Privacy Policy
Privacy Policy
Who We Are
This policy describes how Chamkeli (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from www.chamkeli.co.uk (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For the purposes of this policy, “you” and “your” refer to you as the user of our services, whether you are a customer, a website visitor, or another individual whose personal data we collect in accordance with this policy.
What This Policy Covers
This policy explains what personal data we collect, why we collect it, our lawful bases, how long we keep it, who we share it with, your rights, and how to contact us or the ICO. We aim to provide a concise, transparent and accessible notice that includes the information required by Articles 12–14 UK GDPR.
The Data We Collect
- Identity & contact data: name, email, phone, billing and delivery addresses.
- Order & transaction data: purchased items, order numbers, payment method, billing status.
- Account & preference data: account login detail, saved addresses, wishlists, and marketing preferences.
- Customer support data: Information you include when sending us messages.
- Technical & usage data: IP address, device identifiers, browser, pages viewed, referring URLs, approximate location, cookie IDs.
- Marketing & communications data: consents, opt-outs, campaign engagement.
Why We Use Your Data And Our Lawful Bases
- Purchases & fulfilment (Contract): process orders, take payment, deliver items, send essential service emails.
- Customer service (Legitimate interests / Contract): respond to queries, complaints
- Account management (Contract / Legitimate interests): create/maintain your account, authentication, security.
- Fraud prevention & security (Legitimate interests / Legal obligation): preventing misuse, chargeback investigation, site security.
- Analytics & site performance (Consent for non-essential cookies under PECR): understand usage, improve site, detect errors.
- Direct marketing (Consent or soft opt-in under PECR): email/SMS offers and news; opt-out any time.
- Legal & compliance (Legal obligation): consumer rights, regulatory requests.
Where We Get Your Data
- Directly from you: website checkout, account creation, customer service, events, social media messages.
- Automatically: through cookies and similar technologies (see Cookies section).
- From third parties: payment providers, fraud-prevention services, and (if you authorise) social sign-in.
Sharing Your Data
We share data with trusted service providers and processors for contract fulfillment purposes, legitimate purposes and other reasons subject to this policy. This includes:
- Payment processors
- Ecommerce/hosting & IT management
- Delivery & logistics partners
- Marketing & analytics
We remain responsible for your data. Our service providers process personal data on our behalf and in accordance with our instructions, contractual obligations, and their own applicable privacy notices.
Cookies And Similar Technologies
- We use cookies and similar technologies to run our site, keep it secure, remember your preferences, and (with your consent) measure performance and personalise marketing.
- Under PECR, non-essential cookies require active consent. Essential cookies (e.g., basket, checkout, security) don’t require consent.
- You can manage your choices anytime via our cookie banner and [Cookie Settings] link.
- We will align our banner and policy with evolving ICO guidance and UK reforms regarding low-risk cookies/exemptions.
Third Party Websites and Links
Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.
Children’s Data
The Services are not intended to be used by children, and we do not knowingly collect personal data relating to children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us to request that it be deleted.
As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) personal information of individuals under 16 years of age.
Marketing
- Email/SMS: We’ll only send marketing with your consent or under PECR’s soft opt-in for similar products after a purchase; opt out any time via each message or by contacting us.
- Social media ads: We may use aggregated audience tools; where they involve cookies or tracking, we rely on your cookie choices.
Security
Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” In addition, any information you send to us may not be secure while in transit. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.
How Long We Keep Your Data (Retention)
How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies. We review retention periodically and securely delete or anonymise data when no longer needed.
Your Rights
Depending on where you live, you may have some or all the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.
- Right to Access / Know: You may have a right to request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.
- Right to Delete: You may have a right to request that we delete personal information we maintain about you.
- Right to Correct: You may have a right to request that we correct inaccurate personal information we maintain about you.
- Right of Portability: You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
- Right to Opt out of Sale or Sharing or Targeted Advertising: You may have a right to direct us not to "sell" or "share" your personal information or to opt out of the processing of your personal information for purposes considered to be "targeted advertising", as defined in applicable privacy laws. Please note that if you visit our Site with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out of the "sale" or "sharing" of information for the device and browser that you use to visit the Site.
- Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information.
- Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent.
- Appeal: You may have a right to appeal our decision if we decline to process your request. You can do so by replying directly to our denial.
- Managing Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.
- You may exercise any of these rights where indicated on our Site or by contacting us using the contact details provided below.
- We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to the request. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorised them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.
Complaints
If you have complaints about how we process your personal information, please contact us using the contact details provided and we will try to resolve them. If you are not satisfied with our response, you can contact the Information Commissioner’s Office (ICO) | Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
International Users
Please note that we may transfer, store and process your personal information outside the country you live in. Your personal information is also processed by staff and third party service providers and partners in these countries.
If we transfer your personal information out of Europe, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.
Changes to this policy
We may update this policy to reflect legal, technical or business changes, especially as the ICO updates guidance. We will post the latest version and change the “Last updated” date.
Contact
Should you have any questions about this policy, please contact us at enquiries@chamkeli.co.uk.
For the purpose of applicable data protection laws and if not explicitly stated otherwise, we are the data controller of your personal information.
