Privacy Policy

Last updated:

1. Who We Are

This Privacy Policy explains how Wlozarinox ("we", "us", or "our") collects, uses, stores, and protects your personal data when you visit our website at https://wlozarinox.world or interact with our services.

Data Controller: Wlozarinox

Registered Address: 25 Commercial Street, Leeds, LS1 6AL, United Kingdom

Contact Email: serviceteam@wlozarinox.world

2. What Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Your full name as provided through our order form.
• Contact Data: Your email address and, optionally, your phone number.
• Communication Data: Any message or enquiry you submit through our order form or via email.
• Technical Data: IP address, browser type and version, operating system, referring URL, pages viewed, time spent on pages, and other diagnostic data collected automatically when you visit our website.
• Cookie Data: Information stored through cookies and similar technologies. For details, see our Cookie Policy.
• Consent Data: Records of the consents you have provided, including GDPR consent and cookie preferences.

3. How We Collect Your Data

We collect personal data through the following methods:

• Directly from you: When you fill out and submit our order form, contact us via email, or interact with our website.
• Automatically: Through cookies, server logs, and similar technologies when you browse our website.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we process your personal data based on the following legal grounds:

• Consent (Article 6(1)(a)): Where you have given clear consent for us to process your personal data for specific purposes, such as submitting an order form or accepting marketing cookies.
• Contractual Necessity (Article 6(1)(b)): Where processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract, such as processing your order.
• Legitimate Interests (Article 6(1)(f)): Where processing is necessary for our legitimate interests, such as improving our website, preventing fraud, and ensuring network security, provided these interests are not overridden by your rights and freedoms.
• Legal Obligation (Article 6(1)(c)): Where processing is necessary for compliance with a legal obligation to which we are subject.

5. How We Use Your Data

We use your personal data for the following purposes:

• To process and fulfil your orders and enquiries.
• To communicate with you regarding your orders, including order confirmation and shipping updates.
• To respond to your enquiries and provide customer support.
• To improve and optimise our website, content, and user experience.
• To analyse website usage and trends through aggregated, anonymised data.
• To comply with legal and regulatory requirements.
• To protect our website, services, and users from fraud and abuse.

6. Data Sharing and Third Parties

We do not sell, trade, or rent your personal data to third parties. We may share your data with:

• Service Providers: Trusted third-party service providers who assist us with website hosting, payment processing, email delivery, and analytics. These providers are contractually bound to process your data only on our behalf and in accordance with our instructions.
• Legal Requirements: Law enforcement agencies, regulatory bodies, or other third parties where required by law, court order, or to protect our legal rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction, subject to the same privacy protections.

7. International Data Transfers

Your personal data is primarily processed within the United Kingdom and the European Economic Area (EEA). If we transfer your data outside these regions, we will ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) or the European Commission.
• Transfers to countries recognised as providing an adequate level of data protection.
• Other legally recognised transfer mechanisms.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

• Order and transaction data: Retained for up to 6 years to comply with UK tax and accounting regulations.
• Communication data: Retained for up to 2 years from the last interaction, unless a longer period is required by law.
• Technical and cookie data: Retained for up to 13 months from the date of collection.
• Consent records: Retained for the duration of the consent and for a reasonable period thereafter to demonstrate compliance.

When personal data is no longer required, it will be securely deleted or anonymised.

9. Your Rights Under GDPR

Under the UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you.
• Right to Rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure (Article 17): You have the right to request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Restriction of Processing (Article 18): You have the right to request restriction of processing in certain circumstances.
• Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Article 21): You have the right to object to the processing of your personal data based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right Not to Be Subject to Automated Decision-Making (Article 22): You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal or significant effects.

To exercise any of these rights, please contact us at serviceteam@wlozarinox.world. We will respond to your request within one month, as required by law. This period may be extended by up to two further months for complex requests, and we will inform you of any such extension.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Use of HTTPS encryption for all data transmitted between your browser and our website.
• Secure storage of personal data with access restricted to authorised personnel only.
• Regular review and update of our security practices and procedures.
• Staff awareness and training on data protection responsibilities.

While we take all reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

11. Children's Privacy

Our website and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete it promptly.

12. Links to Third-Party Websites

Our website may contain links to external websites that are not operated by us. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any external website you visit.

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

14. Right to Complain

If you are not satisfied with how we handle your personal data or your data protection rights, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

• Website: https://ico.org.uk
• Phone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first at serviceteam@wlozarinox.world.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

• Email: serviceteam@wlozarinox.world
• Address: 25 Commercial Street, Leeds, LS1 6AL, United Kingdom