Privacy Policy

Who we are

Emfizo is the data controller for personal data collected through this website. Registered details: [company name, number and registered address — to be supplied by Emfizo]. Contact: support@emfizo.com.

What we collect

• Order data — name, delivery and billing address, email, phone number and order contents.
• Payment data — handled entirely by our payment provider. We never see or store your full card details.
• Support data — the content of emails you send us.
• Analytics data — only if you accept analytics cookies. Until you do, no analytics or marketing tags are loaded.

Why we use it and our lawful basis

• To fulfil your order and provide support — performance of a contract.
• To meet accounting and consumer-law obligations — legal obligation.
• To improve the store and measure marketing — consent (analytics) or legitimate interests.

Cookies and analytics consent

Essential cookies keep your basket and site preferences working. Analytics and marketing tags are loaded only after you accept them in our consent banner, and you can change your choice at any time by clearing site data or contacting us.

Who we share data with

Our e-commerce platform and payment provider, our fulfilment and delivery partners, and our email provider — each only to the extent needed to deliver your order. Processor details: [processor list — to be supplied by Emfizo].

International transfers

Where a provider processes data outside the UK, transfers are protected by an adequacy decision or the UK International Data Transfer Addendum.

How long we keep data

Order and transaction records are kept for six years to meet UK tax and accounting requirements. Support emails are kept for up to 24 months. Analytics data is kept for the retention period set in the analytics tool.

Your rights

You have the right to access, correct, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. Email us to exercise any of these. You can also complain to the Information Commissioner's Office (ico.org.uk).

Security

The site is served over HTTPS and payments are processed by a PCI-DSS compliant provider. Access to order data is limited to staff who need it.