Política de privacidade

Privacy Policy

Last updated: 22 October 2026

1. Who we are

This Privacy Policy explains how ALREOZ collects, uses and protects personal data when you visit alreoz.com, place an order or contact us. For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the controller of the personal data described in this policy.

We operate under the trading name ALREOZ. Our contact details for privacy matters are:

Email: [CONTACT EMAIL] — please put "Data Request" in the subject line.

Address for correspondence (United Kingdom): [UK SERVICE ADDRESS]

For any question about an order, a product or a return, please use the contact form on our website or write to [CONTACT EMAIL]. We aim to respond within three working days. Please include your order number and the email address used at checkout so we can locate your record quickly.

For correspondence by post:

Trading name: ALREOZ
Website: alreoz.com
Email: [CONTACT EMAIL]
Address for correspondence (United Kingdom): [UK SERVICE ADDRESS]

The address above is for correspondence only. Please do not send goods or returns there unless we have asked you to do so in writing.

3. Our approach to personal data

We collect the minimum personal data needed to process your order, provide customer service, keep records as the law requires and keep our systems secure. We do not sell your personal data. We do not ask for sensitive data such as information about health, religion or political opinions, and we ask you not to send them to us.

4. Personal data we collect

Information you give us

  • Your name, email address, delivery address and billing address.
  • A telephone number, where you choose to provide one or where a carrier requires it for delivery.
  • Details of the items you order and your order history.
  • The content of messages you send us and any photographs you share when reporting a problem.
  • Your marketing preferences, if you subscribe to our emails.

Payment information

Payments are processed by third-party providers. We do not receive or store your full card number or security code. We receive only limited information such as payment status, card type and the last four digits of the card number.

Information collected automatically

When you use our website, our platform and service providers collect technical information such as your IP address, browser and device type, operating system, the pages you view and the date and time of your visit. Some of this is collected through cookies, which are explained in our Cookie Policy.

Delivery and tracking information

Tracking numbers, shipment status updates and delivery confirmations relating to your order.

Information from other sources

We receive payment and fraud-screening results from our payment providers, and delivery status updates from carriers.

5. How we use personal data

UK GDPR requires us to have a lawful basis for each use of personal data.

  • Processing and delivering your order, and sending order and delivery messages. Lawful basis: performance of contract.
  • Providing customer service, handling returns, refunds and complaints. Lawful basis: performance of contract and legitimate interests.
  • Preventing fraud and keeping our systems secure. Lawful basis: legitimate interests.
  • Keeping accounting and tax records and complying with legal obligations. Lawful basis: legal obligation.
  • Establishing, exercising or defending legal claims. Lawful basis: legitimate interests and legal obligation.
  • Sending marketing emails, only if you have opted in. Lawful basis: consent, which you can withdraw at any time.
  • Setting non-essential cookies. Lawful basis: consent.
  • Responding to your data protection requests. Lawful basis: legal obligation.

6. Order tracking and delivery notifications

When you place an order we need to share your delivery details so that the parcel can reach you.

  • We send you a dispatch confirmation email with a tracking number and link, where available.
  • Tracking is carried out by the carrier and any tracking service connected to the shipment. They receive your name, delivery address and, where required, your email address and telephone number.
  • When you open a carrier's or tracking provider's page, that organisation handles your data as set out in its own privacy notice and may use its own cookies.
  • For parcels dispatched from outside the United Kingdom, tracking updates during international transit may be limited. This is common and does not indicate a problem.
  • Delivery and tracking messages are service messages sent to perform our contract with you. They are not marketing messages.

7. Third-party integrations

Our store is built on the Shopify platform and uses third-party tools for payment, fulfilment, shipping, tracking and email. Each integration may collect or receive personal data in order to function and is subject to its own terms and privacy notice. We install only integrations needed to run the store or that you have agreed to. If we add an integration that materially changes how your data is used, we will update this policy and, where the law requires it, ask for your consent.

Current third-party service providers include, but may not be limited to:

  • Shopify — website hosting, order management and customer data.
  • Stripe — payment processing and fraud screening.
  • Fulfilment and logistics partners — preparation and dispatch of orders. They receive your name, delivery address and order details.
  • Carriers and postal services — delivery of parcels.
  • Email service providers — customer communications.
  • Analytics providers — website usage data, where you have consented.

8. Who else we share personal data with

Beyond the providers above, we may share personal data with:

  • Professional advisers such as accountants and lawyers, where we need their advice.
  • Public authorities, courts and regulators, where required by law or to protect our rights.
  • A buyer or successor if our business is sold or reorganised, in which case your data would continue to be protected in line with this policy.

We do not sell personal data.

9. International transfers

Some of our service providers and fulfilment partners process data in countries outside the United Kingdom. Where personal data is transferred outside the United Kingdom, we ensure that a lawful transfer mechanism applies, such as the UK International Data Transfer Agreement or another safeguard permitted by UK GDPR. Where a transfer is necessary to perform your contract, we may rely on that as the basis. You can ask us for further information by writing to [CONTACT EMAIL].

10. How long we keep personal data

  • Order, payment and accounting records: for the period required by law, generally up to six years.
  • Customer service messages: normally no longer than two years after our last contact, unless needed for a legal claim.
  • Marketing subscriptions: until you unsubscribe. A minimal record is kept to avoid contacting you again.
  • Cookie consent records: normally up to twelve months.
  • Technical and security logs: normally no longer than twelve months.

When personal data is no longer needed, we delete or anonymise it.

11. Your rights

Under UK data protection law you have the right to:

  • be informed about how your data is used;
  • access a copy of your personal data;
  • have inaccurate data corrected;
  • have your personal data erased in certain circumstances;
  • restrict our use of your data in certain circumstances;
  • receive your data in a portable format;
  • object to processing based on legitimate interests, and object to direct marketing at any time;
  • withdraw consent at any time where we rely on it; and
  • not be subject to solely automated decisions that have legal or significant effects.

Requesting deletion of your data

Email [CONTACT EMAIL] with "Data Deletion Request" in the subject line. We will respond within one month and will delete or anonymise your data unless we are legally required to keep it, for example for tax records or an ongoing legal claim. We will tell you if we retain anything and why.

Other requests

We respond within one month. We may extend by up to two further months for complex requests and will notify you if we do. There is no charge unless a request is clearly excessive.

Marketing

You may unsubscribe at any time using the link in any marketing email or by contacting us.

Complaints

Please contact us first so we can resolve your concern. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

12. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections, access controls and reputable platform and payment providers. If a personal data breach occurs that poses a risk to your rights, we will notify the ICO within 72 hours where required and inform you if the risk is high.

13. Children

The website is intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Significant changes will be highlighted on the website.

15. Contact

For any question about this policy or your personal data, write to [CONTACT EMAIL] or to our address for correspondence: [UK SERVICE ADDRESS].