Privacy Policy
Scope
This Privacy Policy explains how we handle personal information in connection with our website, orders and customer service. We process personal information under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR), including the rules for cookies and similar technologies.
Information we collect
We may collect names, billing and delivery addresses, email addresses, telephone numbers, account details, order and return information, payment status and limited transaction records, customer-service communications, device and browser data, IP-derived approximate location, website activity, cookie choices, marketing preferences, and information used to prevent fraud and keep the website secure.
Sources and purposes
We receive information directly from customers, automatically when our website is used, from Shopify and payment or fraud-prevention services, from delivery providers, and from analytics or advertising services where their use is permitted. We use it to operate the website, process and deliver orders, take payment, handle returns and support requests, communicate about orders, meet legal and accounting duties, protect customers and our services, improve the website, measure performance, and send marketing only where permitted.
Lawful bases
Depending on the activity, our lawful basis is performance of a contract or steps requested before a contract; compliance with a legal obligation; our legitimate interests in operating, securing and improving this store, preventing fraud and answering customers, balanced against individual rights; or consent where the law requires it. Marketing and non-essential cookies rely on consent where required.
Service providers
Shopify hosts and supports our online store. Payment providers process payment credentials and transactions. Delivery providers receive the details needed to deliver orders. We may also use customer-support, security, analytics and advertising providers. Each provider receives only information needed for its role and processes it under applicable data-protection duties and contractual controls.
Cookies and similar technologies
Strictly necessary cookies used for the shopping cart, checkout, account security, fraud prevention and core website functions may be used where lawful without consent. Non-essential analytics, advertising and tracking cookies or similar technologies are not placed or activated until valid consent has been obtained. Customers can accept, reject or change non-essential choices through the available cookie controls. Withdrawing consent does not affect earlier lawful processing.
Retention
We keep personal information only as long as needed for the purposes described here. Order, payment and tax records are generally retained for up to six years after the relevant transaction where needed for legal, tax or claims purposes. Customer-service records are generally retained for up to two years after a matter closes. Marketing records are kept until consent is withdrawn or they are no longer needed, and cookie choices for the period required to honour and demonstrate those choices. We may retain limited information longer where law, fraud prevention, dispute resolution or enforcement requires it, after which it is deleted or anonymised.
Security
We use proportionate technical and organisational measures designed to protect personal information, including access controls, secure transmission where appropriate, minimisation, service-provider controls, monitoring and staff access limited to legitimate needs. No method is completely risk free, but we review safeguards in light of the nature of the information and the risks involved.
International transfers
Shopify or another service provider may process information outside the United Kingdom. Where a transfer requires a safeguard, we use a UK adequacy regulation, the UK International Data Transfer Agreement or UK Addendum, or another lawful mechanism, together with supplementary measures where appropriate.
Your rights
Subject to applicable conditions and exceptions, individuals may ask for access to their personal information, correction, erasure, restriction of processing, objection to processing, and data portability. Where processing relies on consent, consent may be withdrawn at any time without affecting processing that was lawful before withdrawal. Individuals may also complain to the UK Information Commissioner's Office.
To exercise a privacy right or ask a question, contact us by email Support@provisionharbor.top or telephone 7575218695.
Contact details
- Email: Support@provisionharbor.top
- Telephone: 7575218695
- Business address: 61 St Marys Rd, Longton, Stoke-on-Trent, England, ST3 5DW, United Kingdom