Privacy Policy
Effective Date: 6 July 2026
ELSAMSON LTD (“ELSAMSON”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you visit our website, purchase products, or otherwise interact with us.
This Privacy Policy has been prepared in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where applicable, the EU General Data Protection Regulation (EU GDPR) for customers located within the European Economic Area (EEA).
By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy.
1. Company Information
Data Controller:
ELSAMSON LTD
Company Number: 17322259
Registered Address:
49 Pangbourne Street
Reading
England
RG30 1HS
United Kingdom
Email:
Throughout this Privacy Policy, ELSAMSON LTD acts as the Data Controller for the personal data collected through our website.
2. Scope of this Privacy Policy
This Privacy Policy applies to:
- Visitors to our website.
- Customers purchasing our products.
- Individuals contacting us by email.
- Customers located in the United Kingdom.
- Customers located within Europe.
This Policy applies only to information collected by our website and does not apply to third-party websites linked from our website.
3. Personal Information We Collect
Depending on how you use our website, we may collect the following categories of personal information.
Identity Information
- Full name
- Billing name
- Shipping recipient name
Contact Information
- Email address
- Telephone number (if provided)
- Billing address
- Shipping address
- Country of residence
Order Information
When you place an order, we collect:
- Products purchased
- Order value
- Order history
- Delivery preferences
- Customer notes
- Order reference numbers
Payment Information
Payments are securely processed by third-party payment providers.
We do not store your complete payment card details.
Depending on the payment method selected, your payment information is processed by:
- PayPal
- Amazon Pay
- Our secure credit/debit card payment processor
These providers process payment information in accordance with their own privacy policies and security standards.
Technical Information
When visiting our website, we automatically collect technical information including:
- IP address
- Browser type
- Browser version
- Device type
- Operating system
- Time zone
- Language preferences
- Pages visited
- Time spent on pages
- Referring websites
- Clickstream data
Usage Information
We may collect information about how you interact with our website, including:
- Products viewed
- Products added to cart
- Wishlist items (if applicable)
- Purchase history
- Search queries
- Customer preferences
Communications
If you contact us, we may keep records of:
- Emails
- Customer service requests
- Complaint records
- Refund requests
- Product enquiries
4. How We Collect Your Information
We collect information in several ways.
Information You Provide
You provide information when you:
- Create an account.
- Place an order.
- Subscribe to newsletters.
- Contact customer support.
- Send us an email.
- Leave product reviews.
- Participate in promotions.
Information Collected Automatically
When using our website, information may be collected automatically through:
- Cookies
- Browser technologies
- Server logs
- WooCommerce functionality
- Security monitoring tools
Information Received from Third Parties
We may receive information from trusted service providers including:
- Payment providers
- Shipping providers
- Fraud prevention services
- Analytics providers
- Marketing platforms
5. How We Use Your Information
We use your personal information only where permitted by law.
We may use your information to:
- Process your orders.
- Deliver purchased products.
- Verify payments.
- Prevent fraud.
- Provide customer support.
- Respond to enquiries.
- Improve our website.
- Manage customer accounts.
- Process refunds.
- Comply with legal obligations.
- Maintain business records.
- Resolve disputes.
- Detect security incidents.
- Prevent abuse of our services.
- Send service-related communications.
Where you have provided consent, we may also use your information to send marketing communications regarding new products, offers, and promotions.
You may unsubscribe from marketing emails at any time.
6. Legal Basis for Processing
Under the UK GDPR and EU GDPR, we rely upon the following lawful bases.
Performance of a Contract
We process personal information where necessary to:
- Fulfil customer orders.
- Deliver purchased products.
- Process payments.
- Provide customer support.
- Manage returns.
Legal Obligations
We process information where required to comply with:
- Tax laws
- Accounting requirements
- Consumer protection legislation
- Fraud prevention obligations
- Law enforcement requests
Legitimate Interests
We process personal information where necessary for our legitimate business interests, including:
- Improving our services
- Website security
- Fraud detection
- Business administration
- Customer service
- Internal reporting
- Analytics
We always balance these interests against your rights and freedoms.
Consent
Where required, we rely upon your consent for:
- Marketing emails
- Optional cookies
- Promotional communications
You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
7. WooCommerce Data Processing
Our online store operates using WooCommerce.
WooCommerce stores customer information required to:
- Complete purchases
- Manage orders
- Process refunds
- Maintain customer accounts
- Calculate taxes
- Generate invoices
- Track order status
WooCommerce may store certain information in cookies and databases necessary for the proper functioning of our online store.
8. Payments
To process purchases securely, we use trusted third-party payment providers.
Depending on your chosen payment method, your payment information is processed by:
- PayPal
- Amazon Pay
- Secure credit and debit card payment processors
We do not receive or store your full payment card number, CVV code, or complete banking credentials.
Payment providers may collect information necessary to verify transactions, prevent fraud, comply with financial regulations, and complete payment processing.
These providers act as independent data controllers for payment-related information and process your data according to their own privacy policies.
9. Shipping and Delivery
To deliver your orders, we may share the necessary personal information with trusted shipping and logistics providers.
This information may include:
- Your name
- Delivery address
- Email address (where required)
- Telephone number (where required)
- Order reference
- Delivery instructions
Your information is shared only to the extent necessary to fulfil your order, provide delivery updates, and manage returns or delivery-related enquiries.
