Privacy Policy

Last updated: 1 October 2026

This Privacy Policy explains how Renfys (“I”, “me”, “my” or “Renfys”) collects, uses, stores and protects your personal information when you visit or use https://renfys.co.uk (the “Website”), place an order, contact me, or subscribe to my mailing list.

I respect your privacy and am committed to protecting your personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Where I send marketing emails, I also comply with the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who I am

The data controller responsible for your personal information is:

Renfys

Website: https://renfys.co.uk

Email: hello@renfys.co.uk

If you have any questions about this Privacy Policy or how I use your personal information, you can contact me using the email address above.

2. What personal information I collect

Depending on how you use my Website, I may collect:

When you place an order

  • Your name
  • Billing address
  • Delivery address
  • Email address
  • Telephone number, if you provide one
  • Details of the products you purchase
  • Order and transaction information

I need this information to process and fulfil your order and to communicate with you about your purchase.

When you subscribe to my mailing list

  • Your name, if provided
  • Your email address
  • Your subscription and marketing preferences
  • Your consent and subscription history
  • Information about whether emails have been delivered, opened or interacted with, where this functionality is enabled

When you contact me

  • Your name
  • Your email address
  • Any other information you choose to include in your message

Technical information

My Website may also collect limited technical information automatically, such as your IP address, browser type, device information and information about how you use the Website.

The information collected depends on the cookies, analytics and other technologies used on the Website.

3. How I collect your information

I collect personal information when you:

  • Place an order through the Website
  • Create or use an account, where applicable
  • Subscribe to my mailing list
  • Contact me through the Website
  • Contact me by email
  • Complete a form on the Website
  • Use or browse the Website

Some information may also be collected automatically through cookies and similar technologies.

4. How I use your personal information

I may use your personal information to:

  • Process and fulfil your orders
  • Arrange delivery of products
  • Communicate with you about your order
  • Deal with refunds, returns and customer service enquiries
  • Respond to questions and messages
  • Send newsletters and other marketing communications where you have agreed to receive them
  • Manage your mailing-list preferences
  • Maintain appropriate business and financial records
  • Improve and maintain my Website and services
  • Protect the security of the Website
  • Detect and prevent fraud or misuse
  • Comply with legal and regulatory obligations

I will only use your personal information for purposes that are compatible with the reasons for which it was collected, unless I am legally permitted or required to do otherwise.

5. Lawful bases for using your information

UK data protection law requires me to have a lawful basis for processing your personal information.

Depending on the circumstances, I rely on the following lawful bases.

Contract

When you place an order, I need to process certain personal information in order to fulfil the contract between you and me.

For example, I need your name and delivery address to send your order to you.

Legal obligation

I may need to process and retain certain information to comply with legal obligations, such as accounting, taxation and other legal requirements.

Consent

If you voluntarily subscribe to my marketing mailing list, I will normally rely on your consent to send you marketing emails.

You can withdraw your consent at any time by clicking the unsubscribe link in my emails or by contacting me.

You do not have to subscribe to my mailing list in order to place an order.

Legitimate interests

Where appropriate, I may process personal information where this is necessary for my legitimate interests, provided that those interests are not overridden by your rights and freedoms.

For example, this may include maintaining the security of my Website, preventing fraud and managing my business.

6. Orders and customer information

When you place an order through Renfys.co.uk, I collect the information necessary to process and fulfil your order.

This may include your name, billing address, delivery address, email address, telephone number and details of your purchase.

Your email address may be used to send you transactional emails relating to your order, such as order confirmations, delivery information or information about your purchase.

These necessary service emails are different from marketing emails.

I will not require you to subscribe to my marketing mailing list in order to place an order.

7. Mailing list and marketing emails

If you choose to subscribe to my mailing list, I will use your information to send you the newsletters, updates, new product information and other marketing communications that you have agreed to receive.

My mailing list is managed using MailPoet.

MailPoet may process subscriber information on my behalf in order to manage the mailing list and deliver emails.

I will only send marketing emails where I have an appropriate lawful basis to do so under applicable data protection and electronic marketing laws.

Where consent is used, you must actively opt in to receive marketing emails.

You can unsubscribe at any time by using the unsubscribe link included in my marketing emails.

If you unsubscribe, I will stop sending you marketing emails. I may retain limited information about your unsubscribe request where necessary to ensure that I do not accidentally send you further marketing communications.

Further information about MailPoet’s privacy practices can be found in its privacy notice.

8. MailPoet

I use MailPoet to manage my mailing list and send emails.

