Privacy Policy

We regard the protection of your personal data as a fundamental responsibility. We strive to manage and operate our website so that customers in the UK can shop with confidence.

Introduction

We committed to protecting your privacy and ensuring your personal information is handled securely and responsibly. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or purchase products from our UK online platform.

Scope of Personal Data Processing

Situation	Data Collected	Purpose
Placing an order	Name, address, email, phone, payment info, order history	Order fulfilment, customer service, delivery
Contacting customer service	Name, contact details, messages	Respond to enquiries, resolve issues
Subscribing to newsletters	Email address, preferences	Sending updates and promotions
Browsing the website	Cookies, device information	Improve site experience, targeted advertising

Purposes for Using Personal Data

• To provide and deliver products/services
• To process and confirm orders
• To respond to customer enquiries and support requests
• To send promotional offers and product/service updates (with your consent)
• To request feedback and reviews
• To generate anonymous statistics to improve our services
• To ensure website security and fraud prevention
• For any purpose for which you have given explicit consent

Lawful Basis for Processing

We process your data under one or more of the following lawful bases in accordance with UK GDPR:

• Contract: To perform our contract with you (e.g., fulfill your order).
• Consent: Where you have provided explicit consent (e.g., receiving marketing emails).
• Legal obligation: Where required by law.
• Legitimate interests: For business operations (e.g., improving services).

Safe Management of Personal Data

We employ appropriate technical and organisational measures to safeguard your personal data from unauthorised access, alteration, disclosure, loss, or destruction.

Sharing & Disclosure to Third Parties

Recipient Type	Reason for Sharing	Examples
Service providers	Delivery, payment processing, IT support	Couriers, payment gateways
Legal authorities	Compliance with laws	Police, government agencies
Business partners	Service improvement/operation	Marketing platforms, analytics

We never sell your personal data. We will only share it within the scope necessary, with appropriate contracts to ensure third parties comply with data protection requirements.

International Transfers

If your data is transferred outside the UK/EEA, we ensure adequate safeguards are in place according to UK law.

Cookies

We use cookies and similar technologies to enhance website functionality, analyse usage, and deliver personalised adverts. You may choose to allow, reject, or customise cookie settings via our site or browser. Restricting cookies may impact some services.

Third-party cookies may also be set for advertising or analytics; these are subject to their own privacy policies.

Your Rights (UK & GDPR)

You have the right to:

• Access your personal data
• Correct or update inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Withdraw consent at any time
• Data portability (receive your data in a usable format)

Retention

We retain your personal data only as necessary for the purposes described and in line with legal/regulatory obligations.

Security Incidents

In case of a data breach, we will take prompt action and notify affected individuals and authorities where required.

External Links & Forums

This site may link to external websites or forums. These have independent privacy policies, and we are not responsible for their practices. Please take care when sharing information publicly.

Changes to This Policy

We may update this Privacy Policy to reflect changes in law or business practice. Updates will be posted on this page; please check regularly for the latest version.

Contact

For questions or to exercise your data rights, please contact us:
service@mail.andeinsha.com

This policy complies with UK GDPR and data protection laws.