This Privacy Policy explains how thefryecompanyg.shop (“thefryecompanyg.shop,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information when you:

• Visit or browse thefryecompanyg.shop

• Create or use a customer account

• Add products to your basket

• Place or manage an order

• Make a payment

• Request delivery, a return, an exchange, or a refund

• Subscribe to marketing communications

• Contact customer support

• Submit a review, photograph, or other content

• Exercise a data-protection right

• Otherwise interact with our website and related services

Our website, online store, customer-account features, communications, and related services are collectively referred to as the “Services.”

Please read this Privacy Policy carefully. This policy should be read together with our Terms of Service, Return and Refund Policy, Shipping Policy, Legal Notice, Cookie settings, and any additional notices displayed when personal information is collected.

1. Data Controller

For the purposes of applicable UK data-protection law, the operator of thefryecompanyg.shop is responsible for deciding how and why personal information collected through the Services is processed.

Website: thefryecompanyg.shop
Privacy and Customer-Service Email: info@thefryecompanyg.shop

Questions, requests, objections, or complaints concerning personal information may be submitted using the email address above.

2. Personal Information

“Personal information” or “personal data” means information relating to an identified or identifiable individual.

It does not ordinarily include information that has been anonymised so that an individual can no longer reasonably be identified.

The personal information we collect depends on how you interact with the Services.

3. Information You Provide Directly

We may collect information that you provide directly, including:

• Full name

• Email address

• Telephone number

• Billing address

• Delivery address

• Account login information

• Customer-account preferences

• Order number

• Products ordered

• Product size, colour, style, or other selections

• Basket and saved-product information

• Payment and transaction information

• Delivery instructions

• Return, exchange, cancellation, and refund information

• Marketing preferences

• Customer-service messages

• Complaints and dispute information

• Reviews, ratings, photographs, videos, and feedback

• Information submitted in connection with a privacy request

• Information submitted in connection with an intellectual-property or legal complaint

• Any other information you choose to provide

You are responsible for ensuring that the information you provide is accurate, complete, and current.

4. Payment Information

Payments made through thefryecompanyg.shop are processed through Shopify and authorised third-party payment providers.

Payment-related information may include:

• Name of the cardholder or account holder

• Billing address

• Payment method

• Transaction amount

• Payment status

• Payment authorisation information

• Limited card details

• Fraud-prevention information

• Refund and chargeback information

thefryecompanyg.shop does not generally receive or store complete payment-card numbers or payment-card security codes.

Payment providers process payment information according to their own legal obligations and privacy notices.

5. Information Collected Automatically

When you access or use the Services, we, Shopify, and our service providers may automatically collect information such as:

• Internet Protocol address

• Browser type and version

• Device type

• Operating system

• Device and advertising identifiers

• Language and regional settings

• Approximate location derived from an Internet Protocol address

• Referring website, advertisement, search engine, or source

• Pages and products viewed

• Search terms entered

• Links and buttons selected

• Basket and checkout activity

• Customer-account activity

• Date and time of access

• Session duration

• Website navigation

• Email engagement

• Cookie identifiers

• Website-performance information

• Error and diagnostic information

• Security and fraud-detection information

This information may be collected through cookies, pixels, tags, scripts, local storage, server logs, software development kits, and similar technologies.

6. Information Received from Other Sources

We may receive personal information from third parties, including:

• Shopify

• Payment processors

• Banks and payment networks

• Digital-wallet providers

• Fraud-prevention and identity-verification services

• Shipping carriers

• Warehouses and fulfilment providers

• Address-verification services

• Customer-support providers

• Analytics providers

• Advertising and marketing partners

• Social media platforms

• Applications connected to our Shopify store

• Website-security and technology providers

• Parties authorised by you

• Public authorities where legally permitted

We process information received from third parties in accordance with this Privacy Policy and any additional restrictions imposed by the source.

7. Purposes for Processing Personal Information

We may process personal information for the purposes described below.

