Free delivery from £50.00
Save to shopping list
Create a new shopping list

Privacy policy

Privacy and Cookie Policy – Fab Trade Group LTD (fabtrade.co.uk)

Privacy and Cookie Policy – Fab Trade Group LTD

The online store FabTrade.co.uk is operated by Fab Trade Group LTD, 112 High Street, TW3 1NA London, United Kingdom; e-mail: orders@fabtrade.co.uk (hereinafter: the “Controller”, “we”). This document defines the rules for processing personal data in accordance with UK GDPR, the Data Protection Act 2018 and PECR (Privacy and Electronic Communications Regulations), as well as the rules for using cookies.

§ 1. Definitions

  1. Personal data – information relating to an identified or identifiable natural person.
  2. UK GDPR – the UK General Data Protection Regulation.
  3. PECR – the UK Privacy and Electronic Communications Regulations.
  4. User/Customer – a person visiting the Store or using its features (including making purchases).
  5. Device – a computer, phone, tablet, or other device used to access the Store.

§ 2. Controller and Contact Details

  1. The Controller of personal data is Fab Trade Group LTD, 112 High Street, TW3 1NA London, e-mail: orders@fabtrade.co.uk.
  2. For data protection matters, you may contact us at the above address or by e‑mail.

§ 3. Scope of Collected Data

  1. We process in particular: first and last name, e‑mail address, phone number, delivery and billing address, order data, payment data, customer account number, communication history, and technical data (IP address, cookie identifiers, activity logs, server logs).
  2. For online payments, we process transaction identifiers received from payment operators (e.g., PayPal, Stripe).

§ 4. Purposes and Legal Bases of Processing

  1. Contract performance and order handling – Art. 6(1)(b) UK GDPR (conclusion and performance of the sales contract, creation and handling of the account).
  2. Payment processing – Art. 6(1)(b) and (f) UK GDPR (executing payments, preventing fraud) – via operators: PayPal, Stripe.
  3. Contact and support (form, e‑mail) – Art. 6(1)(b) or (f) UK GDPR (responding and handling communication).
  4. Newsletter and marketing communication – Art. 6(1)(a) UK GDPR (consent) and PECR (marketing permissions).
  5. Own marketing, analytics and statistics – Art. 6(1)(f) UK GDPR (legitimate interest – development and promotion of our business; cookies/analytics only based on consent where required by PECR).
  6. Legal obligations (accounting, taxes, complaints) – Art. 6(1)(c) UK GDPR.
  7. Establishment, exercise or defence of claims – Art. 6(1)(f) UK GDPR.

§ 5. Data Recipients and Categories of Entities

  1. Processors and partners: hosting/IT providers, the store platform, courier and logistics companies, accounting office, e‑mail/mailing systems, anti‑fraud tools, payment operators: PayPal, Stripe.
  2. Where legally required – public authorities.

§ 6. Data Transfers Outside the UK

  1. If service providers process data outside the UK, we ensure appropriate safeguards – e.g., International Data Transfer Agreement/Addendum (IDTA) or other mechanisms required by UK GDPR.

§ 7. Data Retention Periods

  1. Data related to contracts and accounting – for the duration of the contract and for the period required by law (e.g., accounting/tax regulations).
  2. Communication – until the matter is resolved.
  3. Marketing (newsletter) – until consent is withdrawn.
  4. Cookies/analytics – according to cookie settings and until consent withdrawal or cookie expiry.
  5. Claims – until limitation periods expire.

§ 8. Rights of Data Subjects

  1. You have the right to: access, rectification, erasure, restriction, portability, objection to processing based on legitimate interest, and withdrawal of consent at any time (without affecting prior lawful processing).
  2. You have the right to lodge a complaint with the ICO (Information Commissioner’s Office).

§ 9. Requirement to Provide Data

  1. Providing data is not mandatory, but necessary to conclude and fulfil the contract (purchases, delivery, payments). For marketing purposes – voluntary.

§ 10. Automated Decision-Making and Profiling

  1. We do not make decisions producing legal effects solely through automated means. We may perform basic profiling (e.g., newsletter segmentation) based on consent and legitimate interest – without significant impact on the User.

§ 11. Cookies and Similar Technologies

  1. The Store uses first‑party and third‑party cookies. Where required by PECR, we apply a consent mechanism (cookie banner).
  2. Cookies may be essential (functional – ensuring the site and cart work properly), analytical/statistical, or marketing‑related. Some operate only with your consent.
  3. Cookie management – via browser settings and through our cookie banner/preferences centre.
  4. Examples of cookie purposes: session maintenance, storing preferences, traffic analysis, measuring campaign performance, preventing fraud.

§ 12. Final Provisions

  1. We may update this Policy, including due to changes in law or Store functionality. Significant changes will be communicated on the website.
  2. Contact regarding privacy matters: orders@fabtrade.co.uk.
pixel