Privacy policy

 

This Privacy Policy explains how fanorm.shop collects, uses, discloses, stores, and protects personal information when you visit our website, create an account, place an order, contact us, subscribe to marketing communications, or otherwise use our products and services.

This Privacy Policy applies to personal information processed through fanorm.shop and related customer-service, payment, delivery, marketing, analytics, and ecommerce activities.

For the purposes of applicable United Kingdom data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018, fanorm.shop acts as the data controller for the personal information described in this policy, except where another organisation expressly identifies itself as an independent controller.

1. Our Contact Details

Store Name: fanorm.shop
Email: info@fanorm.shop
Phone: +44 7849 112843
Business Address: Brambles, Wellborne Road, Mattishall, Dereham, NR20 3LJ, United Kingdom

For privacy questions or requests concerning your personal information, contact:

info@fanorm.shop

Please write “Privacy Request” in the subject line where possible.

2. Scope of This Policy

This Privacy Policy applies when you:

• Visit or browse fanorm.shop;
• Create or use a customer account;
• Add products to your basket;
• Begin or complete checkout;
• Place, change, cancel, or return an order;
• Contact customer support;
• Subscribe to emails or other marketing communications;
• Submit a product review;
• Participate in a promotion;
• Interact with our advertisements;
• Use website features, cookies, or preference controls; or
• Otherwise communicate or interact with fanorm.shop.

This policy does not govern the independent privacy practices of third-party websites, services, or platforms that we do not control.

3. Personal Information We Collect

The personal information we collect depends on how you interact with us.

Information You Provide Directly

You may provide:

• Full name;
• Email address;
• Telephone number;
• Billing address;
• Delivery address;
• Account login details;
• Order information;
• Product selections;
• Size, colour, and quantity preferences;
• Payment and transaction information;
• Discount or promotional-code information;
• Customer-service messages;
• Return and refund information;
• Product reviews;
• Photographs or videos submitted in connection with a complaint;
• Marketing preferences; and
• Any other information you voluntarily provide.

Please avoid sending personal information that is not necessary for us to assist with your request.

Account Information

If you create a customer account, we may collect:

• Your name;
• Email address;
• Password or account authentication information;
• Saved delivery addresses;
• Order history;
• Account preferences; and
• Account activity.

Passwords are intended to be stored in a protected or encrypted form through the relevant ecommerce and authentication systems.

Order and Transaction Information

When you place an order, we may collect:

• Products ordered;
• Product size and colour;
• Purchase price;
• Currency;
• Order date;
• Order number;
• Billing and delivery information;
• Payment status;
• Discount information;
• Shipping method;
• Tracking information;
• Delivery status;
• Returns;
• Refunds;
• Exchanges; and
• Customer-service history.

Payment Information

Payments may be processed by Shopify, card networks, banks, digital-wallet providers, or other payment-service providers.

Payment providers may collect information such as:

• Cardholder name;
• Billing address;
• Payment-card details;
• Bank or wallet information;
• Authentication information;
• Transaction identifiers; and
• Fraud-prevention information.

fanorm.shop generally receives limited payment information, such as payment status, payment method, transaction reference, and partial payment-card details, rather than complete card numbers.

Payment providers process payment information in accordance with their own privacy policies and legal obligations.

Device and Technical Information

When you use the website, we or our service providers may automatically collect:

• Internet Protocol address;
• Device type;
• Browser type;
• Operating system;
• Device identifiers;
• Language settings;
• Approximate location derived from an IP address;
• Referring website;
• Pages viewed;
• Links selected;
• Search terms;
• Time and date of access;
• Session activity;
• Shopping-basket activity;
• Checkout activity;
• Cookie identifiers;
• Advertising identifiers;
• Error logs; and
• Website performance information.

Customer-Service Information

When you contact us, we may collect:

• Your name;
• Contact details;
• Order number;
• Details of your enquiry;
• Correspondence history;
• Photographs or videos;
• Delivery information;
• Complaint information;
• Return and refund details; and
• The resolution provided.

Telephone or online communications may be recorded or retained where lawful and reasonably necessary for customer service, training, security, dispute resolution, or legal compliance.

Reviews and User-Generated Content

If you submit a product review, photograph, comment, or other content, we may collect:

• Your display name;
• Review content;
• Rating;
• Submitted photographs or videos;
• Product purchased;
• Date of submission; and
• Technical information used to verify the submission.

