Privacy Policy

ArcticBreeze UK Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website or purchase from us, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

We collect information you provide directly, including: your name, email address, phone number, delivery address, billing address, and payment details. We also collect information about your browsing behaviour through cookies and similar technologies.

When you make a purchase, we collect your order history, product preferences, and any feedback or reviews you provide. If you create an account, we store your login credentials and preferences. If you contact us, we record your communication for quality and reference purposes.

Legal Basis for Processing

We process your personal data only when we have a lawful basis to do so. The legal bases we rely on include:

Contractual necessity: To fulfil your orders, process payments, and deliver products as agreed in our terms of sale.
Legitimate interest: To improve our services, prevent fraud, and communicate with you about your orders where necessary.
Consent: To send you marketing communications, which you can withdraw at any time.
Legal obligation: To comply with tax, accounting, and consumer protection laws.

How We Use Your Information

To process and deliver your orders
To communicate about your orders, deliveries, and returns
To provide customer support and respond to enquiries
To send marketing communications (only with your consent)
To improve our website, products, and services
To detect and prevent fraud

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. We use:

Essential cookies: Required for the website to function properly, including shopping cart and checkout functionality.
Analytics cookies: Help us understand how visitors interact with our website, allowing us to improve performance and content.
Marketing cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Data Sharing

We share your data only with: our courier partners (for delivery), payment processors (for transactions), and email service providers (for order communications). We do not sell your personal data to third parties.

We may also share your data with law enforcement authorities when required by law, or with professional advisors such as legal counsel and auditors under strict confidentiality obligations.

Data Retention

We retain your personal data for as long as necessary: order records for 6 years (legal requirement), account data for the duration of your account plus 2 years, and marketing consent records for 3 years.

When your data is no longer needed, we will securely delete or anonymise it in accordance with our data retention schedule.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes SSL encryption for all data transmitted through our website, secure payment processing via PCI-DSS compliant providers, and regular security assessments of our systems.

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can request correction of any inaccurate or incomplete data.
Right to erasure: You can request deletion of your personal data in certain circumstances.
Right to restrict processing: You can request that we limit how we use your data.
Right to data portability: You can request your data in a structured, machine-readable format.
Right to object: You can object to our processing of your personal data based on legitimate interests or for direct marketing.
Rights related to automated decision-making: You have the right not to be subject to decisions based solely on automated processing.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within 30 days.

International Data Transfers

Some of our service providers may be located outside the United Kingdom. In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the UK government, to protect your data during international transfers.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

Children's Privacy

Our website and products are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a person under 16, we will take steps to delete that information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically to stay informed about how we protect your information.

Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. Visit ico.org.uk for more information.