Privacy Policy
What we collect when you shop here, why we hold it, who else sees it, and how to get it removed.
Questions about anything on this page:
support@aiivanta.shop
This policy explains how AIIVANTA handles personal data collected through aiivanta.shop. It is written to the UK GDPR and the Data Protection Act 2018.
Who controls your data
AIIVANTA, operator of aiivanta.shop, is the data controller for the information described here. For any question about your data, or to exercise any of the rights below, email support@aiivanta.shop.
What we collect
| Data | When |
|---|---|
| Name, email address, delivery and billing address, phone number if you give one | When you place an order |
| Order contents, order number, order history | When you place an order |
| Account email and password (stored hashed, never in readable form) | If you create an account |
| The content of messages you send us | When you email or use the contact form |
| IP address, browser type, pages viewed, and the technical logs the server keeps | Whenever you visit |
We never receive or store your card number. Card details go directly to the payment provider on their own form. We see only the outcome of the payment, the last four digits, the card type and the amount.
Why we hold it, and our lawful basis
- To fulfil your order — taking payment, passing the delivery address to the supplier and carrier, keeping you updated. Lawful basis: performance of a contract.
- To answer your messages — Lawful basis: performance of a contract, or our legitimate interest in answering enquiries.
- To keep accounting and tax records — Lawful basis: legal obligation.
- To prevent fraud and keep the site working — Lawful basis: our legitimate interest in protecting the shop and its customers.
- To send marketing email — only if you have asked for it. Lawful basis: consent, withdrawable at any time using the unsubscribe link or by emailing us.
Who else sees it
- Our payment provider — receives what it needs to take the payment and to handle refunds and disputes.
- Our supply partners and their carriers — receive the delivery name, address, phone number and order contents so they can pack and ship. Because parcels may be dispatched from outside the UK, this involves transferring your delivery details to countries outside the UK. Where that happens we rely on the safeguards permitted under UK data protection law for such transfers.
- Our hosting provider — stores the site and its database on our behalf.
- Professional advisers and authorities — only where we are legally required to disclose.
We do not sell your personal data, and we do not share it with advertisers or data brokers.
How long we keep it
- Order and transaction records: six years after the end of the tax year they fall in, as required for accounting.
- Account details: until you ask us to close the account, then deleted other than what we must keep for accounting.
- Email correspondence: two years from the last message in the thread.
- Marketing consent: until you withdraw it, and we keep a record of the withdrawal itself.
- Server logs: 30 days.
Your rights
Under the UK GDPR you may ask us to:
- give you a copy of the personal data we hold about you;
- correct anything inaccurate;
- delete your data, where we have no overriding obligation to keep it;
- restrict how we use it while a dispute about it is resolved;
- send it to you or another provider in a portable format;
- stop processing it where we rely on legitimate interests;
- withdraw consent to marketing at any time.
Email support@aiivanta.shop. We reply within one month, free of charge. We may ask you to confirm your identity first, so that we do not hand your data to somebody else.
Complaining to the regulator
If you are unhappy with how we have handled your data you may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would rather you told us first so we can put it right.
Security
The site is served over an encrypted HTTPS connection. Passwords are stored hashed. Access to order data is limited to the people who need it to run the shop. No system is perfect, and we will tell you and the ICO without delay if a breach occurs that is likely to affect your rights.
Children
This shop sells adult clothing and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, email us and we will delete it.
Cookies
The cookies this site sets, and how to control them, are listed on the Cookies page.
Changes
We update this policy when what we do changes. The date at the top tells you when it last changed. Material changes affecting how we use data you have already given us will be emailed to you.