Reviews and related content may be displayed publicly on our website. Do not include sensitive, private, or unnecessary personal information in a public review.

Marketing Information

If you subscribe to marketing or interact with our promotions, we may collect:

• Name;
• Email address;
• Telephone number where applicable;
• Marketing consent;
• Communication preferences;
• Subscription date;
• Unsubscribe date;
• Email opens;
• Link selections;
• Promotion participation;
• Product interests; and
• Marketing campaign information.

4. Information Collected from Other Sources

We may receive personal information from:

• Shopify;
• Payment-service providers;
• Banks and card networks;
• Delivery carriers;
• Fulfilment providers;
• Fraud-prevention providers;
• Customer-service platforms;
• Website analytics providers;
• Advertising and social-media platforms;
• Product-review services;
• Email and messaging providers;
• Identity or address-verification providers; and
• Publicly available sources where lawful.

We may combine information received from these sources with information collected directly from you.

5. How We Use Personal Information

We may use personal information to:

Provide Products and Services

• Operate our online store;
• Process and fulfil orders;
• Take and verify payment;
• Provide order confirmations;
• Arrange packaging and delivery;
• Provide tracking information;
• Process cancellations;
• Handle returns, exchanges, and refunds;
• Maintain customer accounts; and
• Respond to product or sizing questions.

Provide Customer Support

• Respond to enquiries;
• Investigate delivery issues;
• Review damaged or incorrect products;
• Resolve complaints;
• Verify purchases;
• Communicate about orders;
• Maintain customer-service records; and
• Improve service quality.

Operate and Improve the Website

• Maintain website functionality;
• Remember basket contents;
• Save preferences;
• Diagnose technical problems;
• Improve navigation;
• Review website performance;
• Analyse customer interactions;
• Develop products and services; and
• Improve accessibility and usability.

Protect Customers and Our Business

• Verify identity and payment information;
• Prevent fraud;
• Detect suspicious transactions;
• Protect accounts;
• Secure the website;
• Enforce our Terms of Service;
• Prevent misuse;
• Investigate security incidents; and
• Establish, exercise, or defend legal claims.

Communicate and Market

Where permitted, we may:

• Send product news;
• Send promotional offers;
• Send abandoned-basket reminders;
• Recommend products;
• Conduct customer surveys;
• Measure marketing performance;
• Personalise advertising; and
• Manage marketing preferences.

You may unsubscribe from marketing communications at any time.

Comply with Legal Obligations

We may process personal information to:

• Maintain business and transaction records;
• Comply with tax and accounting requirements;
• Respond to lawful requests;
• Protect consumer rights;
• Comply with court orders;
• Cooperate with regulators;
• Meet product-safety obligations; and
• Fulfil other legal or regulatory requirements.

6. Legal Bases for Processing

We process personal information only where we have an appropriate legal basis.

Performance of a Contract

We may process information where necessary to:

• Accept and process an order;
• Take payment;
• Deliver products;
• Provide order updates;
• Manage customer accounts;
• Process cancellations;
• Handle returns and refunds; and
• Provide customer support connected with a purchase.

Without certain information, we may be unable to complete an order or provide the requested service.

Legal Obligation

We may process information where necessary to comply with:

• Tax requirements;
• Accounting obligations;
• Consumer-protection requirements;
• Product-safety obligations;
• Court orders;
• Regulatory requests; and
• Other applicable laws.

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

These interests may include:

• Operating and improving our business;
• Preventing fraud;
• Protecting website security;
• Maintaining accurate records;
• Responding to enquiries;
• Understanding website performance;
• Protecting legal rights;
• Managing business risks; and
• Providing relevant service communications.

Where required, we consider the nature of the information, your reasonable expectations, the potential impact on you, and available safeguards.

Consent

We may rely on consent for:

• Non-essential cookies;
• Certain analytics technologies;
• Personalised advertising technologies;
• Some electronic marketing communications; and
• Other processing where consent is legally required.

You may withdraw consent at any time. Withdrawal does not affect processing that lawfully occurred before consent was withdrawn.

Vital Interests

In rare circumstances, we may process information where necessary to protect someone’s life or physical safety.

7. Shopify

Our store is hosted on Shopify.

Shopify provides the ecommerce infrastructure used to:

• Operate the website;
• Display products;
• Manage customer accounts;
• Process orders;
• Support checkout;
• Facilitate payments;
• Manage security;
• Support analytics;
• Provide customer privacy features; and
• Integrate third-party applications and services.

