1. Who We Are
This Privacy Policy applies to Alluvi, operating as BuyRetat UK (buyretat.co.uk). We are the data controller for personal data collected through this website. Contact: contact@buyretat.co.uk.
2. Data We Collect
We collect personal data only when you provide it to us directly:
- Contact & order forms: Name, email address, phone number, delivery address, organisation name, and the content of your enquiry or order.
- WhatsApp/Telegram communications: Message content and contact details you share when reaching out via these channels.
- Website analytics: We may use privacy-respecting analytics (such as Cloudflare Web Analytics) which collects aggregated, anonymised data about page visits. No personal identifiers are collected via analytics.
- Local storage (cart): Cart data is stored in your browser's local storage. This data never leaves your device and is not transmitted to our servers.
3. How We Use Your Data
- To process and fulfil your order, including arranging shipment and providing tracking information
- To respond to enquiries and provide customer support
- To send order confirmations and updates via email or WhatsApp (transactional communications only)
- To comply with our legal obligations
- To improve our website and service offering (using anonymised analytics data only)
We do not use your personal data for marketing without your explicit consent, and we do not sell or share your data with third parties for their marketing purposes.
4. Legal Basis for Processing (UK GDPR)
- Contract performance: Processing your order and arranging delivery
- Legitimate interests: Responding to enquiries, improving our service
- Legal obligation: Record-keeping for tax and regulatory compliance
- Consent: Marketing communications, if you have opted in
5. Data Retention
Order records are retained for 7 years (HMRC requirements). Enquiry data not resulting in an order is deleted after 12 months. You may request earlier deletion of your data (see Section 7).
6. Third Parties
We use the following third-party services that may process your data:
- Formspree: Our contact/checkout form submission service. Forms are transmitted securely to Formspree's servers before being forwarded to our email. Formspree's privacy policy applies.
- Cloudflare: Our website host and CDN. Cloudflare may collect anonymised performance and security data per their privacy policy.
- WhatsApp/Telegram: If you contact us via these platforms, their respective privacy policies apply to data processed within those apps.
We do not use Google Analytics or Facebook Pixel.
7. Your Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data (subject to legal retention requirements)
- Restriction: Request we limit processing of your data
- Portability: Receive your data in a machine-readable format
- Objection: Object to processing based on legitimate interests
- Complain: Lodge a complaint with the ICO (ico.org.uk) if you believe we have mishandled your data
To exercise any of these rights, contact: contact@buyretat.co.uk. We will respond within 30 days.
8. Cookies
This website uses only functional browser storage (localStorage) for cart functionality. We do not use tracking cookies, advertising cookies, or third-party cookies. You can clear your browser's local storage at any time via your browser settings.
9. Data Security
Our website is served over HTTPS via Cloudflare, ensuring encrypted transmission. Form data is transmitted securely. We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure.
10. Changes to This Policy
We may update this Privacy Policy. The "last updated" date at the top will reflect any changes. Continued use of our website after changes constitutes acceptance of the updated policy.