Privacy policy

 

This Privacy Policy explains how fanormq.shop collects, uses, stores, shares, and protects personal information when you visit our website, make a purchase, create an account, contact us, subscribe to marketing communications, or otherwise interact with our services.

This Privacy Policy applies to personal information processed through fanormq.shop and related customer service, order fulfilment, marketing, fraud prevention, analytics, and administrative activities.

By using our website, you acknowledge that your personal information will be handled as described in this Privacy Policy. Where consent is required by law, we will request your consent before carrying out the relevant processing.

1. Who Is Responsible for Your Personal Information

For the purposes of applicable UK data protection law, fanormq.shop is responsible for deciding how and why the personal information described in this Privacy Policy is processed.

For privacy enquiries, data protection requests, or complaints, contact:

Store: fanormq.shop
Email: info@fanormq.shop

2. Personal Information We Collect

The personal information we collect depends on how you interact with our website and services.

Information You Provide Directly

We may collect information that you provide when you:

  • Place or attempt to place an order

  • Create or manage a customer account

  • Contact customer support

  • Request a return, refund, cancellation, or exchange

  • Subscribe to emails or other marketing communications

  • Submit a product review, survey response, or website form

  • Participate in a promotion

  • Report a damaged, faulty, missing, or incorrect item

This information may include:

  • Full name

  • Billing address

  • Delivery address

  • Email address

  • Telephone number

  • Account login information

  • Order number

  • Products ordered or viewed

  • Size, colour, quantity, and product preferences

  • Delivery instructions

  • Customer service correspondence

  • Return and refund information

  • Photographs or documents submitted in connection with an order issue

  • Marketing preferences

  • Survey or review responses

  • Any other information you voluntarily provide

Please do not send passwords, full payment card details, government identification documents, or other highly sensitive information by email unless we specifically request information through an appropriate and secure process.

Payment and Transaction Information

Payments are processed through Shopify and the payment providers made available during checkout.

Depending on the payment method selected, the relevant payment provider may collect:

  • Payment card details

  • Bank or payment account information

  • Billing information

  • Payment authentication information

  • Transaction identifiers

  • Payment status

  • Fraud-prevention information

We generally receive transaction confirmation, payment status, limited payment details, and information necessary to process the order. Full payment card details are normally processed directly by the relevant payment provider rather than stored by us.

Information Collected Automatically

When you browse or use our website, we and our service providers may automatically collect technical and usage information, including:

  • Internet Protocol address

  • Browser type and version

  • Device type

  • Operating system

  • Language and regional settings

  • Time zone

  • Device identifiers

  • Referring website or advertising source

  • Pages viewed

  • Products viewed or added to a basket

  • Search terms

  • Links and buttons selected

  • Checkout activity

  • Session duration

  • Date and time of access

  • Cookie identifiers

  • Approximate location derived from an IP address

  • Website performance and error information

This information may be collected through cookies, pixels, tags, scripts, local storage, server logs, software development kits, and similar technologies.

Information Received from Other Sources

We may receive personal information from:

  • Shopify

  • Payment processors

  • Delivery companies and fulfilment providers

  • Fraud-prevention and identity-verification providers

  • Marketing and advertising platforms

  • Analytics providers

  • Customer service applications

  • Social media platforms

  • Business partners

  • Publicly available sources

  • Other parties where permitted by law

For example, a delivery company may provide tracking updates, or a payment provider may inform us whether a payment was authorised, declined, disputed, or refunded.

3. How We Use Personal Information

We may use personal information for the following purposes.

Processing and Fulfilling Orders

We use personal information to:

  • Confirm and process orders

  • Take and verify payments

  • Arrange packaging, fulfilment, shipping, and delivery

  • Send order confirmations and tracking information

  • Process cancellations, returns, exchanges, and refunds

  • Contact customers about an order

  • Resolve delivery or payment issues

  • Maintain transaction records

The legal bases for this processing are normally performance of a contract and compliance with legal obligations.

Providing Customer Service

We use personal information to:

  • Respond to enquiries

  • Investigate complaints

  • Resolve product or delivery problems

  • Verify orders

  • Process warranty, return, and refund requests

  • Maintain records of customer communications

  • Protect customers from unauthorised account activity

The legal bases may include performance of a contract, compliance with legal obligations, and our legitimate interests in providing effective customer service and maintaining accurate records.