Shopify may process personal information as a service provider acting on our behalf and, for certain features or services, may process information under its own privacy terms.

Your information may be processed through Shopify’s systems and through systems operated by Shopify’s affiliated companies and service providers.

8. How We Share Personal Information

We do not disclose personal information without a lawful reason.

We may share information with the following categories of recipients.

Shopify and Ecommerce Providers

We share information with Shopify and related ecommerce service providers to host and operate our online store.

Payment Providers

Information may be shared with payment processors, card networks, banks, digital-wallet providers, and fraud-prevention services to:

• Authorise transactions;
• Process payments;
• Issue refunds;
• Prevent fraud; and
• Resolve payment disputes.

Delivery and Fulfilment Providers

We may share names, contact details, delivery addresses, order information, and tracking details with:

• Warehouses;
• Fulfilment providers;
• Packaging providers;
• Delivery carriers;
• Postal operators;
• Customs agents where relevant; and
• Logistics-support providers.

Technology and Business-Service Providers

We may share information with providers supporting:

• Website hosting;
• Cloud storage;
• Cybersecurity;
• Customer support;
• Email delivery;
• Text messaging;
• Analytics;
• Advertising;
• Product reviews;
• Fraud prevention;
• Address verification;
• Accounting;
• Legal services; and
• Business administration.

These providers are permitted to use personal information only as required to provide their services or where otherwise permitted by law.

Advertising and Analytics Partners

Subject to applicable consent requirements, we may share or make information available to analytics, advertising, search, and social-media providers to:

• Measure website performance;
• Understand customer interactions;
• Measure advertising effectiveness;
• Limit repeated advertisements;
• Create relevant audiences; and
• Personalise advertising.

Where required, these technologies will not be activated until you provide consent.

Professional Advisers

We may share information with lawyers, accountants, auditors, insurers, consultants, and other professional advisers where reasonably necessary.

Authorities and Legal Recipients

We may disclose information where reasonably necessary to:

• Comply with law;
• Respond to a court order;
• Respond to a lawful government request;
• Assist law enforcement;
• Protect customers;
• Investigate fraud;
• Enforce agreements; or
• Establish, exercise, or defend legal claims.

Business Transfers

If fanorm.shop or its business assets are sold, transferred, merged, reorganised, or acquired, personal information may be disclosed to relevant advisers, purchasers, or successor operators.

Any recipient must handle the information lawfully and respect applicable privacy rights.

9. International Transfers

Shopify and some of our service providers may process or store personal information outside the United Kingdom.

Countries outside the United Kingdom may have different data-protection laws.

Where personal information is transferred internationally, we take reasonable steps to ensure an appropriate transfer mechanism or safeguard is used where required, such as:

• A United Kingdom adequacy regulation;
• The United Kingdom International Data Transfer Agreement;
• The United Kingdom Addendum to approved contractual clauses;
• Contractual protections;
• Binding corporate rules where applicable; or
• Another legally recognised transfer mechanism.

You may contact us for further information about safeguards relevant to your personal information.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy.

When determining retention periods, we consider:

• The purpose for which the information was collected;
• The duration of the customer relationship;
• Contractual requirements;
• Tax and accounting obligations;
• Consumer-protection requirements;
• Fraud-prevention needs;
• Product-safety obligations;
• Limitation periods for legal claims;
• Security requirements;
• Whether consent has been withdrawn; and
• Whether continued retention is required or permitted by law.

For example:

• Order and transaction records may be retained for the period required for accounting, taxation, consumer claims, fraud prevention, and legal compliance;
• Customer-service records may be retained while an enquiry or dispute remains relevant;
• Account information may be retained while the account remains active and for a reasonable period afterwards;
• Marketing information may be retained until you unsubscribe or until it is no longer required;
• Records of consent and unsubscribe requests may be retained to demonstrate compliance;
• Security logs may be retained for a reasonable period to detect and investigate misuse; and
• Information connected with legal claims may be retained until the claim and relevant limitation periods have ended.

When personal information is no longer required, we will delete, anonymise, or securely dispose of it where reasonably possible.

11. Cookies and Similar Technologies

We and our service providers may use:

• Cookies;
• Tracking pixels;
• Tags;
• Scripts;
• Local storage;
• Software-development kits;
• Device identifiers; and
• Similar technologies.

