Privacy policy

This Privacy Policy sets out the rules for the processing of personal data obtained through the online shop manufakturo.uk (hereinafter referred to as the "Online Shop").

The owner of the Online Shop and simultaneously the Data Controller is MANUFAKTURO LTD, a company incorporated in England and Wales under Company Number 17188408, with its registered office address at Unit 4 Seaton Park, 36 William Prance Road, Derriford, Plymouth, Devon, United Kingdom, PL6 5WR; email: office@manufakturo.uk (hereinafter referred to as "MANUFAKTURO LTD").

Personal data collected by MANUFAKTURO LTD via the Online Shop is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

MANUFAKTURO LTD takes exceptional care to respect the privacy of Customers visiting the Online Shop.

§ 1 Types of Data Processed, Purposes, and Legal Basis

MANUFAKTURO LTD collects information regarding individuals acting as Consumers (purposes outside their trade or business), sole traders, business partners, and individuals representing corporate entities or legal structures, hereinafter collectively referred to as "Customers".

Customers' personal data is collected in the following cases:

  • Account registration in the Online Shop: in order to create and manage an individual Customer Account. Legal basis: necessity for the performance of a contract for the provision of the Account service (Art. 6(1)(b) UK GDPR);
  • Placing an order in the Online Shop: in order to execute the Sales Contract. Legal basis: necessity for the performance of a Sales Contract (Art. 6(1)(b) UK GDPR);
  • Subscription to the newsletter: in order to provide the commercial information service via electronic means. Legal basis: consent of the data subject to receive the Newsletter service (Art. 6(1)(a) UK GDPR);
  • Using the contact form service in the Online Shop: in order to process and answer the submitted inquiry. Legal basis: necessity for the performance of a contract for the provision of the contact form service (Art. 6(1)(b) UK GDPR);
  • Using the product review service: in order to allow Customers to publish reviews on the website. Legal basis: necessity for the performance of a contract for the provision of the review service (Art. 6(1)(b) UK GDPR).

In the case of Account registration, the Customer provides: an email address. During registration, the Customer independently sets an individual access password. The Customer can modify this password later under the terms described in § 5.

In the case of placing an order, the Customer provides the following data:

  • Email address;
  • Full address details: postcode, town/city, country, street name and house/flat number;
  • First name and surname;
  • Phone number.

In the case of Business Customers / Traders, the data scope is expanded to include:

  • Company name;
  • VAT registration number or corporate tax identifier (if applicable).

In the case of using the Newsletter service, the Customer provides only their email address.

In the case of using the Contact Form, the Customer provides: email address, first name, and phone number.

In the case of using the Review service, the Customer provides only a pseudonym, nickname, or first name.

While using the Online Shop website, additional information may be collected automatically, including: the IP address assigned to the Customer's computer or the external IP address of the internet service provider, domain name, browser type, access time, and operating system type.

Navigation data may also be gathered, including information about links and references the Customer decides to click or other actions taken within the Online Shop. Legal basis: legitimate interest (Art. 6(1)(f) UK GDPR), consisting in facilitating the use of electronic services and improving their functionality.

For the purposes of establishing, exercising, defending, and enforcing legal claims, certain personal data provided by the Customer may be processed, such as: name, surname, and data regarding the use of services, if the claims arise from the manner the Customer uses the services, or other data necessary to prove the existence of a claim or the extent of damage. Legal basis: legitimate interest (Art. 6(1)(f) UK GDPR), consisting in establishing, pursuing, and defending claims before courts, tribunals, and relevant UK state authorities.

Providing personal data to MANUFAKTURO LTD is voluntary but necessary to conclude Sales Contracts or use specific electronic services on the website. Failure to provide the required data in the registration forms prevents Account creation, and failure to provide data during checkout prevents order fulfillment.

