1. Who is responsible for your data
PAZAR9 LTD, a company registered in England and Wales under company number 17327723 with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, is the data controller for the personal data described in this policy.
We have not appointed a data protection officer. Any question about this policy, or any request about your data, should be sent through our contact form and we will reply by email.
2. What we collect
- Account details — your name, email address and a securely hashed password, if you choose to create an account.
- Order details — delivery and billing address, phone number if you give one for the courier, the items you bought, the amount paid and the order history linked to your account.
- Messages — the name, email address and message you send us through the contact form, and any correspondence that follows.
- Marketing preferences — your email address if you sign up to our newsletter, and whether you have unsubscribed.
- Technical data — your IP address, browser type and the pages you view, recorded by our servers.
- Measurement identifiers — random identifiers stored in our own cookies, only if you accept measurement cookies. See our cookie policy.
We do not collect or store your card number. Card details are entered into our payment provider's systems and never reach ours.
3. Why we use it, and our legal basis
- To take and fulfil your order — including delivery, returns and refunds. Legal basis: performance of our contract with you.
- To run your account and let you see your past orders. Legal basis: performance of our contract with you.
- To answer your messages. Legal basis: our legitimate interest in dealing with customer enquiries.
- To keep the site secure and to detect and prevent fraud and abuse. Legal basis: our legitimate interests in protecting our business and our customers.
- To keep accounting and tax records. Legal basis: compliance with a legal obligation.
- To send you marketing emails if you have signed up. Legal basis: your consent, which you can withdraw at any time using the unsubscribe link in any email.
- To measure how our site and our advertising perform. Legal basis: your consent, given through the cookie banner and withdrawable at any time.
We do not sell your personal data, and we do not make decisions about you by automated means.
4. Payments
Card payments are processed by Stripe. Stripe receives your card details, the amount, and enough information to check the payment and to prevent fraud. Stripe acts as an independent controller for that data and handles it under its own privacy policy. We receive only the result of the payment and a reference — never your full card number.
5. Who else sees your data
- Our despatch partner and couriers — your name, delivery address and, where given, phone number and email, so that your order can be packed, shipped and tracked. Deliveries are carried by international couriers such as Royal Mail, DPD, FedEx and UPS, depending on the destination.
- Our email provider — to send order confirmations, delivery updates and, if you have signed up, newsletters.
- Our hosting and infrastructure providers — who store the data on our behalf under contract.
- Advertising and analytics providers — if, and only if, you accept measurement cookies, we send them measurement events from our servers. See our cookie policy.
- Professional advisers and authorities — where we are required to share data by law, or need to establish or defend a legal claim.
6. Sending data outside the UK and EU
Our products are dispatched from Turkey, so the details needed to pack and ship your order are transferred to our despatch partner there. Some of our service providers are also based outside the UK and the European Economic Area. Where that happens we rely on approved safeguards — the UK International Data Transfer Agreement or Addendum, and the European Commission's Standard Contractual Clauses — so that your data keeps an equivalent level of protection.
7. How long we keep it
- Order and payment records — six years from the end of the financial year in which the order was placed, because tax law requires it.
- Account data — for as long as your account is open. Ask us to close it and we delete or anonymise it, apart from records we must keep for tax.
- Contact form messages — up to 24 months after the matter is closed.
- Newsletter sign-ups — until you unsubscribe, plus a minimal record of the unsubscribe so that we do not email you again.
- Measurement identifiers — 90 days from your last visit.
8. Keeping it safe
The site runs over an encrypted connection, passwords are stored hashed, session and basket cookies are set as HTTP-only, and access to order data is limited to the people who need it to run the shop. No system is perfectly secure, but we take these measures seriously and review them as the business grows.
9. Your rights
Under UK and EU data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- ask us to delete data we no longer need;
- ask us to restrict how we use your data, or object to us using it on the basis of legitimate interests;
- receive the data you gave us in a portable, machine-readable form;
- withdraw consent at any time, for marketing emails or for measurement cookies, without affecting anything we did before you withdrew it.
To use any of these rights, send us a request through the contact form. We respond within one month. We may ask you to confirm your identity first so that we do not disclose your data to someone else.
10. Complaints
If you are not happy with how we have handled your data, please tell us first so that we can put it right. You also have the right to complain to the UK regulator, the Information Commissioner's Office, at ico.org.uk. If you live in the European Union you can complain to the data protection authority in your own country instead.
11. Children
This shop is not aimed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to this policy
We update this policy when the way we handle data changes. The date at the top of the page shows when it was last revised.