Operating and Improving Our Website

We may use information to:

  • Operate website functions

  • Remember basket contents and preferences

  • Diagnose technical problems

  • Improve website speed, accessibility, and navigation

  • Understand how customers use our website

  • Test website features

  • Analyse product and page performance

  • Improve our product selection and services

  • Protect the stability and security of the website

The legal bases may include our legitimate interests and, where required, your consent.

Fraud Prevention and Security

We may process information to:

  • Detect and prevent fraud

  • Verify payment and order activity

  • Identify suspicious transactions

  • Protect customer accounts

  • Prevent misuse of promotions

  • Enforce our policies

  • Protect our legal rights

  • Maintain website and network security

  • Investigate suspected unlawful activity

  • Respond to chargebacks and payment disputes

The legal bases may include our legitimate interests, compliance with legal obligations, and the establishment, exercise, or defence of legal claims.

Marketing and Advertising

Where permitted by law, we may use personal information to:

  • Send promotional emails

  • Inform you about products, offers, or store updates

  • Measure marketing performance

  • Create customer or audience segments

  • Display relevant advertising

  • Limit repeated advertisements

  • Understand how customers interact with advertisements

  • Improve advertising campaigns

We rely on consent where consent is legally required. In limited circumstances, we may rely on legitimate interests where permitted by applicable law.

You can unsubscribe from promotional emails at any time by using the unsubscribe option in the message or contacting info@fanormq.shop.

Unsubscribing from marketing will not stop essential service communications, such as order confirmations, delivery notices, security alerts, or responses to customer enquiries.

Legal and Regulatory Compliance

We may use and retain information to:

  • Comply with tax, accounting, consumer protection, and data protection obligations

  • Respond to lawful requests from regulators, courts, law enforcement agencies, or public authorities

  • Maintain legally required business records

  • Investigate disputes

  • Enforce contractual rights

  • Establish, exercise, or defend legal claims

  • Respond to data protection requests and complaints

The legal basis is normally compliance with a legal obligation or our legitimate interests in protecting our rights.

4. Lawful Bases for Processing

Depending on the activity, we may rely on one or more of the following lawful bases:

Contract

Processing is necessary to take steps at your request before entering into a contract or to perform a contract with you, including processing and delivering an order.

Legal Obligation

Processing is necessary for us to comply with an obligation imposed by applicable law, such as tax, accounting, consumer protection, or data protection requirements.

Legitimate Interests

Processing is necessary for our legitimate business interests or those of another party, provided that those interests are not overridden by your rights and interests.

Our legitimate interests may include:

  • Operating and improving our store

  • Providing customer support

  • Preventing fraud and misuse

  • Maintaining website security

  • Understanding business performance

  • Keeping accurate records

  • Managing disputes

  • Protecting our legal rights

  • Communicating with existing customers where permitted by law

Consent

We may rely on your consent for activities such as certain marketing communications, analytics technologies, advertising cookies, or similar tracking activities.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Legal Claims and Other Permitted Grounds

Where applicable, we may process information when necessary to establish, exercise, or defend legal claims or where another lawful ground is available under UK data protection law.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate the store, remember preferences, analyse website use, support security, and provide marketing or advertising functions.

Cookies are small files or pieces of information stored on or accessed from your device.

We may use the following categories.

Strictly Necessary Technologies

These technologies are required for core website functions, including:

  • Page navigation

  • Shopping basket functions

  • Checkout

  • Payment processing

  • Account login

  • Security

  • Fraud prevention

  • Network management

  • Remembering privacy choices

Because these technologies are necessary to provide requested services or maintain website security, they may operate without consent where permitted by law.

Preference Technologies

These technologies remember choices such as language, location, account preferences, and display settings.

Analytics Technologies

These technologies help us understand website traffic, customer journeys, page performance, and technical errors.

Where required by applicable law, analytics technologies will only be activated after you provide consent.

Advertising Technologies

These technologies may be used to:

  • Measure advertising effectiveness

  • Understand whether an advertisement resulted in a visit or purchase

  • Create or match advertising audiences

  • Show more relevant advertisements

  • Limit how often advertisements are displayed

Advertising technologies will only be used where permitted by law and, where required, after you provide consent.

You can manage applicable cookie preferences through the cookie banner or privacy settings displayed on our website. You may also configure your browser to block or delete cookies.

Blocking certain cookies may affect website functions, including the shopping basket, account login, checkout, language preferences, or payment processing.

6. Shopify

Our store is hosted and supported by Shopify.

Shopify provides the ecommerce infrastructure that enables us to operate our website, process orders, maintain customer accounts, support checkout, provide security functions, and manage store data.