§ 2 Data Sharing, Disclosures, and Retention Periods

The Customer's personal data is transferred to third-party service providers utilized by MANUFAKTURO LTD to operate the Online Shop. Depending on contractual arrangements and circumstances, these providers act either as Data Processors (acting strictly under instructions) or as independent Data Controllers (determining the purposes and means of processing themselves):

  • Data Processors: MANUFAKTURO LTD utilizes providers who process data strictly on instructions. These include hosting companies, accounting/bookkeeping services, ERP software operators, CRM systems, marketing automations, and analytics services (e.g., website traffic analysis and ad campaign efficiency);
  • Data Controllers: MANUFAKTURO LTD utilizes providers who act as independent controllers. These include electronic payment gateways, acquiring banks, financial institutions, and leasing providers (handling transactional processes).

International Data Transfers: Since MANUFAKTURO LTD operates within the United Kingdom, any transfer of personal data outside the UK (including to the European Economic Area or third countries) is carried out strictly in accordance with UK GDPR safeguards, utilizing UK Adequacy Regulations or the International Data Transfer Agreement (IDTA) / Standard Contractual Clauses (SCCs) where required.

Customers' personal data is stored for the following durations:

  • Where processing is based on consent, the data is processed until the Customer withdraws consent. Following withdrawal, data may be retained for a period corresponding to the statutory limitation period for legal claims that may be brought by or against MANUFAKTURO LTD. Under the UK Limitation Act 1980, the standard limitation period for breach of contract claims is 6 years;
  • Where processing is based on the performance of a contract, the data is processed as long as necessary to execute the contract, and thereafter for a period of 6 years to satisfy statutory tax, accounting, and legal liability requirements.

If a purchase is made, delivery details are disclosed to designated **Carriers/Courier companies** for logistics purposes.

If the Customer subscribes to the newsletter, MANUFAKTURO LTD will send commercial emails regarding promotions and new arrivals. Subscriptions can be cancelled at any time.

Upon a valid legal request, MANUFAKTURO LTD may disclose personal data to competent UK public authorities, including law enforcement, HM Revenue & Customs (HMRC), the Information Commissioner’s Office (ICO), or courts of law.

§ 3 Cookie Mechanism and IP Addresses

The Online Shop uses small files called cookies, which are stored by MANUFAKTURO LTD on the device used by the visitor, provided the web browser settings allow it. A cookie file typically contains the domain name it originates from, its expiration time, and an individual random identification number. These files help customise products and content to the individual preferences of website users and generate general statistics regarding website visits.

MANUFAKTURO LTD utilizes two types of cookies:

  • Session cookies: deleted from the device memory immediately after the browser session ends or the device is turned off. The mechanism does not extract any personal data or confidential information;
  • Persistent cookies: stored in the device memory until they expire or are manually deleted by the user. The mechanism does not extract any personal data or confidential information.

MANUFAKTURO LTD uses first-party cookies to:

  • Authenticate the Customer within the Online Shop and maintain the active session after logging in, so the Customer does not have to re-enter credentials on every subpage;
  • Analyse traffic, perform audits, and compile anonymous statistics to understand how users interact with the shop, which helps improve its structure and layout.

MANUFAKTURO LTD uses third-party cookies to:

  • Popularise the shop via social media plugins (e.g., facebook.com operated by Meta Platforms Ireland Limited);
  • Display an interactive map showing the location of the business or distribution points via maps.google.com (operated by Google LLC);
  • Collect general and anonymous statistical data via analytical tools such as Google Analytics (operated by Google LLC).

The cookie mechanism is entirely safe for Customers' devices; it cannot transmit viruses, malware, or unwanted software. Customers have the ability to restrict or disable cookie access in their web browsers. If this option is chosen, the website remains accessible, except for functionalities that inherently require cookies (such as maintaining the shopping basket or active login).

Settings can be adjusted directly within popular web browsers, including: Chrome, Safari, Microsoft Edge, Firefox, Opera, and mobile-specific app browsers.