Providing the Services

We may use personal information to:

• Receive and process orders

• Verify order information

• Authorise and process payments

• Confirm purchases

• Maintain customer accounts

• Prepare and fulfil orders

• Arrange shipping and delivery

• Provide tracking information

• Process returns and exchanges

• Issue refunds

• Manage cancellations

• Respond to customer enquiries

• Provide requested products and Services

• Send transaction-related communications

Website Operation and Improvement

We may use personal information to:

• Operate and maintain the website

• Remember basket contents and preferences

• Improve website navigation

• Diagnose technical problems

• Analyse website performance

• Understand how customers use the Services

• Improve product information

• Develop new features

• Measure customer satisfaction

• Improve customer support

• Test website functionality

Security and Fraud Prevention

We may use personal information to:

• Verify customer and payment information

• Detect suspicious transactions

• Prevent payment fraud

• Prevent account misuse

• Protect customer accounts

• Investigate false delivery or return claims

• Address chargebacks

• Maintain website security

• Enforce our policies

• Protect customers, service providers, and our business

Marketing and Personalisation

Subject to applicable law and your choices, we may use personal information to:

• Send marketing emails

• Recommend products

• Personalise website content

• Measure marketing effectiveness

• Understand advertising interactions

• Create marketing audiences

• Display relevant advertising

• Prevent repetitive advertising

• Analyse interest in products and promotions

Legal and Administrative Purposes

We may use personal information to:

• Comply with legal and regulatory obligations

• Maintain tax, transaction, and accounting records

• Respond to lawful requests

• Establish, exercise, or defend legal claims

• Investigate suspected unlawful conduct

• Enforce contracts and policies

• Resolve disputes and complaints

• Protect legal rights, property, safety, and security

8. Lawful Bases for Processing

We process personal information only where we have an applicable lawful basis.

Depending on the purpose and circumstances, our lawful bases may include the following.

Performance of a Contract

We may process personal information when necessary to enter into or perform a contract with you, including to:

• Process an order

• Receive payment

• Deliver a product

• Maintain an account

• Process a cancellation

• Manage a return or exchange

• Issue a refund

• Provide requested customer support

Failure to provide information necessary for a contract may prevent us from completing an order or providing the requested Services.

Legal Obligation

We may process personal information where necessary to comply with a legal obligation, including obligations relating to:

• Taxation

• Accounting

• Consumer protection

• Product safety

• Fraud prevention

• Data-protection rights

• Regulatory enquiries

• Legal claims

• Court orders and lawful government requests

Legitimate Interests

We may process personal information where necessary for our legitimate interests or those of another party, provided those interests are not overridden by your rights and freedoms.

Legitimate interests may include:

• Operating and improving the online store

• Providing effective customer support

• Protecting the Services

• Preventing fraud and misuse

• Maintaining transaction and business records

• Understanding customer use of the website

• Improving products and Services

• Establishing or defending legal claims

• Sending permitted direct marketing for similar products

• Protecting the security of customers and service providers

Where we rely on legitimate interests, we consider the nature of the information, the expected benefit, the possible effect on individuals, and the safeguards available.

Consent

We may rely on your consent for activities such as:

• Using optional analytics cookies

• Using advertising cookies

• Sending certain marketing communications

• Processing information for another purpose clearly explained when consent is requested

You may withdraw consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Vital Interests

In rare circumstances, we may process personal information where necessary to protect someone’s life or physical safety.

9. Cookies and Similar Technologies

We, Shopify, and our service providers may use cookies and similar technologies to operate, secure, analyse, and personalise the Services.

These technologies may include:

• Cookies

• Tracking pixels

• Web beacons

• Tags

• Scripts

• Local storage

• Device identifiers

• Link-decoration technologies

• Other storage or access technologies

Cookies may be session-based and expire when a browser is closed, or persistent and remain for a defined period.

10. Strictly Necessary Technologies

Strictly necessary technologies support essential Services requested by the user.

They may be used to:

• Maintain basket contents

• Operate checkout

• Process payments

• Authenticate customer accounts

• Maintain website security

• Detect fraud

• Remember privacy preferences

• Manage network traffic

• Provide requested website functionality

Where permitted by law, strictly necessary technologies may be used without consent because the Services could not function properly without them.

Blocking these technologies may prevent checkout, account, basket, security, or payment features from operating correctly.

11. Analytics and Performance Technologies

Analytics and performance technologies may help us understand:

• How many visitors use the website

• Which pages and products are viewed

• How visitors navigate the Services

• Whether technical errors occur

• How quickly pages load

• Which marketing sources lead visitors to the website

• How the website can be improved

Where consent is legally required, analytics technologies will not be activated until valid consent has been provided.

12. Advertising Technologies

Advertising technologies may be used to:

• Present advertisements

• Personalise marketing

• Create advertising audiences

• Measure advertising performance

• Understand whether advertisements lead to visits or purchases

• Limit repeated advertisements

• Analyse campaign effectiveness

Advertising technologies are not treated as strictly necessary.

Where required by applicable law, we will request consent before activating advertising-related storage or access technologies.

