This notice explains what information Online Property Systems collects when you create a driver using the Button Studio website, why it is used, and how it is handled. It applies to generations made through the hosted website. The Mac and Windows desktop apps create files locally and do not send generation records to OPS.
1. Who is responsible
The controller is Online Property Systems Ltd (“OPS”, “we”, “us” or “our”). For privacy questions or requests, contact OPS through ops.uk.
2. Information recorded for each website generation
When the website successfully creates a driver, we add a record containing:
- the dealer or company name entered in Button configuration;
- the button name entered in Button configuration;
- the date and time of generation in Coordinated Universal Time (UTC); and
- the IP address received by the web server for the request.
The site uses Cloudflare as a reverse proxy. When a request arrives from a verified Cloudflare network address, we record the visitor IP supplied in Cloudflare’s CF-Connecting-IP header. Otherwise we record the address connecting directly to the web server. Other forwarded-IP headers are ignored. If you use a VPN, proxy or network gateway, the recorded address may be that service’s address.
3. Artwork and generated files
Your original source image is opened and processed in your browser; it is not uploaded as an original file. The browser sends the resized PNG images needed to build the driver. Those images are held temporarily to create and scan the archive, included in the driver you download, and are not kept in the generation register. The temporary archive is removed after it is prepared for the response. We do not store the generated driver as part of the generation log.
4. Why we use the generation record
We use these records to maintain an audit of drivers created through the hosted service, help investigate support issues, and protect the service against misuse. Our proposed lawful basis is our legitimate interests in operating, supporting and securing Button Studio. We consider the information limited to what is needed for those purposes.
5. Where the records are kept and who can access them
The records are kept in a private, access-restricted log on the server hosting Button Studio. OPS administrators and hosting-provider technical staff may access them when needed to operate, maintain or secure the service. The records are not published or sold.
6. Retention
Generation records are retained for 24 months. When a new generation is recorded, the service automatically removes daily log files dated more than 24 months earlier. If the service records no new generations after a file expires, that private file remains until the next generation triggers cleanup.
7. Your rights
Depending on the circumstances, you can ask to access, correct or erase your personal information, restrict or object to its use, and request a portable copy. To make a request, contact OPS using ops.uk. We may need enough information to find the relevant record and verify your request.
You can also complain to the UK Information Commissioner’s Office (ICO).
8. Hosting and standard server logs
The hosting provider may create separate technical access or security logs under its own service arrangements. This notice describes the Button Studio generation register; it does not replace information the hosting provider gives about its infrastructure.
9. Changes to this notice
We may update this notice as the service changes. The current version will be available from Button Studio.