Privacy Policy

1. Data Controller Identity

This Privacy Policy applies to personal data collected and processed through our website caspara.co.uk and any related online services.

Caspara is the controller of the personal information described in this Privacy Policy where applicable.

2. Personal Data We Collect

Depending on how you interact with Caspara, we may collect and process the following categories of information:

• Identity & Contact Data: Title, first name, last name, billing address, shipping address, email address, and telephone number.
• Account Data: If you register an account, your username, credentials, saved addresses, order history, and preferences.
• Transaction Data: Details of items purchased, dates, totals, payments, delivery methods, refunds, and return correspondence.
• Payment Data: Payment card transactions are processed directly by our authorized third-party payment service providers. Caspara does not store full payment card numbers or security codes on its servers.
• Technical Data: IP address, browser type and version, time zone setting, operating system, and server access logs collected when visiting our storefront.
• Usage Data: Information regarding navigation through our storefront, pages visited, and wishlist selections where applicable.
• Marketing & Preference Data: Your preferences in receiving seasonal communications where you have chosen to receive them.
• Customer Service Data: Records of communications, enquiries, and assistance requests submitted to our customer care team.

3. Lawful Bases & Purposes of Processing

Under applicable UK data protection legislation, we process personal data only under recognized lawful bases:

4. Sharing Personal Data

We share personal data only with service providers that support our operations under appropriate confidentiality and data protection arrangements:

• Payment Service Providers: To process card transactions and issue refunds.
• Delivery & Logistics Carriers: To transport and deliver parcels to your specified address.
• Hosting & Technical Infrastructure: To maintain secure digital server infrastructure and databases.
• Communications Providers: To send order updates, dispatch notices, and customer service replies.
• Professional & Statutory Bodies: Where required to comply with statutory obligations or professional advice.

5. International Transfers

Where third-party service providers process data outside the United Kingdom, we ensure that appropriate transfer mechanisms and safeguards are in place in accordance with UK data protection requirements.

6. Data Retention

Personal data is retained only for as long as reasonably necessary to fulfill the purposes for which it was collected, including:

• Contract performance and order fulfillment
• Customer service and enquiry resolution
• Accounting, VAT, and tax statutory requirements (transaction records may be retained for up to 6 years in accordance with UK tax laws)
• Fraud prevention and security verification
• Managing or defending potential legal claims

When personal information is no longer needed for these legitimate purposes, it is securely deleted or anonymised.

7. Your Rights Under UK Data Protection Law

Under UK data protection law, you have enforceable rights regarding your personal information, subject to applicable legal conditions:

• Right of Access: Request confirmation and copies of personal data held about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure: Request deletion of your personal data where there is no lawful reason for continued processing.
• Right to Restriction: Request restriction of processing in certain circumstances.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Data Portability: Request transfer of machine-readable data to yourself or another provider.
• Right to Withdraw Consent: Withdraw previously given consent at any time without affecting prior lawful processing.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO) via ico.org.uk. If you have any concerns, we invite you to contact us first so we can assist.

8. Cookies & Tracking Technologies

Our website uses cookies and similar storage technologies:

• Strictly Necessary Cookies: Essential for website navigation, shopping basket operation, and session security.
• Preference Cookies: Used to remember your site settings and preferences where enabled.
• Analytics & Performance: Used where enabled to understand general site traffic and help improve storefront usability.
• Marketing: Used only where explicit consent is provided to deliver relevant updates.

For further information, please refer to our Cookie Policy.

9. Information Security

Caspara maintains appropriate technical and organizational measures to safeguard personal data against unauthorized access, loss, or alteration, including encrypted data transmission across public networks.

10. Third-Party Links

Our storefront may contain links to external sites or services. These external sites operate under their own independent privacy notices.