stored by us)
MongoDBDatabase hostingAll stored application data (encrypted)
RedisCachingCached page data
tygaemail.com (own SMTP relay)Email deliveryEmail addresses for waitlist notifications

We do not sell your personal data. We may disclose data if required by law, court order, or to protect the rights and safety of Tyga.Cloud Ltd and its users.

6. International Transfers

Some of our service providers are based outside the United Kingdom and European Economic Area (EEA). Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office.

7. Data Retention

We retain your personal data as follows:

  • Waitlist emails — retained until you unsubscribe or the service launches
  • Scan records — retained for analytics and service improvement; anonymised after 12 months
  • Uploaded images — processed in memory only; not permanently stored

8. Your Rights (GDPR)

If you are located in the UK or EEA, you have the following rights under the General Data Protection Regulation:

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — request correction of inaccurate data
  • Right to erasure — request deletion of your personal data ("right to be forgotten")
  • Right to restrict processing — request that we limit how we use your data
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to object — object to processing based on legitimate interests
  • Right to withdraw consent — withdraw consent at any time where processing is based on consent

To exercise these rights, contact our Data Protection Officer at dpo@tyga.cloud. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. US Privacy Rights

If you are a resident of the United States, you may have rights under one or more of the following state privacy laws. We honour these rights regardless of which state you reside in.

9.1 California (CCPA/CPRA)

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides California residents with the following rights:

  • Right to know — what personal information we collect, use, disclose, and sell
  • Right to delete — request deletion of your personal information
  • Right to correct — request correction of inaccurate personal information
  • Right to opt-out of sale/sharing — we do not sell or share personal data for cross-context behavioural advertising
  • Right to limit use of sensitive personal information — we do not collect sensitive personal information as defined by CPRA
  • Right to non-discrimination — we will not discriminate against you for exercising your rights

Categories of personal information collected in the preceding 12 months: identifiers (email address, IP address), internet activity (pages visited, scan usage), geolocation (approximate, from IP).

Categories sold or shared: None. We do not sell or share personal information.

To exercise CCPA/CPRA rights, contact us at dpo@tyga.cloud. We will verify your identity and respond within 45 days.

9.2 Virginia (VCDPA)

The Virginia Consumer Data Protection Act provides Virginia residents with rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, sale of personal data, and profiling. We do not engage in targeted advertising, sale of data, or automated profiling.

9.3 Colorado (CPA)

The Colorado Privacy Act provides Colorado residents with rights to access, correct, delete, and port their personal data, and to opt out of targeted advertising, sale of personal data, and certain profiling. To exercise these rights or to appeal a denied request, contact dpo@tyga.cloud.

9.4 Connecticut (CTDPA)

The Connecticut Data Privacy Act provides Connecticut residents with rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, sale of personal data, and profiling. Contact dpo@tyga.cloud to exercise these rights.

9.5 Other US States

Privacy laws in Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Iowa, Indiana, Tennessee, and other states provide similar consumer privacy rights. We honour access, deletion, and opt-out requests from residents of all US states. Contact dpo@tyga.cloud to exercise your rights regardless of your state of residence.

9.6 Do Not Track & Global Privacy Control

We honour the Global Privacy Control (GPC) signal as a valid opt-out of sale/sharing request under applicable state laws. We do not currently respond to browser-level Do Not Track (DNT) signals, as there is no universally accepted standard for DNT.

10. Children's Privacy (COPPA & UK)

BottleScanner.my is an alcohol-related service and is not intended for use by anyone under the age of 21 in the United States or under the age of 18 in the United Kingdom and elsewhere.

In compliance with the US Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under the age of 13. If we become aware that we have collected personal data from a child under 13 (or under 16 in the EEA/UK), we will take steps to delete it promptly.

If you believe a child has provided us with personal information, please contact dpo@tyga.cloud immediately.

11. FTC Disclosure (United States)

In accordance with FTC guidelines, we disclose that product links displayed in scan results may be affiliate links. Tyga.Cloud Ltd may earn a commission when you make a purchase through these links, at no additional cost to you. Affiliate relationships do not influence editorial review scores or AI identification results.

12. Security Measures

We implement appropriate technical and organisational measures to protect your personal data, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Regular security assessments and vulnerability scanning
  • Access controls and authentication mechanisms
  • Regular backups and disaster recovery procedures

While we take reasonable precautions, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

13. Cookies

We use cookies and similar technologies to operate and improve the Service. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or on-site notification. The "Effective" date at the top of this page indicates when the policy was last revised.

15. Contact & DPO

For questions about this Privacy Policy or to exercise your data rights, contact our Data Protection Officer:

Data Protection Officer
Tyga.Cloud Ltd
Ground Floor, Unit 2 Mallard Court, Mallard Way
Crewe Business Park, Crewe, Cheshire, CW1 6ZQ
Email: dpo@tyga.cloud

© 2026 Tyga.Cloud Ltd. BottleScanner.my is a division of Tyga.Cloud Ltd. All rights reserved.

Terms Privacy Cookies