Privacy Policy

Who we are

EZ GIFT is a trading name of Andrea Lovaszi, a sole trader and the controller of the personal information described in this notice.

Contact address: 29 Saint Georges Crescent, Manchester, M6 8JG, United Kingdom
Email: orders@ezgift.co.uk
Website: https://ezgift.co.uk

Information we collect

Depending on how you use the website, we may collect:

  • identity and contact information, including your name, billing and delivery addresses, email address and telephone number;
  • order, transaction and customer-service information;
  • account details if you create an account;
  • personalisation details, text, colour choices, designs, photographs or other files you submit;
  • technical and security information such as IP address, device/browser information and website logs;
  • communications, cancellation requests, reviews and complaints; and
  • cookie choices and aggregated website-usage information.

Stripe processes your payment information. EZ GIFT does not receive or store your complete card number or card security code.

Why we use information and our lawful bases

We use personal information:

  • to take payment, create, personalise, deliver and administer orders, because this is necessary to perform our contract with you;
  • to respond to pre-order requests and take steps at your request before entering a contract;
  • to keep tax, accounting, consumer-law and transaction records and respond to lawful requests, because we must comply with legal obligations;
  • to prevent fraud, secure the website, administer the business, improve products and service, and handle legal claims, based on our legitimate interests where those interests are not overridden by your rights;
  • to send service messages such as order, production and dispatch updates, as necessary to perform the contract; and
  • to send optional direct marketing only where we have a lawful basis, including consent where required. You may opt out at any time.

We do not use personal information for solely automated decisions that produce legal or similarly significant effects.

Personalisation files

Only submit images, names and other personalisation information that you are entitled to use. Personalisation files are used to fulfil the order, deal with customer-service issues and maintain necessary order records. Please avoid submitting unnecessary sensitive information or images containing embedded location metadata.

Who receives information

We share only the information reasonably necessary with service providers, including:

  • WordPress and WooCommerce technology used to operate the shop;
  • Stripe and its payment, fraud-prevention and authentication services;
  • Royal Mail and other delivery or fulfilment providers used for an order;
  • website hosting, backup, security and email providers;
  • Umami, used for privacy-focused aggregate website analytics; and
  • professional advisers, insurers, regulators, law-enforcement bodies or courts where necessary or legally required.

These organisations may act as processors or as independent controllers for their own regulated purposes. We do not sell personal information.

International transfers

Some technology or payment providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, we rely on an adequacy regulation, approved contractual protections or another lawful transfer mechanism. Further information about a provider’s safeguards is available in its privacy notice or from us on request.

How long we keep information

We retain personal information only as long as reasonably necessary for the purpose collected. Order, payment and accounting records are normally kept for up to six years after the relevant transaction or accounting period where needed for tax, legal and claims purposes. Customer-service and complaint records are normally kept for up to six years after the matter closes where required to establish or defend claims.

Personalisation working files that are not needed as part of the enduring order record are deleted or anonymised when they are no longer reasonably needed for fulfilment, support, backups or a legal obligation. Account information is retained while the account is active and then deleted or anonymised when no longer required, subject to records we must retain. Security logs and aggregate analytics are kept for shorter operational periods appropriate to their purpose.

Security

We use reasonable technical and organisational measures designed to protect personal information. No internet service is completely secure, so please contact us promptly if you believe your account or information has been compromised.

Your data-protection rights

Depending on the circumstances, you may have rights to:

  • be informed about our use of your information;
  • request access to it;
  • have inaccurate or incomplete information corrected;
  • request erasure;
  • request restriction of processing;
  • receive information you provided in a portable format;
  • object to processing based on legitimate interests or for direct marketing; and
  • withdraw consent at any time where processing relies on consent.

These rights can be subject to legal limits. To exercise a right, email orders@ezgift.co.uk. We may need to verify your identity. There is normally no charge, and we normally respond within one month.

Complaints

Please contact us first so we can try to resolve a concern. You also have the right to complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Changes

We may update this notice when our processing or legal obligations change. The current version and its update date will be published on this page.