Welcome to Genzstore.co.uk (the “Site”). Your privacy matters to us. This page explains what personal data we collect, how we use it, the legal bases we rely on, and the choices you have
1 Who we are
Genzstore Ltd (company number 12345678, registered in England & Wales) is the Data Controller for the personal information we process. Our registered office is 1 Startup Lane, London EC2A 3XY, United Kingdom. You can reach our Data Protection team at privacy@genzstore.co.uk.
2 What data we collect
Category
Examples
How collected
Identity data
name, username, title, date of birth
checkout forms, account sign‑up
Contact data
billing & delivery address, email, phone
checkout forms, support chats
Transaction data
order ID, products, payment method (tokenised)
WooCommerce order records
Technical data
IP address, device type, browser, time‑zone
server logs, cookies
Usage data
page views, clicks, referring URL
analytics cookies & pixels
Marketing prefs
newsletter opt‑in status, ad preferences
MailPoet / Klaviyo forms
We do not knowingly collect data about children under 13. If you believe a child has provided us personal data, contact us for deletion.
3 How & why we use your data
Purpose
Data used
Legal basis (UK GDPR art.)
Fulfil orders & provide customer service
Identity, Contact, Transaction
Art. 6(1)(b) contract
Fraud prevention & security
Identity, Technical
Art. 6(1)(f) legitimate interest
Marketing e‑mails & SMS
Identity, Contact, Usage
Art. 6(1)(a) consent
Analytics & site optimisation
Technical, Usage
Art. 6(1)(f) legitimate interest
Comply with tax / accounting laws
Transaction
Art. 6(1)(c) legal obligation
4 Cookies & similar tech
We use first‑ and third‑party cookies (e.g., WooCommerce, Google Analytics 4, Meta Pixel) to remember your basket, analyse traffic, and personalise ads. Full details are in our separate Cookie Policy, where you can change or withdraw consent at any time via the banner.
5 Who we share data with
Recipient
Reason
Safeguards
Payment processors (Stripe, PayPal, Klarna)
take payments & refunds
PCI‑DSS compliance
Dropshipping suppliers (Avasam, Spocket, CJ)
ship products directly to you
UK / EU SCCs where needed
Couriers (Royal Mail, Evri, DPD)
deliver your order
Label data only
Email & SMS tools (MailPoet, Klaviyo)
send transactional & marketing messages
DPA & EU SCCs
Analytics & ad partners (Google, Meta, TikTok)
site performance, targeted ads
Consent or legitimate interest
Professional advisers & regulators
legal, tax, audit
Confidentiality agreements
We never sell your personal data.
6 International transfers
Some partners operate outside the UK/EEA (e.g., US‑based servers). When we transfer data internationally, we rely on:
Adequacy regulations (e.g., EU/UK‑US Data Bridge)
Standard Contractual Clauses (SCCs)
Additional technical & organisational measures
7 Data retention
We keep:
Order records — 2 years (tax law)
Marketing data — until you withdraw consent or after 24 months of inactivity
Cookie identifiers — up to 13 months (analytics) or as otherwise stated in the Cookie Policy When retention expires, data is securely deleted or anonymised.
8 Your rights
Under UK GDPR you can:
Access the personal data we hold about you
Correct inaccurate data
Delete your data
Restrict or object to processing
Port your data to another provider
Withdraw consent at any time for marketing
To exercise rights, email privacy@genzstore.co.uk with your request. We will respond within one month.
If you believe we haven’t handled your request properly, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, but we’d appreciate the chance to address concerns first.
9 Security
We use HTTPS/TLS encryption, PCI‑compliant payment gateways, two‑factor admin logins, regular vulnerability scans, and least‑privilege access controls to keep your data safe.
10 Third‑party links
Our Site may include links to third‑party websites. We do not control these sites and are not responsible for their privacy statements.
11 Changes to this policy
We may update this Privacy Policy to reflect changes in law or our practices. Major changes will be highlighted on the Site or emailed to registered customers. The “Last updated” date at the top will change accordingly.
