Privacy policy

Surfaceica ("we," "us," or "our") operates this online store and the services provided through it (the "Website"). We are a company based in the United Kingdom and act as the data controller for the personal information we collect.

By using our Website, you acknowledge and accept the data practices described in this Privacy Policy.

1. WHO WE ARE

SURFACEICA

Address: 51 Ena Cres, Leigh WN7 5ET, United Kingdom
Phone: +44 7451258665
Email: support@surfaceica.com

2. PERSONAL INFORMATION WE GATHER

The information we collect depends on how you use our Website and may include:

Identity & Contact Information: Your name, email address, telephone number, billing address, and delivery address.

Order & Payment Information: Details of purchases and returns, transaction amounts, payment references, and limited payment information. Full payment card details are securely handled by our payment providers and are never stored on our systems.

Account Details (Registered Customers): Usernames, passwords, and your saved preferences.

Customer Service Interactions: Any emails, messages, attachments, or other information you share with our support team.

Technical & Browsing Data: Your IP address, browser type, operating system, device information, pages visited, browsing activity, and cookie-related information.

3. HOW WE OBTAIN YOUR DATA

We collect your personal information in several ways:

Information you provide: When you place an order, create an account, subscribe to updates, or contact our customer support team.

Automated collection: Through cookies, tracking technologies, and similar tools while you browse our Website.

Third-party sources: From trusted partners who assist us with payment processing, shipping, marketing, and website analytics.

4. PURPOSES AND LEGAL GROUNDS FOR PROCESSING (GDPR ARTICLE 6)

We process your personal information for the following purposes:

Fulfilling Orders & Managing Accounts (processing orders, arranging deliveries, handling returns, and providing customer support) — Legal grounds: Contract performance (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).

Processing Payments & Preventing Fraud — Legal grounds: Legitimate interests (Art. 6(1)(f)) and compliance with legal obligations relating to financial and tax regulations (Art. 6(1)(c)).

Website Improvement & Analytics (understanding how our Website is used, resolving technical issues, and improving performance) — Legal grounds: Legitimate interests (Art. 6(1)(f)).

Marketing Communications (sending promotional emails, personalised offers, and relevant advertising) — Legal grounds: Your consent where required by law (Art. 6(1)(a)); otherwise our legitimate interests (Art. 6(1)(f)). You can unsubscribe from marketing communications at any time.

Regulatory & Legal Compliance (meeting tax obligations, financial reporting requirements, and responding to lawful requests from authorities) — Legal grounds: Legal obligation (Art. 6(1)(c)).

5. COOKIES & SIMILAR TECHNOLOGIES

We use cookies and similar technologies to:

  • Enable essential Website functionality

  • Remember your preferences and settings

  • Analyse Website traffic and user behaviour

  • Deliver relevant advertising and marketing where permitted

Where required by law, we'll ask for your consent before using non-essential cookies. You can update your cookie preferences at any time through our cookie banner or your browser settings. Please note that disabling certain cookies may affect how parts of the Website function.

6. WHO WE SHARE DATA WITH

We only share your personal information when it's necessary to operate our business and provide our services.

E-commerce Platform (Shopify): Website hosting, order processing, and security.

Payment Providers: Secure payment processing and fraud prevention.

Shipping & Fulfilment Companies: Delivering orders and handling returns.

Technology & Analytics Partners: Cloud hosting, email services, and Website performance analytics.

Professional Advisers: Legal, accounting, and compliance professionals when required.

Business Transfers: If our business is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We never sell your personal information to third parties.

7. TRANSFERS OUTSIDE THE UK/EEA

Some of our service providers, including Shopify and its partners, may process your personal information outside the United Kingdom or the European Economic Area (EEA). Whenever this happens, we ensure appropriate safeguards are in place, including the use of Standard Contractual Clauses (SCCs). If you'd like more information about these safeguards, please contact us. Certain confidential details may be redacted where appropriate.

8. HOW LONG WE KEEP YOUR DATA

We only keep your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy and to meet our legal obligations.

Typical retention periods include:

Transaction & Financial Records: Up to 10 years, in accordance with tax and accounting requirements.

Account Data: For as long as your account remains active. After prolonged inactivity, your information will be deleted or anonymised once any required legal retention periods have ended.

Customer Support Records: Up to 3 years after your enquiry has been resolved, unless a longer retention period is required by law.

Marketing Preferences: Until you withdraw your consent or opt out of receiving marketing communications. We will then suppress your details from future marketing lists.

9. YOUR DATA PROTECTION RIGHTS

Under the UK GDPR and EU GDPR, you have the right to:

  • Access the personal information we hold about you

  • Request corrections to inaccurate or incomplete information

  • Request the deletion of your personal information in certain circumstances

  • Object to or restrict specific types of processing

  • Receive your personal information in a portable, machine-readable format

  • Withdraw your consent at any time where consent is the legal basis for processing

To exercise any of these rights, please email support@surfaceica.com. We may ask you to verify your identity before processing your request.

We aim to respond within one month. If your request is particularly complex, we may extend this period by up to two additional months and will notify you if this applies.

You also have the right to lodge a complaint with a supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO). If you live within the EEA, you may contact your local data protection authority.

10. CHILDREN'S PRIVACY

Our Website is not intended for anyone under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided personal information through our Website, please contact us as soon as possible so we can remove it.

11. AUTOMATED DECISION-MAKING

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals, as described under GDPR Article 22.

12. OUR E-COMMERCE PLATFORM

Our store is powered by Shopify, which provides the hosting, order management, security, and analytics infrastructure required to operate our Website. Shopify processes personal information on our behalf and may also act as a controller for certain platform-wide or aggregated information. Please refer to Shopify's Privacy Policy and Privacy Portal for more information.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Any changes will be published on this page together with an updated "Last Updated" date. Where required by law, we'll also notify you of significant changes.

14. GET IN TOUCH

If you have any questions about this Privacy Policy or would like to exercise your data protection rights, please contact us.

SURFACEICA
Address: 51 Ena Cres, Leigh WN7 5ET, United Kingdom
Phone: +44 7451258665
Email: support@surfaceica.com
Customer Service Hour: Monday to Friday, 10:00 a.m. – 6:00 p.m. (GMT)

We do our best to reply within 24–48 hours.