13. Managing Cookie Preferences

You may manage applicable technologies through:

• The cookie banner displayed on thefryecompanyg.shop

• Any cookie-preference centre made available through the website

• Your browser settings

• Your device settings

• Available platform or advertising controls

You may withdraw consent for optional technologies at any time by changing your cookie preferences.

Withdrawing consent will not affect processing that took place before the preference was changed.

Deleting cookies may also delete saved privacy preferences, which means you may need to set them again.

Browser controls may not prevent every form of tracking technology.

14. Shopify’s Role

thefryecompanyg.shop uses Shopify’s ecommerce platform to host and operate the online store.

Shopify may process personal information to provide services including:

• Website hosting

• Checkout

• Payment processing

• Customer accounts

• Order management

• Website security

• Fraud prevention

• Analytics

• Personalisation

• Platform development

• Other ecommerce functionality

Shopify may process personal information as a processor acting on our instructions and, in certain circumstances, for its own purposes as described in Shopify’s privacy documentation.

Personal information processed through Shopify may be stored or processed outside the United Kingdom.

15. Shopify Network Intelligence and Enhanced Services

If Shopify Network Intelligence or related enhanced services are enabled for thefryecompanyg.shop, Shopify may process information from interactions with our store together with information from interactions with Shopify or other participating Shopify merchants.

This processing may support:

• Fraud prevention

• Product discovery

• Ecommerce personalisation

• Advertising measurement

• Analytics

• Checkout improvement

• Platform security

• Improvement of Shopify services

Any such processing is subject to applicable privacy settings, legal requirements, and available customer choices.

16. Disclosure of Personal Information

We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy.

Shopify and Ecommerce Providers

We may disclose information to Shopify and providers supporting website hosting, checkout, customer accounts, store security, and ecommerce operations.

Payment and Financial Providers

We may disclose information to:

• Payment processors

• Banks

• Card networks

• Digital-wallet providers

• Fraud-prevention providers

• Transaction-verification services

These providers may use information to authorise, process, secure, refund, and document payments.

Fulfilment and Delivery Providers

We may disclose information to:

• Warehouses

• Fulfilment providers

• Shipping carriers

• Courier services

• Customs brokers

• Delivery partners

• Address-verification services

These providers may use information to prepare, transport, track, clear, and deliver orders.

Technology and Professional Providers

We may disclose information to providers supporting:

• Website hosting

• Cloud storage

• Information technology

• Cybersecurity

• Customer service

• Email communications

• Data analytics

• Fraud detection

• Accounting

• Legal advice

• Regulatory compliance

• Business administration

Marketing and Advertising Providers

Subject to applicable consent and legal requirements, we may disclose relevant identifiers, device information, website activity, or purchase information to:

• Analytics services

• Advertising networks

• Social media platforms

• Search engines

• Marketing-service providers

These providers may assist with advertising delivery, measurement, audience creation, personalisation, and campaign analysis.

Legal and Safety Disclosures

We may disclose personal information where reasonably necessary to:

• Comply with applicable law

• Respond to lawful legal process

• Cooperate with regulators or public authorities

• Detect or investigate fraud

• Protect customers and the public

• Protect legal rights, property, and security

• Enforce our agreements and policies

Business Transactions

Personal information may be disclosed or transferred in connection with:

• A merger

• Acquisition

• Financing

• Reorganisation

• Insolvency

• Sale of assets

• Transfer of business operations

• Similar business transaction

Any transfer will be handled subject to applicable law.

At Your Direction

We may disclose personal information to another party where you request, authorise, or consent to the disclosure.

17. International Transfers

We, Shopify, and our service providers may process personal information outside the United Kingdom.

Countries outside the United Kingdom may have data-protection laws that differ from UK law.

Where a restricted international transfer is made, we will take reasonable steps to ensure that an appropriate transfer mechanism or exception applies.

Safeguards may include:

• UK adequacy regulations

• The UK International Data Transfer Agreement

• The UK Addendum to approved standard contractual clauses

• Contractual, technical, and organisational protections

• Another legally recognised transfer mechanism

• A legally permitted exception in limited circumstances

You may contact info@thefryecompanyg.shop for further information about safeguards relevant to your personal information.

18. Direct Marketing

We may send marketing communications where:

• You have provided valid consent;

• The communication is otherwise permitted by applicable electronic-marketing law; or

• Another lawful basis and applicable PECR condition are satisfied.

Where the customer soft opt-in is used, marketing will be limited to our own similar products or Services, and an opportunity to opt out will be provided when contact details are collected and in each subsequent marketing message.

We will not use the customer soft opt-in to promote unrelated third-party products or services.

