1. Introduction
This Privacy Policy explains how FikFis Limited ("FikFis", "we", "us", "our") collects, uses, stores, shares, and protects your personal data when you visit and use www.fikfis.co.uk (the "Website") or purchase products from us.
We are committed to processing your personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read this policy carefully. By using our Website, you acknowledge that you have read and understood how we process your personal data.
2. Data Controller
The data controller responsible for your personal data is:
FikFis Limited
Email: support@fikfis.co.uk
Website: www.fikfis.co.uk
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.
3. What Personal Data We Collect
3.1 Data You Provide to Us
When you use our Website or make a purchase, we may collect the following categories of personal data:
• Identity data: name, username or similar identifier
• Contact data: email address, telephone number, billing address, delivery address
• Transaction data: details of purchases and orders made through our Website
• Communications data: any correspondence you send to us, including emails and contact form submissions
• Account data: login credentials if you create an account
3.2 Data Collected Automatically
When you visit our Website, we may automatically collect:
• Technical data: IP address, browser type and version, device type, operating system
• Usage data: pages viewed, links clicked, time spent on pages, referral URLs
• Cookie data: as described in our Cookies Policy
3.3 Data from Third Parties
We may receive personal data about you from third parties, including:
• PayPal: payment confirmation and fraud prevention data
• Analytics providers: aggregated and anonymised usage statistics
4. How We Use Your Personal Data
4.1 Lawful Basis for Processing
We only process your personal data where we have a lawful basis to do so. The following table sets out how and why we use your personal data:
1. Processing and Fulfilling Your Orders
Data Used: Identity Data, Contact Data, Transaction Data
Lawful Basis: Performance of a Contract
2. Sending Order Confirmations and Updates
Data Used: Identity Data, Contact Data
Lawful Basis: Performance of a Contract
3. Processing Payments via PayPal
Data Used: Transaction Data (processed by PayPal)
Lawful Basis: Performance of a Contract
4. Customer Support and Complaints Handling
Data Used: Identity Data, Contact Data, Communications Data
Lawful Basis: Performance of a Contract and/or Legitimate Interests
5. Fraud Prevention and Security
Data Used: Identity Data, Technical Data, Transaction Data
Lawful Basis: Legitimate Interests and/or Legal Obligation
6. Improving Our Website and Services
Data Used: Technical Data, Usage Data
Lawful Basis: Legitimate Interests
7. Sending Marketing Communications
Data Used: Identity Data, Contact Data
Lawful Basis: Consent
8. Complying with Legal Obligations
Data Used: All Relevant Personal Data
Lawful Basis: Legal Obligation
9. Sharing Data with Suppliers for Order Fulfilment
Data Used: Contact Data, Transaction Data
Lawful Basis: Performance of a Contract
4.2 Marketing Communications
We will only send you marketing emails if you have explicitly opted in to receiving them. You may withdraw your consent at any time by clicking the unsubscribe link in any marketing email or by contacting us at support@fikfis.co.uk.
We will never sell, rent, or otherwise share your personal data with third parties for their own marketing purposes without your explicit consent.
5. Sharing Your Personal Data
We may share your personal data with the following categories of third parties:
• Suppliers and fulfilment partners: for the purpose of fulfilling your orders (name and delivery address only)
• PayPal: for payment processing purposes
• IT and hosting providers: for the technical operation of our Website
• Analytics providers: for Website analytics (using anonymised or pseudonymised data where possible)
• Professional advisers: including lawyers and accountants where required
• Regulatory authorities: where required by law or court order
We require all third parties with whom we share personal data to process it securely, in accordance with their obligations under applicable data protection law, and for the specified purpose only.
6. International Transfers
Some of our third-party suppliers and service providers may be located outside the United Kingdom. Where we transfer personal data outside the UK, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements, including, where applicable:
• Use of standard contractual clauses approved by the UK Information Commissioner's Office (ICO)
• Transfer to countries with an adequacy decision from the UK government
• Other appropriate safeguards as permitted under UK GDPR
Your data may be shared with AliExpress suppliers located in third countries (including China) for the purpose of fulfilling your order. The information shared is limited to what is strictly necessary for delivery (name and delivery address).
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.
• Order and transaction records: 7 years (for tax and accounting purposes)
• Customer account data: for the duration of your account, plus 2 years after closure
• Customer support records: 3 years from the date of the last interaction
• Marketing consent records: for the duration of consent, plus 1 year
• Technical and usage data: up to 26 months
8. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate personal data
• Right to erasure: to request deletion of your personal data in certain circumstances
• Right to restrict processing: to request that we restrict processing of your personal data
• Right to data portability: to request transfer of your personal data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests or for direct marketing
• Rights in relation to automated decision-making and profiling
To exercise any of these rights, please contact us at support@fikfis.co.uk. We will respond within one calendar month. Where requests are complex or numerous, we may extend this period by a further two months, in which case we will notify you.
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at any time. The ICO's contact details are available at www.ico.org.uk.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include:
• Encrypted data transmission via HTTPS/TLS
• Access controls limiting staff access to personal data
• Secure payment processing via PayPal (we do not store full card details)
• Regular review of our security practices
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with our obligations under UK GDPR.
10. Cookies
Our Website uses cookies. Please see our Cookies Policy at www.fikfis.co.uk/cookies-policy for full details of the cookies we use and how to manage your preferences.
11. Children's Data
Our Website and services are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected personal data from a child under 13, we will delete it promptly.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated effective date. We encourage you to review this policy periodically. Your continued use of the Website after any changes constitutes your acceptance of the updated policy.