Privacy policy

This Privacy Policy sets out how EBYEK ("EBYEK", "we", "us" or "our") gathers, uses, and safeguards the personal information of anyone who browses or shops through this online store and its related services (the "Website").

As the organisation responsible for running this Website, we serve as the data controller for all personal information handled through it.

By continuing to use the Website following your review of this Policy, you acknowledge and accept the practices described herein.

 

1. WHO WE ARE

EBYEK
Address: 5 Prince Albert Rd, Wakefield WF1 2FP, UK (Address available only for administrative correspondence and product returns. No physical point of sale at this address.)
Phone: +44 7441 428757
Email: support@ebyek.com
Support Hours: Monday to Friday, 10:00 am – 6:00 pm (GMT)

 

2. WHAT INFORMATION WE COLLECT

The personal data we hold about you varies depending on how you engage with the Website. This may include:

Your Identity & Contact Details Your full name, email address, phone number, and both your shipping and billing addresses.

Order & Payment Records Items purchased, amounts paid, any refunds issued, transaction references, and partial card details. Full card numbers are never held by us — all sensitive financial data is managed exclusively by your payment provider.

Account Information (registered users only) The login credentials you created, along with any saved preferences linked to your profile.

Support Communications The content of any messages, files, or information you share with our team when requesting help.

Technical & Browsing Data Your IP address, browser type, device model, operating system, language settings, pages visited, time spent on site, and data collected via cookies and similar technologies.

 

3. HOW YOUR INFORMATION REACHES US

We collect data through three primary routes:

✔️ Actions you take directly — placing an order, opening an account, signing up to our newsletter, or contacting our support team.
✔️ Automated collection — through cookies, tracking pixels, and other tools built into the Website.
✔️ Third-party partners — including payment processors, courier services, marketing platforms, and analytics providers.

 

4. WHY WE PROCESS YOUR DATA & OUR LEGAL BASIS (ARTICLE 6 GDPR)

Below is an overview of how we use your data and the legal justification for each purpose:

Order Fulfilment & Account Management Processing purchases, coordinating delivery, handling returns, and addressing customer queries. Legal basis: Contract performance (Art. 6(1)(b)) + Legitimate interests (Art. 6(1)(f)).

Payment Security & Fraud Prevention Verifying transactions and identifying unusual activity. Legal basis: Legitimate interests (Art. 6(1)(f)) + Legal obligations (Art. 6(1)(c)).

Site Optimisation Reviewing visitor behaviour to continuously improve the shopping experience. Legal basis: Legitimate interests (Art. 6(1)(f)).

Marketing & Promotional Content Sending offers and personalised communications. Legal basis: Consent where legally required (Art. 6(1)(a)); otherwise legitimate interests (Art. 6(1)(f)). You may opt out at any time.

Regulatory Compliance Satisfying tax, financial reporting, and statutory obligations. Legal basis: Legal obligation (Art. 6(1)(c)).

 

5. COOKIES & TRACKING TECHNOLOGIES

We use cookies on our Website for a number of purposes:

  • Keeping the Website running smoothly and correctly
  • Retaining your settings and preferences between visits
  • Tracking traffic levels and evaluating site performance
  • Showing relevant advertising where you have provided consent

For non-essential cookies, your permission will be requested via a notice when you first land on the Website. You can update your choices at any time through your browser or our cookie management tool.

Turning off certain cookies may restrict some of the functionality available to you.

 

6. WHO ELSE HAS ACCESS TO YOUR DATA

We only share your information where it is strictly necessary to operate our business, and exclusively with the following types of recipient:

  • Shopify (the platform on which our store is built)
  • Payment processors (including Stripe, PayPal, Klarna, and others)
  • Shipping and fulfilment providers
  • Marketing and email communication services
  • Technology partners and analytics tools
  • Legal, tax, and compliance advisors

Your personal data is never sold to third parties — under any circumstances.

 

7. INTERNATIONAL DATA TRANSFERS

Certain service providers we work with, Shopify among them, may process your data in countries outside the UK or EEA. In all such cases, we put appropriate protections in place, including:

  • Standard Contractual Clauses (SCCs) approved by the relevant regulatory bodies
  • Transfers restricted to countries covered by an adequacy decision
  • Additional technical and organisational security measures

Please get in touch if you would like further information about the safeguards we apply.

 

8. HOW LONG WE RETAIN YOUR DATA

We hold your information only for as long as genuinely required — either to deliver our services or to meet a legal obligation.

Standard retention periods are as follows:

  • Purchase and financial records: retained for up to 10 years to comply with tax and accounting requirements
  • Account data: kept until you close your account or it remains inactive for a prolonged period
  • Support communications: stored for up to 3 years from the date the matter was resolved
  • Marketing preferences: held until you unsubscribe or revoke your consent

 

9. YOUR RIGHTS UNDER DATA PROTECTION LAW

Depending on the applicable legal framework, you have the right to:

✔️ Obtain a copy of the personal data we hold about you
✔️ Have any incorrect information amended
✔️ Request the deletion of your data, where permitted by law
✔️ Restrict or challenge how we process your data in certain situations
✔️ Receive your data in a portable, structured format
✔️ Withdraw any consent previously given, at any point

To exercise any of these rights, write to us at support@ebyek.com.

We may need to verify your identity before acting on your request. We will respond in most cases within 30 days, though more involved requests may take a little longer.

If you feel your rights have not been upheld, you may raise a complaint with your national Data Protection Authority.

 

10. CHILDREN

This Website is intended for adults only and is not directed at anyone under 16 years of age. We do not knowingly collect information from minors. If you believe a child has submitted data to us, please notify us immediately and we will remove it without delay.

 

11. AUTOMATED DECISION-MAKING

We do not carry out automated decision-making or profiling that produces legal or similarly significant consequences for individuals, as outlined in Article 22 of the GDPR.

 

12. ABOUT SHOPIFY

Our Website is powered by Shopify's infrastructure, which underpins the core technical operations of our store — from order processing through to security and analytics. For certain platform functions, Shopify acts as an independent data controller in its own right.

We encourage you to review Shopify's Privacy Policy directly to understand how they handle data on their end.

 

13. POLICY UPDATES

This Policy is reviewed on a regular basis and may be updated to reflect changes in our practices or legal obligations. The most current version will always be posted here with a clear date. For material changes, we will notify you as required under applicable law.

 

14. CONTACT US

Any questions about this Policy or the way we manage your personal data are always welcome:

EBYEK
Address: 5 Prince Albert Rd, Wakefield WF1 2FP, UK
Phone: +44 7441 428757
Email: support@ebyek.com
Support Hours: Monday to Friday, 10:00 am – 6:00 pm (GMT)

We do our best to reply within 24–48 hours.