19. Withdrawing from Marketing

You may stop promotional emails by:

• Selecting the unsubscribe link included in the message

• Contacting info@thefryecompanyg.shop

After unsubscribing, you may continue to receive non-promotional messages concerning:

• Orders

• Payments

• Shipping

• Delivery

• Returns

• Exchanges

• Refunds

• Customer support

• Account security

• Legal notices

• Policy changes

We may retain limited suppression information to ensure that your marketing preference is respected.

Withdrawing from email marketing does not automatically withdraw consent for optional cookies. Cookie preferences should be managed separately.

20. Data Retention

We retain personal information only for as long as reasonably necessary for the relevant purpose.

Retention periods are determined by considering:

• The nature and sensitivity of the information

• The reason the information was collected

• The status of the customer relationship

• Contractual obligations

• Tax and accounting requirements

• Consumer-protection obligations

• Fraud-prevention needs

• Security requirements

• Limitation periods for legal claims

• Regulatory and legal obligations

• Technical backup and deletion processes

Order, payment, delivery, refund, and transaction records may be retained for the period required to satisfy tax, accounting, consumer, fraud-prevention, and legal obligations.

Customer-service records may be retained for as long as reasonably necessary to resolve the enquiry, document the outcome, and manage related claims.

Marketing information may be retained until you withdraw consent, object, or the information is no longer required, subject to limited suppression records.

When information is no longer required, we may securely delete, anonymise, aggregate, or otherwise dispose of it.

21. Data Security

We use reasonable technical and organisational measures designed to protect personal information against:

• Unauthorised access

• Accidental loss

• Misuse

• Alteration

• Unauthorised disclosure

• Destruction

Measures may include:

• Access restrictions

• Secure payment processing

• Encryption during transmission

• Account authentication

• Fraud monitoring

• Security testing

• Staff or contractor confidentiality controls

• Service-provider safeguards

• Incident-response procedures

No website, internet transmission, or electronic storage method is completely secure.

We cannot guarantee absolute security, but we take reasonable steps to protect personal information.

You are responsible for protecting your account credentials and notifying us promptly if you suspect unauthorised access.

22. Personal-Data Breaches

If we become aware of a personal-data breach, we may:

• Investigate the incident

• Take steps to contain and remedy it

• Work with Shopify and relevant service providers

• Preserve relevant evidence

• Assess the possible risks

• Notify the Information Commissioner’s Office

• Notify affected individuals

Notifications will be provided where and within the period required by applicable law.

23. Your Data-Protection Rights

Subject to applicable law and relevant exceptions, you may have the following rights.

Right to Be Informed

You have the right to receive clear information about how your personal information is collected and used.

Right of Access

You may request confirmation of whether we process your personal information and request a copy of relevant information.

Reasonable and proportionate searches will be carried out when responding to an access request.

Right to Rectification

You may request correction of inaccurate personal information and completion of incomplete information.

Right to Erasure

You may request deletion of personal information in circumstances where the right applies.

The right to erasure is not absolute. We may retain information where processing remains necessary for legal obligations, fraud prevention, contractual matters, legal claims, or another permitted reason.

Right to Restrict Processing

You may request restriction of processing in certain circumstances, including while the accuracy or lawfulness of processing is being considered.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may have the right to receive relevant information in a structured, commonly used, machine-readable format.

Right to Object

You may object to processing based on legitimate interests in certain circumstances.

You have an absolute right to object to the processing of your personal information for direct-marketing purposes.

When a valid direct-marketing objection is received, we will stop using the information for that purpose.

Rights Concerning Automated Decisions

You may have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Right to Complain

You may submit a complaint to us and may also complain to the Information Commissioner’s Office.

24. Exercising Your Rights

To exercise a data-protection right, contact:

Email: info@thefryecompanyg.shop

Please include:

• Your full name

• The email address associated with your account or order

• Your order number where relevant

• The right you wish to exercise

• A clear description of the information or processing involved

You are not normally required to pay a fee.

A reasonable fee may be charged, or a request may be refused, where permitted by law and the request is manifestly unfounded or excessive.

25. Identity Verification

Before responding to certain requests, we may need to verify your identity.

Verification may involve confirming:

• Your email address

• Order information

• Billing or delivery information

• Customer-account information

• Other information reasonably necessary to prevent unauthorised disclosure

We will request only information reasonably necessary for verification.

If we cannot reasonably verify your identity or authority, we may be unable to complete the request.

26. Authorised Representatives

You may authorise another person to act on your behalf where permitted by law.

We may request:

• Evidence of the representative’s authority

• Verification of your identity

• Confirmation that you authorised the request

We may communicate directly with you where reasonably necessary to protect your information.

