CYBRAXO LTD, Company No. 15605119, is the controller responsible for personal data processed in connection with the Website.

We collect personal data directly from you, automatically through your use of the Website and, where relevant, from service providers that support transactions and Website functionality.

What we do not collect

• Full payment card data: card numbers, CVV or CVC codes and full magnetic stripe data are not stored on our servers.
• Sensitive categories of data: information relating to health, religion or political opinions is not required for our services. Please do not send such data to us.

We use personal data for the following purposes:

• Order processing: confirming purchases, fulfilling orders, handling shipping, returns and refunds, and providing order updates.
• Customer service: responding to questions, resolving issues and maintaining communication related to orders and requests.
• Website functionality: maintaining accounts, preventing fraud, securing the Website and ensuring performance.
• Improvement and analytics: understanding how the Website is used and improving content, reliability and customer experience.
• Marketing: sending newsletters and promotions, measuring campaign performance and personalising communications where lawful and appropriate.
• Legal and compliance: meeting legal obligations, maintaining records and defending or pursuing legal claims where necessary.

We process personal data only when we have a lawful basis. Depending on the context, these may include:

• Contract: to perform a contract with you or take steps at your request before entering a contract.
• Legal obligation: to comply with tax, accounting, consumer protection and other legal requirements.
• Legitimate interests: to operate and improve our business, prevent fraud, maintain security and provide customer service where these interests are not overridden by your rights.
• Consent: where required for certain cookies and some marketing communications. You may withdraw consent at any time.

We may share personal data with trusted third parties only where necessary to operate the Website and provide services. We require service providers to protect personal data and use it only for authorised purposes.

Categories of recipients

• Delivery partners and carriers: to ship orders and provide tracking or delivery updates.
• Payment service providers: to process payments securely. Card data is handled by the provider and we receive only limited confirmation details.
• IT, hosting and e-commerce providers: to host the Website, store data securely and maintain core store functionality.
• Professional advisers: legal advisers, accountants, auditors, insurers and consultants where necessary.
• Authorities and regulators: where required by law, court order or for fraud prevention and protection of rights and safety.

No selling of personal data

We do not sell your personal data to third parties.

Because we serve customers in the UK and worldwide, personal data may be transferred to, stored in or accessed from locations outside the UK and the European Economic Area.

Where international transfers occur, we use appropriate safeguards to provide an adequate level of protection. These may include the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses and reliance on recognised adequacy regulations.

We keep personal data only for as long as necessary for the purposes described in this policy, including to meet legal, accounting or reporting requirements.

Retention periods vary according to the nature of the data and the reason it is processed.

• Order and transaction records may be retained for statutory periods required for tax and accounting.
• Customer support communications may be retained to resolve queries, maintain service history and defend or pursue legal claims.
• Marketing data is retained until you unsubscribe, withdraw consent or until another lawful retention period applies.

If you opt in, or where otherwise permitted by law, we may send marketing communications about products, promotions and updates.

You may opt out at any time through the unsubscribe link in a message or by contacting us.

We use cookies and similar technologies to operate the Website, remember preferences, improve performance and, where enabled, understand usage patterns or measure marketing performance.

Some cookies are strictly necessary. Others may require your consent depending on their purpose and applicable law.

For details on the cookies we use, why we use them and how to manage your preferences, see our Cookies Policy .

Subject to applicable limitations and legal requirements, you may have the right to:

• Access your personal data and receive a copy.
• Rectification of inaccurate or incomplete data.
• Erasure in certain circumstances.
• Restriction of processing in certain circumstances.
• Data portability to another provider.
• Object to processing based on legitimate interests and to direct marketing.
• Withdraw consent where processing relies on consent.

How to exercise your rights

Contact us at support@cybraxo.co.uk . We may request information to verify your identity and will respond within the timeframe required by applicable law.

Complaints

If you are unhappy with how we handle personal data, you can contact us first so we can address your concern.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office. ICO contact details are available through the Information Commissioner’s Office website.

The Website is not intended for children under 16 years of age, and we do not knowingly collect personal data from children under 16.

If you believe a child has provided us with personal data, please contact us so that we can take appropriate steps.

We may update this Privacy Policy from time to time to reflect changes to our practices, services, legal requirements or operational needs.

When the policy is updated, we will revise the “Last updated” date at the top of the page. Where appropriate, we may provide additional notice through the Website.