Privacy Policy

Last Updated: 23 April 2025 | UK GDPR Compliant

1. Data Controller

Xyntherica is the data controller for your personal information. Our contact details: 58 LOUIS AVENUE, BRADFORD, BD5 0NN, UK. Email: yklc1958@outlook.com. Phone: 01635 278251.

2. Information We Collect – Directly from You

Identity Data: Full name, date of birth (optional)
Contact Data: Email address, phone number, billing address, shipping address
Financial Data: Payment card details (processed by secure third parties — we do not store full card numbers)
Transaction Data: Order history, purchase amounts, return history
Profile Data: Username, password, shopping preferences, wishlist, size preferences
Communications: Customer service inquiries, emails, product reviews

3. Information Collected Automatically

Technical Data: IP address, browser type and version, operating system, device identifiers
Usage Data: Pages viewed, time spent, clickstream data, referring website, search queries
Location Data: General geographic location derived from your IP address
Cookies: See Section 9

4. How We Use Your Information

To process and fulfil your orders (contract performance)
To communicate order updates and handle customer service (contract performance)
To send marketing emails — only with your consent (opt out anytime)
To improve our website, products, and customer experience (legitimate interests)
To prevent fraud and enhance security (legitimate interests and legal obligations)
To comply with tax, accounting, and legal requirements (legal obligation)

5. Legal Bases for Processing (UK GDPR)

Contract Performance: Processing orders, payments, shipping, returns
Legitimate Interests: Improving our website, fraud prevention, analytics, customer service
Consent: Marketing emails, non-essential cookies — you can withdraw at any time
Legal Obligation: Tax records, compliance with court orders

6. Sharing Your Data – Third Parties

We do not sell, rent, or trade your personal information. We share with:

Payment Processors: Stripe, PayPal, Klarna — to process transactions
Shipping Carriers: Royal Mail, Evri, DHL, UPS — to deliver orders
Email Service Providers: Klaviyo — for order confirmations and marketing (with consent)
Analytics Providers: Google Analytics, Meta Pixel — to understand website usage
IT and Cloud Services: Shopify — our e‑commerce platform

All service providers are contractually bound to protect your data and use it only for specified purposes.

7. International Data Transfers

Some of our service providers (Shopify, Stripe, Klaviyo) may operate outside the UK/EEA, including in the United States. When we transfer your personal data internationally, we ensure appropriate safeguards including UK Addendum to Standard Contractual Clauses (SCCs) and Transfer Impact Assessments.

8. Data Retention Periods

Order Information: 7 years (to comply with UK tax and consumer protection laws)
Account Information: Until you delete your account, plus 30 days
Marketing Preferences: Until you withdraw consent, plus 2 years of inactivity
Website Analytics: 26 months (Google Analytics)
Customer Service Communications: 3 years from last contact

9. Cookies and Tracking Technologies

Our site uses cookies. Types include:

Essential Cookies: Required for cart and checkout — cannot be disabled
Analytics Cookies: Help us understand site traffic (Google Analytics)
Marketing Cookies: Deliver relevant ads and track campaign performance
Preference Cookies: Remember your settings

You can manage cookies in your browser settings. Disabling non‑essential cookies may affect site functionality.

10. Your Rights (UK & EEA Residents)

Under UK GDPR, you have the right to:

Access: Request a copy of your personal data (Subject Access Request)
Rectification: Correct inaccurate or incomplete information
Erasure: Request deletion ("right to be forgotten")
Restriction: Limit how we use your data
Portability: Receive your data in a structured format
Objection: Object to processing based on legitimate interests
Withdraw Consent: Unsubscribe from marketing at any time
Lodge a Complaint: File a complaint with the ICO

11. Children's Privacy

Xyntherica does not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with personal information, please contact us immediately.

12. Data Security Measures

We implement SSL/TLS encryption, PCI‑DSS compliant payment processing, restricted access to personal information, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

13. Third-Party Links

Our site may contain links to third‑party websites. We are not responsible for the privacy practices of these external sites. Please read their privacy policies.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The "Last Updated" date indicates the latest changes. Material changes will be notified via email or a notice on our site.

15. Your Rights – California Residents (CCPA/CPRA)

If you are a California resident, you have the right to: know what personal information we collect; request deletion; opt‑out of the sale of personal information (we do not sell your data); and non‑discrimination for exercising your rights. Contact us at yklc1958@outlook.com.

16. Direct Marketing & Opt-Out

You can unsubscribe from our marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any marketing email or by emailing yklc1958@outlook.com with "UNSUBSCRIBE" in the subject line.

17. Automated Decision-Making

We do not use automated decision-making or profiling that has legal or significant effects on you.

18. Complaints to the ICO

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Phone: 0303 123 1113. Website: www.ico.org.uk.