Shopify may process personal information on our behalf as a service provider and may also process certain information for its own lawful purposes, depending on the Shopify services, privacy features, or enhanced services used.

Information processed through Shopify may be stored or accessed in countries outside the United Kingdom. Applicable contractual, organisational, and legal safeguards may be used to protect such transfers.

Your use of our store may also be subject to Shopify’s own privacy information and privacy controls.

7. How We Share Personal Information

We do not disclose personal information indiscriminately. We may share information where necessary for the purposes described in this Privacy Policy.

Recipients may include:

Shopify and Website Providers

We share information with Shopify and technical providers that host, secure, maintain, or support our website.

Payment Providers

Payment providers receive information necessary to authorise payments, prevent fraud, process refunds, and manage disputes.

Delivery and Fulfilment Providers

We may share names, addresses, telephone numbers, email addresses, order information, and delivery instructions with warehouses, suppliers, fulfilment providers, couriers, postal operators, and tracking providers.

Customer Service Providers

We may use systems that help manage customer messages, order enquiries, returns, reviews, or support tickets.

Analytics and Marketing Providers

Subject to applicable consent and privacy requirements, we may share or make information available to analytics, email marketing, advertising, and social media providers.

Fraud-Prevention and Security Providers

We may share transaction, device, payment, account, and technical information with providers that help identify fraud, chargebacks, unauthorised activity, and security threats.

Professional Advisers

Information may be shared with accountants, auditors, insurers, lawyers, tax advisers, consultants, and other professional advisers where reasonably necessary.

Authorities and Legal Recipients

We may disclose information to courts, regulators, law enforcement agencies, tax authorities, government bodies, or other authorised recipients where required or permitted by law.

Business Transfers

If all or part of our business is sold, transferred, reorganised, financed, merged, or acquired, personal information may be disclosed to relevant advisers, prospective purchasers, investors, lenders, or successor organisations, subject to appropriate confidentiality and data protection measures.

8. International Transfers

Some service providers that support our website, payments, analytics, advertising, fulfilment, or customer service may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will use a lawful transfer mechanism where required. Depending on the destination and recipient, this may include:

  • UK adequacy regulations

  • The UK International Data Transfer Agreement

  • The UK Addendum to approved standard contractual clauses

  • Binding corporate rules

  • Other safeguards permitted under UK data protection law

  • A legally recognised exception where applicable

We may also require contractual, technical, and organisational protections designed to maintain an appropriate level of data protection.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, tax, consumer protection, fraud-prevention, dispute-resolution, and recordkeeping requirements.

Retention periods depend on:

  • The type of information

  • The reason it was collected

  • The length of the customer relationship

  • Legal and regulatory requirements

  • Applicable limitation periods

  • The likelihood of a dispute

  • Fraud-prevention and security requirements

  • Whether the information is required to establish, exercise, or defend legal claims

Order, payment, tax, refund, and transaction records may normally be retained for up to six years after the relevant transaction or financial period, or for a longer period where required by law or necessary for an active dispute.

Customer service correspondence may be retained for a reasonable period after the enquiry is resolved.

Marketing information is retained until you unsubscribe, withdraw consent, object to the processing, or the information is no longer required, subject to retaining limited suppression information to ensure that your marketing preference is respected.

Cookie and analytics information is retained according to the lifespan of the relevant cookie or the settings of the applicable service provider.

When personal information is no longer required, we will delete, anonymise, or securely dispose of it, unless continued retention is required or permitted by law.

10. Data Security

We use reasonable technical and organisational measures designed to protect personal information against:

  • Unauthorised access

  • Accidental loss

  • Misuse

  • Alteration

  • Disclosure

  • Destruction

  • Unlawful processing

These measures may include:

  • Secure website connections

  • Access controls

  • Account authentication

  • Payment security measures

  • Fraud monitoring

  • Restricted staff or provider access

  • Security updates

  • Data minimisation

  • Contractual confidentiality requirements

  • Backup and incident-response procedures

No online service, transmission method, or storage system can be guaranteed to be completely secure. You are responsible for keeping account passwords confidential and for notifying us promptly if you suspect unauthorised access to your account.

Where a personal data breach occurs, we will investigate it and make any required notifications to affected individuals and the appropriate regulator in accordance with applicable law.

11. Your Data Protection Rights

Depending on the circumstances and subject to legal limitations, you may have the following rights.

Right of Access

You may request confirmation of whether we process your personal information and request a copy of that information.

Right to Rectification

You may request correction of inaccurate personal information or completion of incomplete information.

