Privacy Notice

 

1. Who we are

# is the controller for purchases on our UK website.

Contact: # Please feel free to contact us if you have a query for us.

2. What data we collect

• Identity and contact (name, email, phone, billing/shipping address).

• Order and payment metadata (we do not store full card numbers).

• Account credentials and preferences.

• Device/technical data (IP, user-agent, approximate location, logs).

• Marketing preferences.

• Cookies/online identifiers (see Cookies Notice).

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

3. Purposes & lawful bases

• Order fulfilment and support – performance of contract.

• Payments, fraud, security – legitimate interests and/or legal obligation.

• Direct marketing (email/SMS/WhatsApp) – consent (withdraw anytime).

• Analytics/personalisation – consent via cookie banner.

• Legal, accounting, tax – legal obligation.

4. Sharing

We share data with payment processors, delivery/warehouse partners, IT/hosting, customer-support tools, and advisers under processor agreements. We do not sell personal data.

5. International transfers

Where transfers occur outside the UK/EEA, we use safeguards (UK IDTA or EU SCCs + UK Addendum) and conduct risk assessments.

6. Retention

• Orders/invoices: typically 6 years (tax/accounting).

• Support: up to 3 years after resolution.

• Marketing: until consent is withdrawn or after 24 months of inactivity. Then deletion or anonymisation.

7. Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Contact.#

8. Security

We apply encryption in transit, role-based access, and audits. We assess suspected breaches and notify the ICO and affected users where required.