Product expert pilot privacy notice

This privacy notice was last updated on 04 November 2025.

1. Notice control

Version Date Author Review date Notes
1.2 October 2025 GS1 UK April 2026 Updated for GS1 UK product expert pilot with members

2. Accessibility

If you require this notice in an alternative format such as large print, audio, or another language, please contact jason.hale@gs1uk.org.

3. Introduction and purpose

This notice explains how the GS1 UK product expert web application uses and protects information during the pilot phase with GS1 UK members. It forms part of the GS1 Digital Link trials in the UK.

4. About the web application

When a QR code is scanned, your browser opens the Product Expert web app, which allows you to: 

  • Type a question and receive an AI-generated response in natural language. 

The app runs in your browser and does not need to be installed on your device.

5. What information the web app uses

The GS1 UK product expert app is designed to operate without collecting personal data. 

  • You may type a question into the AI feature. The question and AI-generated answer are stored securely for service evaluation but are not linked to you personally. 

The app does not collect names, contact details, location data, device identifiers, IP addresses, cookies or tracking data.

6. Lawful basis for processing

Because the stored data cannot identify any individual, it is not considered personal data under the UK GDPR. GS1 UK processes this information under the lawful basis of legitimate interest to evaluate and improve the GS1 UK product expert pilot and related GS1 Digital Link tools.

7. Data storage and security

  • Data is stored securely within GS1 UK systems for the duration of the pilot.
  • Data is used only for internal evaluation and improvement and will be deleted when the pilot concludes.

8. Your rights

If you believe any information could identify you, you have the right to request access, correction, or deletion, or to object to processing. Contact jason.hale@gs1uk.org.

9. Contact information

Data controller: GS1 UK 
Email:jason.hale@gs1uk.org
Website: www.gs1uk.org

10. Ending a session

You can end your session at any time by closing the browser tab. No data is stored on your device.

11. Review and updates

This notice may be updated as the pilot develops. The latest version will always be available via the GS1 UK product expert web interface or the GS1 UK website.

Appendix A: Data protection impact assessment (DPIA) summary

Purpose: To assess and minimise privacy risks in the GS1 UK product expert pilot.

  • The app processes barcode data and user questions solely for evaluation
  • No identifiable personal data, cookies, or IP addresses are collected.
  • The DPIA found a low residual privacy risk, subject to periodic review. 

DPIA completed by GS1 UK – October 2025.