MANUFAKTURO LTD may collect Customers' IP addresses. The IP address is utilized for diagnosing server technical issues, creating statistical analyses (e.g., determining regions with the highest volume of visits), improving shop administration, and for security enforcement against malicious automated traffic or scrapers.

The Online Shop contains links to external websites. MANUFAKTURO LTD is not responsible for the privacy practices, cookie usage, or policies effective on those external domains.

§ 4 Data Subject Rights

Under the UK GDPR, Customers have comprehensive rights regarding their personal data:

  • Right to Withdraw Consent (Art. 7(3) UK GDPR): The Customer has the right to withdraw any consent previously given to MANUFAKTURO LTD. The withdrawal takes effect immediately and does not affect the lawfulness of processing based on consent before its withdrawal. It may, however, prevent the future use of services that strictly require consent;
  • Right to Object (Art. 21 UK GDPR): The Customer has the right to object at any time – on grounds relating to their particular situation – to the processing of their personal data based on legitimate interests (Art. 6(1)(f)), including profiling. Opting out or unsubscribing from marketing emails serves as an explicit objection to data processing for direct marketing purposes;
  • Right to Erasure / "Right to be Forgotten" (Art. 17 UK GDPR): The Customer has the right to request the deletion of all or some personal data if: the data is no longer necessary for the original purposes, consent was withdrawn (where processing relied on consent), an objection to marketing was submitted, data was processed unlawfully, or deletion is required by UK statutory law. MANUFAKTURO LTD may retain specific limited data if processing is necessary to comply with a legal obligation or for the establishment, exercise, or defence of legal claims;
  • Right to Restriction of Processing (Art. 18 UK GDPR): The Customer has the right to request that processing be restricted if: the accuracy of the data is contested, the processing is unlawful but the Customer opposes erasure, data is no longer needed by the controller but is required by the Customer for legal claims, or an objection under Art. 21 is pending verification;
  • Right of Access (Art. 15 UK GDPR): The Customer has the right to obtain confirmation as to whether their personal data is being processed, to receive access to the physical data, and to obtain clear information regarding the purposes, categories of data, recipients, retention criteria, and their statutory rights;
  • Right to Rectification (Art. 16 UK GDPR): The Customer has the right to obtain from the Controller without undue delay the rectification of inaccurate or incomplete personal data;
  • Right to Data Portability (Art. 20 UK GDPR): The Customer has the right to receive their personal data in a structured, commonly used, and machine-readable format, and have it transmitted to another data controller where processing is based on consent or a contract.

To exercise any of these rights, the Customer can contact MANUFAKTURO LTD at office@manufakturo.uk. Requests will be fulfilled or a response provided without undue delay, and in any event within 1 month of receipt.

Customers have the right to lodge a formal complaint regarding data protection compliance with the UK supervisory authority: **The Information Commissioner’s Office (ICO)**, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF (www.ico.org.uk).

§ 5 Security Management and Passwords

MANUFAKTURO LTD provides Customers with a secure, encrypted connection during personal data transmissions and when logging into the Customer Account. The Online Shop utilizes high-grade SSL/TLS certificates issued by leading global authorities in internet security encryption.

If a registered Customer loses their access password, the shop interface allows for the secure generation of a new password. MANUFAKTURO LTD does not send plain-text password reminders. Passwords are stored utilizing secure, one-way cryptographic hashing algorithms, making them unreadable to anyone, including the shop's staff. To reset a password, the Customer must request a reset link via the "Forgot Password" form on the login page.

MANUFAKTURO LTD will never send electronic correspondence or make phone calls requesting the Customer to reveal login credentials, passwords, or sensitive account configurations.

§ 6 Amendments to the Privacy Policy

This Privacy Policy may be amended from time to time. MANUFAKTURO LTD will notify Customers of any significant changes at least 7 days in advance via website announcements or email notifications.

Any questions or inquiries regarding this Privacy Policy should be directed to: office@manufakturo.uk

Date of last modification: 05.01.2026