27. Response Times

We will respond to valid data-protection requests within the period required by applicable law.

The response period may be extended where legally permitted because of the complexity or number of requests.

Where an extension applies, we will notify you and explain the reason.

28. Data-Protection Complaints

You may complain about how we collect, use, disclose, retain, or protect your personal information by contacting:

Email: info@thefryecompanyg.shop

Your complaint should include:

• Your full name

• Your contact email address

• A clear description of the concern

• Relevant order or account information

• The outcome you are seeking

• Supporting information where available

We will acknowledge a data-protection complaint within 30 days and will investigate and respond without undue delay.

We may request additional information where reasonably necessary to understand or investigate the complaint.

29. Complaints to the Information Commissioner

You have the right to complain to the Information Commissioner’s Office, the United Kingdom’s independent data-protection regulator.

We encourage you to contact us first so that we have an opportunity to address your concern, but this does not restrict your right to approach the Information Commissioner’s Office directly.

30. Automated Processing and Profiling

We and our service providers may use automated systems to support:

• Fraud detection

• Payment verification

• Order-security reviews

• Account protection

• Product recommendations

• Website personalisation

• Advertising selection

• Customer segmentation

• Analytics

These systems may analyse transaction information, device information, account activity, website interactions, and other relevant information.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects unless:

• The processing is necessary for a contract;

• The processing is authorised by law;

• You have provided valid explicit consent where required; and

• Appropriate safeguards are provided.

You may contact us for information about relevant automated processing and available rights.

31. Children’s Privacy

The Services are intended for a general retail audience and are not designed for children under 13 to create accounts, place orders, or provide personal information independently.

We do not knowingly collect personal information directly from a child under 13 without appropriate parental authorisation where required.

Customers who have not reached the age of legal majority should use the Services only with the involvement and permission of a parent or legal guardian.

If you believe a child has provided personal information inappropriately, contact:

Email: info@thefryecompanyg.shop

We will review the matter and take appropriate steps where required.

Where the Services are likely to be accessed by children, we will consider appropriate age-related protections, privacy settings, transparency, data minimisation, and the best interests of the child.

32. Special-Category and Highly Sensitive Information

We do not ordinarily request special-category personal information, such as information concerning health, ethnicity, religion, political opinions, biometric identification, or sexual orientation.

Please do not submit such information unless it is reasonably necessary and specifically requested for a lawful purpose.

We also ask that you do not send the following by email:

• Complete payment-card numbers

• Card security codes

• Account passwords

• Online-banking credentials

• Government identification numbers

• Other highly sensitive financial or authentication information

33. Public Reviews and User Content

If you submit a review, photograph, video, comment, or other public content, that information may be visible to other visitors and the public.

Do not include:

• Payment information

• Account passwords

• Medical information

• Identification documents

• Private addresses

• Information about another person without permission

• Other confidential or sensitive information

We may moderate or remove public content that violates our policies or creates privacy, legal, or security concerns.

34. Social Media and Third-Party Features

The Services may include links to or features provided by social media platforms and other third parties.

When you interact with these features, the third-party provider may collect information such as:

• Your Internet Protocol address

• Your device information

• The page visited

• Your interaction with the feature

• Information associated with your third-party account

Your interaction with a third-party platform is governed by that provider’s privacy notice and account settings.

35. Third-Party Websites

The Services may contain links to external websites, applications, payment providers, shipping services, or other resources.

We do not control and are not responsible for the privacy, security, availability, or content of independent third-party services.

Information provided directly to a third party is governed by that party’s privacy notice and terms.

You should review third-party policies before providing personal information.

36. Changes of Processing Purpose

We will generally use personal information only for the purpose for which it was collected.

We may use information for another compatible purpose where permitted by law.

If we need to process information for a materially different purpose, we will provide additional information and identify the applicable lawful basis unless a legal exception applies.

37. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Products and Services

• Business practices

• Shopify features

• Installed applications

• Technology

• Cookie and advertising practices

• Security procedures

• Service-provider arrangements

• Data-protection law

• Regulatory guidance

The revised Privacy Policy will be published on thefryecompanyg.shop with an updated effective date.

Where required, significant changes may also be communicated by email, website notice, or another appropriate method.

We encourage you to review this Privacy Policy periodically.

38. Contact Information

For privacy questions, data-protection requests, objections, withdrawals of consent, marketing preferences, or complaints, contact:

Store: thefryecompanyg.shop
Email: info@thefryecompanyg.shop

Customer and privacy enquiries are generally answered within 1–2 business days, subject to the formal time limits applicable to data-protection requests and complaints.