Privacy Policy
Last Updated:
Introduction
spyxaronhrex ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, disclose, and safeguard your information when you visit our website or purchase our handmade fabric bags and accessories, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
spyxaronhrex is the data controller responsible for your personal data. Our registered address is Unit 9, Gibbs Reed Farm, Pashley Rd, Ticehurst, Wadhurst TN5 7HE, United Kingdom.
Information We Collect
We collect and process the following categories of personal data:
- Identity Data: Name, title
- Contact Data: Billing address, delivery address, email address, telephone number
- Financial Data: Payment card details (processed securely through payment providers)
- Transaction Data: Details about products you have purchased from us
- Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
- Usage Data: Information about how you use our website
- Marketing Data: Your preferences in receiving marketing communications from us
- Communications Data: Information you provide when contacting us via forms, email, or telephone
How We Use Your Information
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- To perform the contract we are about to enter into or have entered into with you (processing orders, delivering products)
- Where it is necessary for our legitimate interests (improving our services, website functionality, fraud prevention)
- Where we need to comply with a legal obligation (tax, accounting requirements)
- With your consent (marketing communications)
Specifically, we use your information to:
- Process and fulfil your orders for handmade fabric bags and accessories
- Manage payments, fees, and charges
- Respond to your enquiries and provide customer support
- Send you order confirmations and updates
- Improve our website, products, and services
- Comply with legal and regulatory obligations
- Prevent fraud and ensure website security
Legal Basis for Processing
Under UK GDPR, we process your personal data on the following legal bases:
- Contract: Processing necessary for the performance of a contract with you
- Legal Obligation: Processing necessary to comply with legal obligations
- Legitimate Interests: Processing necessary for our legitimate business interests
- Consent: Processing based on your explicit consent
Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, we retain:
- Order and transaction data for 7 years (for tax and accounting purposes)
- Marketing consent data until you withdraw consent
- Customer service communications for 3 years
Data Protection
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Your Rights
Under UK data protection laws, you have the following rights:
- Right of Access: You can request copies of your personal data
- Right to Rectification: You can request correction of inaccurate or incomplete data
- Right to Erasure: You can request deletion of your personal data in certain circumstances
- Right to Restrict Processing: You can request limitation of how we use your data
- Right to Data Portability: You can request transfer of your data to another service provider
- Right to Object: You can object to processing based on legitimate interests
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month.
Data Sharing
We may share your personal data with:
- Payment processors to facilitate transactions
- Delivery companies to fulfil orders
- IT service providers who support our website
- Professional advisers (lawyers, accountants)
- Regulatory authorities when required by law
We do not sell your personal data to third parties. All third parties are required to respect the security of your data and treat it in accordance with the law.
International Transfers
Your personal data may be transferred to and stored in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.
Cookies
Our website uses cookies to enhance your browsing experience. For detailed information about our use of cookies, please see our Cookies Policy.
Children's Privacy
Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.
Supervisory Authority
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues (www.ico.org.uk).
Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:
Email: reply@spyxaronhrex.world
Phone: +44 1580 238449
Address: Unit 9, Gibbs Reed Farm, Pashley Rd, Ticehurst, Wadhurst TN5 7HE, United Kingdom