Privacy policy

Safgran ("we", "us", "our") operates the website safgran.com and is the data controller responsible for your personal information. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and what rights you have over it. Please read it carefully. By using our website or purchasing from us, you acknowledge that you have read and understood this policy.

Our website is hosted and powered by Shopify Inc. Where Shopify processes your data on our behalf, they act as a data processor. Where Shopify processes data for their own purposes, they act as an independent data controller. You can read Shopify's privacy policy at shopify.com/legal/privacy.

What personal information we collect

We collect the following categories of personal information depending on how you interact with us:

Contact details: your name, email address, phone number, billing address, and delivery address.
Payment information: payment card details processed securely via Shopify Payments or our payment provider. We do not store your full card details on our servers.
Account information: username, password, and account preferences if you create an account.
Order and transaction information: items purchased, order history, returns, and exchanges.
Communications: messages you send us via email or our contact form.
Technical data: IP address, browser type, device identifiers, and browsing behaviour on our site collected via cookies and similar technologies.

Our lawful basis for processing your data

Under UK GDPR, we must have a lawful basis for processing your personal information. We rely on the following:

Contract performance: to process your orders, arrange delivery, handle returns, and manage your account.
Legal obligation: to comply with UK tax, consumer protection, and fraud prevention laws.
Legitimate interests: to improve our website and services, prevent fraud, and protect our business — where these interests are not overridden by your rights.
Consent: for marketing emails and non-essential cookies. You may withdraw your consent at any time.

How we use your personal information

To process and fulfil your orders, including arranging delivery and handling returns.
To communicate with you about your orders, account, or enquiries.
To send you marketing and promotional emails, where you have consented to receive them.
To improve our website, product range, and customer experience.
To detect and prevent fraud and ensure secure transactions.
To comply with our legal obligations under UK law.

How we share your personal information

We do not sell your personal information. We may share it with trusted third parties only where necessary:

Shopify Inc.: our e-commerce platform provider, who hosts our store and processes payments.
Delivery and logistics providers: to fulfil and ship your orders.
Payment processors: to securely handle your transactions.
Marketing platforms: such as email marketing tools, where you have consented to marketing.
Legal and regulatory authorities: where required by UK law, a court order, or to protect our legal rights.

All third parties we work with are required to handle your data securely and in accordance with applicable data protection law.

International data transfers

Some of our service providers, including Shopify, may process your data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as the use of UK-approved Standard Contractual Clauses or transfers to countries with an adequacy decision from the UK government.

Cookies

We use cookies and similar tracking technologies on our website to enhance your browsing experience, analyse site traffic, and support our marketing activities. You can manage your cookie preferences through our cookie consent tool or your browser settings. For more details, please refer to our Cookie Policy.

How long we keep your data

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, including:

Order and transaction records: retained for 6 years to comply with HMRC tax requirements.
Account information: retained for the duration of your account and deleted upon request.
Marketing data: retained until you withdraw your consent or unsubscribe.

Children's privacy

Our website is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their personal information, please contact us and we will delete it promptly.

Your rights under UK GDPR

As a UK resident, you have the following rights regarding your personal information:

Right to access: request a copy of the personal data we hold about you.
Right to rectification: ask us to correct inaccurate or incomplete data.
Right to erasure: request that we delete your personal data in certain circumstances.
Right to restriction: ask us to limit how we use your data.
Right to data portability: receive your data in a structured, machine-readable format.
Right to object: object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@safgran.com. We will respond within one calendar month as required by UK GDPR.

Right to complain

If you are unhappy with how we handle your personal information, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO), the UK's data protection supervisory authority.

Website: ico.org.uk
Helpline: 0303 123 1113

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will update the "Last updated" date at the top of this page and notify you of any significant changes where required by law.