These technologies may be used to:

• Operate the website;
• Maintain security;
• Remember basket contents;
• Save privacy preferences;
• Support checkout;
• Maintain customer sessions;
• Analyse website usage;
• Measure performance;
• Prevent fraud;
• Personalise content;
• Measure advertising; and
• Deliver relevant marketing.

Strictly Necessary Technologies

Some technologies are necessary for the website to function.

They may support:

• Security;
• Authentication;
• Shopping-basket functions;
• Checkout;
• Payment processing;
• Privacy preferences; and
• Network management.

Where permitted by law, strictly necessary technologies may operate without consent.

Analytics Technologies

Analytics technologies help us understand:

• How visitors use the website;
• Which pages are viewed;
• Whether technical errors occur;
• How customers move through checkout; and
• How website performance can be improved.

Where consent is legally required, analytics technologies will be used only after consent has been provided.

Advertising Technologies

Subject to your choices and applicable law, advertising technologies may be used to:

• Measure advertising performance;
• Understand whether advertisements lead to purchases;
• Display more relevant advertisements;
• Build advertising audiences; and
• Limit repeated advertisements.

Non-essential advertising technologies will be subject to consent where required.

12. Cookie Preferences

When you first visit the website, you may be presented with a Cookie banner or privacy-preference interface.

You may be able to:

• Accept all optional technologies;
• Reject optional technologies;
• Select particular categories;
• Change your preferences; or
• Withdraw consent.

Rejecting optional technologies should not prevent access to core shopping functions, although some personalised or analytics features may not operate.

You may also control cookies through your browser settings. Blocking all cookies may prevent certain website features, including basket or checkout functions, from operating correctly.

13. Marketing Communications

We may send electronic marketing communications where:

• You have provided consent;
• An applicable existing-customer exception permits the communication; or
• Another lawful basis is available.

Marketing communications may include:

• New products;
• Promotions;
• Discount codes;
• Product recommendations;
• Abandoned-basket reminders;
• Seasonal collections; and
• Customer surveys.

You may unsubscribe by:

• Selecting the unsubscribe link in a marketing email;
• Using available account or preference settings; or
• Contacting info@fanorm.shop.

We may continue to send necessary non-marketing communications, including:

• Order confirmations;
• Payment notifications;
• Dispatch updates;
• Delivery notifications;
• Security messages;
• Return instructions;
• Refund confirmations; and
• Important service or legal notices.

14. Personalised Advertising

Where permitted and subject to your consent choices, we may use information about your website interactions, purchases, or interests to display or measure personalised advertising.

Advertising partners may use cookies or similar technologies to:

• Recognise browsers or devices;
• Measure advertisement performance;
• Attribute purchases to advertisements;
• Select relevant advertisements; and
• Build or measure audiences.

You may manage these activities through our Cookie or privacy-preference controls where available.

15. Automated Decision-Making and Profiling

We may use automated systems to support:

• Fraud detection;
• Payment verification;
• Website security;
• Product recommendations;
• Advertising personalisation; and
• Risk assessment.

These systems may evaluate information such as:

• Transaction patterns;
• Device information;
• IP address;
• Account activity;
• Billing and delivery consistency; and
• Previous order activity.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects without appropriate safeguards where required by law.

Where such processing applies, you may have rights to request human involvement, express your position, or challenge the decision.

16. Data Security

We use reasonable technical and organisational measures designed to protect personal information against:

• Unauthorised access;
• Accidental loss;
• Improper disclosure;
• Alteration;
• Misuse;
• Destruction; and
• Unlawful processing.

Measures may include:

• Secure website connections;
• Access controls;
• Authentication procedures;
• Payment-security measures;
• Service-provider reviews;
• Data minimisation;
• Security monitoring;
• Staff or contractor confidentiality obligations; and
• Incident-response procedures.

No online system, transmission method, or storage service can be guaranteed to be completely secure.

You are responsible for keeping account passwords confidential and for informing us promptly if you suspect unauthorised account access.

17. Personal Data Breaches

If a personal-data breach occurs, we will assess:

• The nature of the information affected;
• The likely consequences;
• The number of people affected;
• Available security protections; and
• The risk to individuals.

Where required by law, we will notify the Information Commissioner’s Office and affected individuals within the applicable period.

18. Your Data-Protection Rights

Depending on the circumstances, you may have the following rights.

Right of Access

You may request confirmation of whether we process your personal information and request a copy of relevant information.

Right to Rectification

You may ask us to correct inaccurate information or complete incomplete information.