Depending on how MailPoet is configured on the Website, MailPoet may process information such as:

  • Your name
  • Your email address
  • Mailing-list subscription information
  • Subscription and unsubscribe status
  • Email delivery information
  • Email engagement information, where enabled

MailPoet provides information about the personal data processed by its services and its GDPR compliance on its website.

9. Who I share your information with

I do not sell or rent your personal information.

I may share personal information with trusted service providers where this is necessary to operate my Website, process orders or provide services to you.

These may include:

  • MailPoet, for managing my mailing list and sending marketing emails
  • Website hosting providers
  • Website and technical service providers
  • Payment service providers, where applicable
  • Delivery and postal services, where necessary to fulfil an order
  • Professional advisers where necessary
  • Government bodies, regulators or law enforcement where I am legally required to do so

Where another organisation processes personal information on my behalf, I will take appropriate steps to ensure that the processing complies with applicable data protection law.

10. Payments

Payment information may be processed by the payment provider used during checkout.

I do not need to store your full payment card details in order to process your order.

Payment providers may collect and process information in accordance with their own privacy policies and terms.

11. International transfers

Some of the service providers I use may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, I will ensure that appropriate safeguards are in place in accordance with applicable UK data protection law.

These safeguards may include an adequacy decision or appropriate contractual safeguards where required.

12. How long I keep your information

I will only keep personal information for as long as reasonably necessary for the purposes for which it was collected, including where information needs to be retained to comply with legal, accounting or tax requirements.

Order information

Information relating to purchases may be retained for the period necessary to:

  • Complete the transaction
  • Deal with returns, refunds or complaints
  • Meet legal and accounting requirements
  • Protect against or establish legal claims

Mailing-list information

If you subscribe to my mailing list, your information will be retained while you remain subscribed.

If you unsubscribe, you will be removed from my active marketing list.

I may retain limited information about your unsubscribe request so that I can respect your decision and avoid sending you future marketing emails.

I periodically review the information I hold and delete or anonymise information that is no longer required.

13. Your data protection rights

Under UK data protection law, you may have the right to:

  • Request access to the personal information I hold about you
  • Ask me to correct inaccurate or incomplete information
  • Ask me to delete your personal information in certain circumstances
  • Ask me to restrict how I use your information in certain circumstances
  • Object to certain types of processing
  • Request the transfer of certain information to you or another organisation
  • Withdraw consent where I rely on consent as the lawful basis for processing

You have an absolute right to object to direct marketing.

You can unsubscribe from my marketing emails at any time using the unsubscribe link included in the email.

14. How to exercise your rights

If you would like to exercise any of your data protection rights, please contact me:

Email: hello@renfys.co.uk

Please provide enough information for me to identify you and understand your request.

I will normally respond to a valid request within one month, although this period may be extended where permitted by law for particularly complex requests.

You will normally not have to pay a fee to exercise your data protection rights.

15. Keeping your information secure

I take reasonable technical and organisational measures to protect your personal information against:

  • Unauthorised access
  • Accidental loss
  • Destruction
  • Misuse
  • Unauthorised disclosure
  • Unauthorised alteration

However, no method of storing or transmitting information online can be guaranteed to be completely secure.

16. Cookies

Renfys.co.uk may use cookies and similar technologies.

Some cookies are necessary for the Website to function, including features relating to shopping baskets, checkout and the operation of the Website.

Other cookies may be used for purposes such as analytics, remembering preferences or embedded third-party content.

Where consent is legally required before non-essential cookies or similar technologies are used, I will ask for that consent.

Further information about the cookies used on Renfys.co.uk can be provided in a separate Cookie Policy.

17. Third-party websites

The Website may contain links to websites operated by third parties, including social media platforms and other websites.

Those websites have their own privacy policies and terms.

I am not responsible for the privacy practices of third-party websites.

18. Children’s privacy

Renfys.co.uk is not specifically directed at children.

I do not knowingly collect personal information from children where doing so would be contrary to applicable data protection law.

If you believe that a child has provided personal information to me and would like it removed, please contact me at:

hello@renfys.co.uk

19. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to the Website, the services I use, how I process personal information or changes in applicable law.

When I make changes, I will update the “Last updated” date at the beginning of this Privacy Policy.

20. Complaints

If you have concerns about how I have handled your personal information, please contact me first at:

hello@renfys.co.uk

I will do my best to resolve your concerns.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

You can find information about making a complaint on the ICO website.

21. Contact

If you have any questions about this Privacy Policy or how I use your personal information, please contact:

Renfys

Email: hello@renfys.co.uk

Website: https://renfys.co.uk