Look360 is a monitoring and automation service whose core is watching and organising your data. That is why we take data protection seriously. This policy explains what personal data and customer data we collect, why, and how we protect it.
1.Data controller
The Look360 service is provided by Watchdog OÜ (registry code 17537572, VAT EE103000237), address 71003 Viljandi, Estonia. For data protection questions, write to info@look360.eu.
2.What data we process
2.1 Client contact details
On sign-up and while providing the service: company name, contact person's name, email address, phone number. Legal basis: conclusion and performance of the contract (GDPR Art 6(1)(b)).
2.2 Access needed to provide the service
To carry out monitoring, with your permission we access the sources you choose to monitor. We use as a rule read-only access and do not change your data:
- your e-shop (e.g. WooCommerce) products, prices, stock and content;
- your ERP system (e.g. Directo) products and stock, if you order the ERP integration;
- your Google Search Console search positions, if you order SEO monitoring;
- public data from the websites and social media channels (Facebook, Instagram, TikTok, YouTube) of the competitors you specify.
About competitors we collect only publicly available information (public product prices, stock, public posts). We do not collect personal data about competitors.
Exception to read-only access: if you order the pricing automation (repricing) and activate it yourself, the service changes prices in your e-shop based on the rules and confirmations you set. We store access keys encrypted.
2.3 Technical data
When using the monitoring panel: login time, IP address, activity logs and technical logs to ensure the security and reliability of the service (legitimate interest, GDPR Art 6(1)(f)). After repeated failed login attempts we temporarily restrict access. When the API is used, we log requests per key.
2.4 Payment data
Card payments are processed by the payment provider Stripe. You enter card details directly into Stripe's secure environment – the card number never reaches our server and we do not store it. We see the payment status, amount and the Stripe reference. When paying by bank transfer, we process the usual data on the invoice. Legal basis: performance of the contract (GDPR Art 6(1)(b)) and the accounting obligation (Art 6(1)(c)).
2.5 Support and correspondence
If you write to us by email or use the support chat in the monitoring panel, we process your messages and contact details to reply and to improve the service (contract and legitimate interest).
2.6 Notifications
We send reports and alerts by email to the agreed contacts. If you allow push notifications in your browser, we store the technical address of your browser's push subscription; you can withdraw the permission in your browser at any time.
2.7 Contact details of potential clients
We may send introductions of the service to e-shops and other companies. For this we collect general company contacts from public sources (the company's website, public registers): company name, web address and general email address. Legal basis: legitimate interest (GDPR Art 6(1)(f)). Every email contains an unsubscribe link; if you unsubscribe, we add the address to a suppression list and will not write to you again. If you want to know what data we hold about your company, write to us: info@look360.eu
3.For what purpose
| Purpose | Legal basis |
|---|---|
| Providing the monitoring, automation and response service | Contract (Art 6(1)(b)) |
| Sending reports and alerts to the agreed contacts | Contract (Art 6(1)(b)) |
| Service security, abuse prevention, reliability | Legitimate interest (Art 6(1)(f)) |
| Introducing the service to potential business clients | Legitimate interest (Art 6(1)(f)) |
| Accounting and statutory obligations | Legal obligation (Art 6(1)(c)) |
4.Retention
We keep client contact details for the duration of the contract and for up to 3 years after it ends. Accounting source documents we keep for 7 years as required by law. Monitoring data (history, trends) we hold to provide the service for the duration of the contract; when the contract ends we delete it within 90 days, unless you ask sooner.
We keep potential clients' contacts for up to 2 years from the last contact. The fact of unsubscribing we keep on the suppression list indefinitely, so that we do not write to you again.
5.Who we share with
We do not sell or rent your data. We do not share your data with your competitors or other clients. Only those Look360 staff who need it for their work can see the data.
To provide the service we use trusted sub-processors. The main ones are:
- Stripe – payment processing;
- Cloudflare – network security, web traffic routing and cookieless analytics;
- Google – sending emails and web analytics;
- GitHub – hosting of the public website.
We keep the service data in the European Union. If a sub-processor is located outside the European Union, we rely on safeguards approved by the European Commission (e.g. standard contractual clauses or the EU–US Data Privacy Framework).
6.Data processing agreement (DPA)
If we process your customer or business data on your behalf, we conclude a separate data processing agreement (DPA) with you, setting out the scope, duration and security measures of the processing in accordance with GDPR Art 28. To request a DPA, write to info@look360.eu.
7.Your rights
You have the right to:
- ask what data we process about you and receive a copy of it;
- request the correction of inaccurate data;
- request the erasure of data ("the right to be forgotten");
- restrict processing or object to it;
- receive your data in a portable format;
- withdraw consent and cancel the service at any time.
You can always revoke access yourself. You can revoke the monitoring access at any time in your own system (WooCommerce, Directo, Google).
To exercise your rights, write to info@look360.eu.
If you believe we have infringed your rights, you can contact the Estonian Data Protection Inspectorate: aki.ee.
8.Cookies
The Look360 website uses only technically necessary cookies (e.g. the login session). We use analytics or marketing cookies only with your consent. You can change your consent at any time.
To measure website traffic we use Google Analytics (provided by Google Ireland Limited). It is set up in consent mode (Consent Mode): without your consent no analytics cookies are stored, and traffic is measured only in anonymous, aggregated form. The IP address is anonymised.
We also use Cloudflare Web Analytics, which is cookieless and does not track you across the web. The monitoring panel (scan.look360.eu) uses only technically necessary cookies: the login session, a security cookie (CSRF) and the language and theme choice.
9.Accuracy of monitoring data
Monitoring data (prices, stock, comparisons, positions) comes from public and third-party sources and may contain errors or lag behind in time. Watchdog OÜ accepts no financial liability for the accuracy of monitoring data. Before making a decision based on the data (e.g. a price change), you must verify the accuracy of the data yourself. The detailed limitation of liability is set out in the terms of use.
10.Security
We use appropriate technical and organisational measures: encrypted connections (HTTPS), encrypted storage of access keys, access restriction and logging, and regular backups. No system is 100% secure, but we make reasonable efforts to protect your data.
11.Changes and contact
We may update this policy from time to time. We notify clients of significant changes by email. Questions: info@look360.eu.