Right to Erasure

You may ask us to delete personal information in certain circumstances.

This right does not apply where continued processing is required for legal compliance, legal claims, fraud prevention, or another lawful reason.

Right to Restrict Processing

You may ask us to restrict processing in certain circumstances, including while the accuracy or lawfulness of processing is reviewed.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request certain information in a structured, commonly used, and machine-readable format.

Right to Object

You may object to processing based on legitimate interests in certain circumstances.

You have an absolute right to object to personal information being used for direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

Withdrawal does not affect processing that occurred before consent was withdrawn.

Rights Concerning Automated Decisions

Where applicable, you may request information or human review concerning decisions made solely through automated processing that have legal or similarly significant effects.

Right to Complain

You may complain to the Information Commissioner’s Office if you believe your personal information has been handled unlawfully.

We encourage you to contact us first so that we have an opportunity to investigate and resolve your concern.

19. Exercising Your Rights

To exercise a data-protection right, contact:

info@fanorm.shop

Please provide:

• Your full name;
• The email address connected with your account or order;
• Your order number where relevant;
• A description of your request; and
• Any information reasonably necessary to locate the relevant records.

We may request reasonable proof of identity before disclosing, deleting, or changing personal information.

This is intended to prevent unauthorised access and protect customer privacy.

We will respond within the period required by applicable law. Where a request is particularly complex or involves multiple requests, the response period may be extended where legally permitted, and we will inform you.

Requests are generally handled without charge. A reasonable fee may apply, or a request may be refused, where it is manifestly unfounded or excessive and applicable law permits us to do so.

20. Correcting Account Information

You may be able to update certain information through your customer account.

You may also contact us to:

• Correct your name;
• Update contact information;
• Change a saved address;
• Close an account; or
• Request other corrections.

Changing account information does not necessarily alter information contained in completed transaction records that must be retained for legal, accounting, fraud-prevention, or consumer-protection purposes.

21. Children’s Privacy

fanorm.shop is intended for a general audience and is not designed to knowingly collect personal information directly from children who cannot lawfully consent to the relevant processing.

Customers placing orders must have legal capacity to enter into the transaction or act with the involvement of a parent or legal guardian.

If you believe a child has provided personal information without appropriate permission, contact us at info@fanorm.shop.

We will review the matter and delete or restrict the information where appropriate and legally required.

22. Sensitive Personal Information

We do not ordinarily request special-category personal information, such as information concerning:

• Health;
• Race or ethnicity;
• Religious beliefs;
• Political opinions;
• Trade-union membership;
• Genetic information;
• Biometric identification;
• Sexual orientation; or
• Sex life.

Please do not send this information unless it is genuinely necessary for a specific request.

Where such information is provided, we will process it only where an appropriate legal condition applies.

23. Third-Party Websites and Services

Our website may contain links to third-party websites, social-media platforms, payment services, or other external resources.

Third parties control their own privacy practices.

We are not responsible for the privacy, security, accuracy, or content of third-party services that we do not control.

Please review the relevant third party’s privacy policy before providing personal information.

24. Social-Media Features

If you interact with us through a social-media platform, the platform may collect information in accordance with its own privacy policy.

We may receive information such as:

• Public profile information;
• Messages;
• Comments;
• Reactions;
• Advertising interactions; and
• Campaign information.

Your use of social media is also governed by the terms and privacy policies of the relevant platform.

25. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to:

• Our website;
• Products and services;
• Shopify features;
• Service providers;
• Data-processing activities;
• Security practices; or
• Applicable law.

The revised policy will be published on this page with an updated “Last updated” date.

Where required, we will provide additional notice or request new consent.

26. Contact Us

For privacy questions, concerns, complaints, or requests to exercise your rights, contact:

fanorm.shop
Email: info@fanorm.shop
Phone: +44 7849 112843
Business Address: Brambles, Wellborne Road, Mattishall, Dereham, NR20 3LJ, United Kingdom

Please include “Privacy Request” in the subject line where possible.

27. Complaints to the Information Commissioner’s Office

You have the right to complain to the United Kingdom Information Commissioner’s Office concerning our use of your personal information.

The Information Commissioner’s Office is the independent United Kingdom authority responsible for data-protection matters.

You may obtain current complaint and contact information through the official Information Commissioner’s Office website.

We would appreciate the opportunity to address your concern first. You may contact us at info@fanorm.shop, but contacting us does not affect your right to complain directly to the Information Commissioner’s Office.