This policy explains what personal information we collect when you visit emvar.shop or place an order, how we use it and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
The data controller is EMVAR, the operator of emvar.shop. For any privacy question or request, email support@emvar.shop.
Information we collect
- Order information: your name, delivery and billing address, email address, phone number (if you give it), the items you order and your order history.
- Payment information: payments are handled by our payment providers. We receive confirmation of payment and limited details such as the card type and last four digits, but never your full card number.
- Account information: if you create an account, your login details and saved addresses.
- Messages: anything you send us by email, such as return requests or questions.
- Technical information: basic information your browser sends when you visit (such as IP address, browser type and pages requested), used to keep the site secure and working. We do not use advertising or analytics tracking.
How and why we use it
| Purpose | Lawful basis |
|---|---|
| Processing, delivering and supporting your order, including returns and refunds | Performance of a contract |
| Replying to your emails | Legitimate interests (customer service) or contract |
| Preventing fraud and keeping the site secure | Legitimate interests |
| Keeping accounting and tax records | Legal obligation |
We do not send marketing emails, and we do not sell your personal information.
Who we share it with
We share only what is needed with service providers who act on our behalf:
- Suppliers and fulfilment partners who pack and dispatch orders (name, delivery address, phone number if given, and items ordered).
- Delivery carriers who deliver your parcel and send tracking updates.
- Payment providers who process your payment and help prevent fraud.
- Our website hosting and email providers.
- Authorities such as HMRC or the police where required by law.
International transfers
Some of our fulfilment partners and service providers are located outside the UK. When your information is transferred outside the UK, we make sure it is protected by appropriate safeguards, such as the UK International Data Transfer Agreement or adequacy regulations.
How long we keep it
- Order and transaction records: 6 years from the end of the financial year of the order, for tax and accounting purposes.
- Customer service emails: up to 2 years after the matter is resolved.
- Accounts: until you ask us to delete your account, subject to the order-record period above.
Your rights
You have the right to access your personal information, correct it, ask us to delete it, restrict or object to how we use it, and receive it in a portable format. To make a request, email support@emvar.shop. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to deal with your concerns first.
Security
Our website uses an encrypted (HTTPS) connection. Access to order information is limited to those who need it to fulfil and support your order.
Cookies
We use only the cookies needed for the shop to work. See our Cookie Policy.
Changes
We may update this policy. The latest version is always on this page, with the date it was last updated.