For deliveries outside the United Kingdom, your personal information may be transferred to logistics partners operating within the European Economic Area (EEA) or other countries involved in the transportation of your order.
10. Cookies
Our website uses cookies and similar technologies to improve your browsing experience, remember your preferences, analyse website traffic, and provide essential website functionality.
Cookies are small text files stored on your device when you visit a website.
Essential Cookies
These cookies are necessary for the operation of our website and cannot be disabled.
They are used to:
- Keep items in your shopping cart
- Process checkout
- Maintain secure login sessions
- Remember customer preferences
- Prevent fraudulent activity
Without these cookies, certain features of our website may not function correctly.
Analytics Cookies
Analytics cookies help us understand how visitors use our website.
They may collect information such as:
- Pages visited
- Time spent on pages
- Device information
- Browser information
- Navigation paths
- Website performance
This information is generally aggregated and does not directly identify individual users.
Functional Cookies
Functional cookies allow our website to remember your preferences, including:
- Language selection
- Currency settings
- Saved shopping cart
- Customer account preferences
Marketing Cookies
Where applicable and with your consent, marketing cookies may be used to display relevant advertisements and measure advertising effectiveness.
You may withdraw your consent for non-essential cookies at any time through your browser settings or our cookie management tools.
11. Marketing Communications
If you choose to subscribe to our newsletter or promotional communications, we may send information regarding:
- New products
- Product launches
- Promotions
- Discounts
- Seasonal offers
- Company news
We will only send marketing communications where permitted by law or where you have provided your consent.
You may unsubscribe at any time by:
- Clicking the “Unsubscribe” link included in our emails.
- Contacting us directly at elsamson@proton.me.
Opting out of marketing communications will not affect transactional emails relating to your orders.
12. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with our legal obligations.
Retention periods may vary depending on the type of information.
For example:
- Customer account information is retained while your account remains active.
- Order records may be retained for up to six years to comply with UK accounting and tax legislation.
- Customer service communications may be retained where necessary to resolve disputes or improve our services.
- Marketing preferences are retained until you withdraw your consent.
Once personal information is no longer required, it will be securely deleted or anonymised.
13. Sharing Your Information
We do not sell your personal information.
We may share your personal information with trusted third parties where necessary to operate our business, including:
- Payment providers
- Shipping and courier companies
- Website hosting providers
- IT service providers
- Customer support platforms
- Fraud prevention services
- Professional advisers
- Accountants
- Legal advisers
- Government authorities where required by law
All third parties are expected to process personal information securely and only for authorised purposes.
14. International Transfers
As we sell products within the United Kingdom and Europe, your personal information may be transferred outside your country of residence where necessary.
Where personal data is transferred outside the United Kingdom or the European Economic Area, we take appropriate safeguards to ensure that your information receives an adequate level of protection.
Such safeguards may include:
- UK International Data Transfer Agreements (IDTA)
- UK Addendum to the European Commission Standard Contractual Clauses (SCCs)
- European Commission Standard Contractual Clauses
- Transfers to countries recognised as providing an adequate level of data protection
15. Data Security
We take appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, loss, or destruction.
Our security measures may include:
- SSL encryption
- Secure payment processing
- Restricted employee access
- Password protection
- Firewall protection
- Malware monitoring
- Security updates
- Website monitoring
- Backup procedures
Although we take reasonable steps to protect your information, no method of electronic transmission or storage can be guaranteed to be completely secure.
16. Your Rights
If you are located in the United Kingdom or the European Economic Area, you have rights under applicable data protection laws.
These rights may include:
Right of Access
You may request a copy of the personal information we hold about you.
Right to Rectification
You may request correction of inaccurate or incomplete information.
Right to Erasure
You may request deletion of your personal information where permitted by law.
Right to Restrict Processing
You may request that we limit the processing of your information under certain circumstances.
Right to Data Portability
You may request a copy of your personal information in a structured, commonly used, and machine-readable format.
Right to Object
You may object to certain processing activities, including direct marketing.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time.
To exercise any of these rights, please contact us using the details provided below.
We may request proof of identity before responding to your request.
17. Children’s Privacy
Our website is not intended for individuals under the age of 18.
We do not knowingly collect personal information from children.
If you believe that a child has provided personal information through our website, please contact us immediately so that appropriate steps can be taken to remove the information.
18. Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices, content, or security of those websites.
We encourage you to read the privacy policies of any third-party websites that you visit.
19. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, our business practices, or improvements to our services.
When changes are made, the updated version will be published on this page together with a revised Effective Date.
Where required by law, we will notify customers of significant changes.
20. Contact Us
If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact:
ELSAMSON LTD
Company Number: 17322259
49 Pangbourne Street
Reading
England
RG30 1HS
United Kingdom
Email: elsamson@proton.me
We will respond to privacy-related enquiries within the timeframes required by applicable data protection legislation.
21. Complaints
If you believe that we have not handled your personal information in accordance with applicable law, you have the right to lodge a complaint with the relevant supervisory authority.
For individuals in the United Kingdom, this is the Information Commissioner’s Office (ICO).
If you are located within the European Economic Area, you may also contact the data protection authority in your country of residence.