Privacy Policy

1. Data Controller

The data controller responsible for your personal data is CP247, operated by MB Confi solutions. If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].

2. Information We Collect

We may collect the following categories of personal data:

• Identity data: name, billing address, delivery address.
• Contact data: email address, telephone number.
• Transaction data: details of products purchased, payment method, order history.
• Technical data: IP address, browser type, device information, pages visited.
• Marketing data: your preferences for receiving marketing communications.

3. How We Use Your Data

We process your personal data for the following purposes:

• To fulfil and deliver your orders.
• To process payments and prevent fraud.
• To communicate with you about your orders and account.
• To send marketing communications where you have opted in.
• To improve our website, products, and services.
• To comply with legal obligations.

4. Legal Basis for Processing

We rely on the following legal bases under the UK GDPR: performance of a contract (order fulfilment), legitimate interests (fraud prevention, site improvement), consent (marketing communications), and legal obligation (tax and accounting records).

5. Data Sharing

We may share your personal data with trusted third parties who assist us in operating our business, including payment processors, courier and logistics partners, and IT service providers. We do not sell your personal data to third parties. All third-party providers are contractually obligated to handle your data securely and in accordance with applicable data protection laws.

6. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and personalise content. You can manage your cookie preferences at any time using the cookie banner or the Cookie Settings link in our footer. For full details on which cookies we use and why, please see our Cookie Policy.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Order data is typically retained for 6 years in line with HMRC requirements.

8. Your Rights

Under the UK GDPR, you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to withdraw consent at any time. To exercise any of these rights, please contact us at [email protected].

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All payment transactions are encrypted using SSL technology.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.