Right to Erasure

You may request deletion of personal information in certain circumstances.

This right does not apply where continued processing is required for legal obligations, legal claims, fraud prevention, contractual records, or other lawful reasons.

Right to Restrict Processing

You may request that processing be limited in certain circumstances, including while the accuracy or lawfulness of processing is being reviewed.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request eligible information in a structured, commonly used, and machine-readable format.

Right to Object

You may object to processing based on legitimate interests in certain circumstances.

You have the right to object at any time to the use of personal information for direct marketing. When you object to direct marketing, we will stop using your information for that purpose.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

Rights Relating to Automated Decision-Making

You may have rights relating to decisions based solely on automated processing where those decisions produce legal or similarly significant effects.

We may use automated fraud or risk indicators to assist with order and payment security. Where a significant decision is made solely through automated processing and applicable law provides relevant rights, you may request human review, express your position, or challenge the decision.

Right to Complain

You may raise a privacy or data protection complaint directly with us.

You also have the right to complain to the Information Commissioner’s Office, which is the United Kingdom’s data protection supervisory authority.

Exercising your rights will not normally require payment. We may charge a reasonable fee or refuse a request where permitted by law, including where a request is manifestly unfounded or excessive.

12. How to Exercise Your Rights

To exercise a data protection right, contact:

Email: info@fanormq.shop

Please clearly state:

  • Your name

  • The email address connected to your account or order

  • Your order number, where relevant

  • The right you wish to exercise

  • The information or processing concerned

We may request reasonable information to confirm your identity and protect personal information from unauthorised disclosure.

We will respond without undue delay and normally within one calendar month after receiving a valid request. The response period may be extended where permitted by law, including where a request is complex or multiple requests have been submitted. We will inform you where an extension applies.

Some rights are subject to conditions and exemptions. We may retain certain information where required by law or necessary for fraud prevention, transaction records, legal claims, or the protection of another person’s rights.

13. Privacy Complaints

If you believe that we have handled your personal information improperly, contact info@fanormq.shop.

Please include:

  • Your name and contact details

  • A description of the issue

  • Relevant dates

  • Order or account information, where applicable

  • The outcome you are requesting

  • Copies of relevant correspondence or evidence

We will acknowledge and investigate the complaint, maintain an appropriate record, and provide an outcome or progress update within a reasonable period.

Where we cannot resolve the complaint immediately, we may request additional information or explain the steps being taken.

You may also submit a complaint to the Information Commissioner’s Office. We encourage you to contact us first so that we have an opportunity to investigate and resolve the concern.

14. Marketing Communications

We may send marketing communications where:

  • You have provided consent

  • Applicable law otherwise permits the communication

  • You are an existing customer and the communication concerns similar products or services, where the applicable requirements are satisfied

Every promotional email will provide a method to unsubscribe.

You can also withdraw from marketing by contacting info@fanormq.shop.

After an unsubscribe request, we may retain limited information on a suppression list to ensure that further marketing messages are not sent to the relevant address.

15. Product Reviews and Public Content

If you submit a product review, comment, image, or other content intended for publication, that content may be displayed publicly with the name, initials, or profile information selected for display.

Do not include addresses, telephone numbers, payment information, order numbers, or other sensitive personal information in a public review.

We may moderate, remove, or decline to publish content that contains personal information, unlawful material, abusive language, spam, or content that violates our policies.

16. Third-Party Websites and Services

Our website may contain links to third-party websites, social media platforms, payment services, or external applications.

We are not responsible for the privacy practices, security, or content of third parties acting independently from us.

Before submitting personal information to an external website or service, review its privacy information and terms.

17. Children’s Privacy

Our website and services are intended for a general adult audience and are not directed at children under the age of 16.

We do not knowingly collect personal information directly from children under 16 for marketing purposes.

If you believe that a child has provided personal information without appropriate authorisation, contact info@fanormq.shop so that we can review the matter and take appropriate action.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

  • Changes to our business practices

  • Changes to website features

  • New service providers or applications

  • Changes in legal or regulatory requirements

  • Improvements to privacy and security practices

The updated version will be published on this page with a revised “Last updated” date.

Where a change materially affects how personal information is used, we may provide additional notice through the website, customer account, or email where appropriate.

We encourage customers to review this Privacy Policy periodically.

19. Contact Us

For questions about this Privacy Policy, personal information, privacy rights, marketing preferences, or data protection complaints, contact:

fanormq.shop
Email: info@fanormq.shop