Who We Are
This policy describes how Chamkeli (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from www.chamkeli.co.uk (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For the purposes of this policy, “you” and “your” refer to you as the user of our services, whether you are a customer, a website visitor, or another individual whose personal data we collect in accordance with this policy.
What This Policy Covers
This policy explains what personal data we collect, why we collect it, our lawful bases, how long we keep it, who we share it with, your rights, and how to contact us or the ICO. We aim to provide a concise, transparent and accessible notice that includes the information required by Articles 12–14 UK GDPR.
The Data We Collect
- Identity & contact data: name, email, phone, billing and delivery addresses.
- Order & transaction data: purchased items, order numbers, payment method, billing status.
- Account & preference data: account login detail, saved addresses, wishlists, and marketing preferences.
- Customer support data: Information you include when sending us messages.
- Technical & usage data: IP address, device identifiers, browser, pages viewed, referring URLs, approximate location, cookie IDs.
- Marketing & communications data: consents, opt-outs, campaign engagement.
Why We Use Your Data And Our Lawful Bases
- Purchases & fulfilment (Contract): process orders, take payment, deliver items, send essential service emails.
- Customer service (Legitimate interests / Contract): respond to queries, complaints
- Account management (Contract / Legitimate interests): create/maintain your account, authentication, security.
- Fraud prevention & security (Legitimate interests / Legal obligation): preventing misuse, chargeback investigation, site security.
- Analytics & site performance (Consent for non-essential cookies under PECR): understand usage, improve site, detect errors.
- Direct marketing (Consent or soft opt-in under PECR): email/SMS offers and news; opt-out any time.
- Legal & compliance (Legal obligation): consumer rights, regulatory requests.
Where We Get Your Data
- Directly from you: website checkout, account creation, customer service, events, social media messages.
- Automatically: through cookies and similar technologies (see Cookies section).
- From third parties: payment providers, fraud-prevention services, and (if you authorise) social sign-in.
Sharing Your Data
We share data with trusted service providers and processors for contract fulfillment purposes, legitimate purposes and other reasons subject to this policy. This includes:
- Payment processors
- Ecommerce/hosting & IT management
- Delivery & logistics partners
- Marketing & analytics
We remain responsible for your data. Our service providers process personal data on our behalf and in accordance with our instructions, contractual obligations, and their own applicable privacy notices.
Cookies And Similar Technologies
- We use cookies and similar technologies to run our site, keep it secure, remember your preferences, and (with your consent) measure performance and personalise marketing.
- Under PECR, non-essential cookies require active consent. Essential cookies (e.g., basket, checkout, security) don’t require consent.
- You can manage your choices anytime via our cookie banner and [Cookie Settings] link.
- We will align our banner and policy with evolving ICO guidance and UK reforms regarding low-risk cookies/exemptions.
Third Party Websites and Links
Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.
Children’s Data
The Services are not intended to be used by children, and we do not knowingly collect personal data relating to children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us to request that it be deleted.
As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) personal information of individuals under 16 years of age.
Marketing
- Email/SMS: We’ll only send marketing with your consent or under PECR’s soft opt-in for similar products after a purchase; opt out any time via each message or by contacting us.
- Social media ads: We may use aggregated audience tools; where they involve cookies or tracking, we rely on your cookie choices.
Security
Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” In addition, any information you send to us may not be secure while in transit. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.
How Long We Keep Your Data (Retention)
How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies. We review retention periodically and securely delete or anonymise data when no longer needed.
Your Rights
Depending on where you live, you may have some or all the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.
- Right to Access / Know: You may have a right to request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.
- Right to Delete: You may have a right to request that we delete personal information we maintain about you.
- Right to Correct: You may have a right to request that we correct inaccurate personal information we maintain about you.
- Right of Portability: You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
- Right to Opt out of Sale or Sharing or Targeted Advertising: You may have a right to direct us not to "sell" or "share" your personal information or to opt out of the processing of your personal information for purposes considered to be "targeted advertising", as defined in applicable privacy laws. Please note that if you visit our Site with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out of the "sale" or "sharing" of information for the device and browser that you use to visit the Site.
- Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information.
- Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent.
- Appeal: You may have a right to appeal our decision if we decline to process your request. You can do so by replying directly to our denial.
- Managing Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.
- You may exercise any of these rights where indicated on our Site or by contacting us using the contact details provided below.
- We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to the request. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorised them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.
Complaints
If you have complaints about how we process your personal information, please contact us using the contact details provided and we will try to resolve them. If you are not satisfied with our response, you can contact the Information Commissioner’s Office (ICO) | Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
International Users
Please note that we may transfer, store and process your personal information outside the country you live in. Your personal information is also processed by staff and third party service providers and partners in these countries.
If we transfer your personal information out of Europe, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.
Changes to this policy
We may update this policy to reflect legal, technical or business changes, especially as the ICO updates guidance. We will post the latest version and change the “Last updated” date.
Contact
Should you have any questions about this policy, please contact us at enquiries@chamkeli.co.uk.
For the purpose of applicable data protection laws and if not explicitly stated otherwise, we are the data controller of your personal information.
