1. Who We Are
This website (https://g-12.co.uk) is owned and operated by Q&Y International Ltd (“we”, “us”, or “our”). For the UK General Data Protection Regulation (UK GDPR), we are the Data Controller responsible for your personal data.
- Company Registration: 07542194 (Registered in England & Wales)
- VAT Registration Number: GB107250255
- Registered Address: The Oak House, Coronation Road, Cressex Business Park, High Wycombe, Buckinghamshire, HP12 3RP, United Kingdom
- Email: [email protected]
- Telephone: 03333 110 888
2. What Personal Data We Collect & Why
- Orders & Checkout: When you purchase products through our website, we collect necessary transactional data including your name, delivery address, billing address, email address, phone number, and payment information. This information is required to process your order, arrange delivery, and fulfil our legal and tax accounting obligations.
- Comments: When visitors leave comments on the site, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to aid in spam detection. An anonymised string created from your email address (a hash) may be provided to the Gravatar service to verify usage. The Gravatar privacy policy is available at automattic.com/privacy/. Upon comment approval, your profile picture is visible to the public alongside your comment.
- Media: If you upload images to the website, avoid including embedded location data (EXIF GPS). Visitors to the website can download and extract location details from uploaded images.
- Contact Forms & Queries: If you contact us via email or customer service forms, we process your contact details and message contents to handle your enquiry under our legitimate business interests.
3. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contractual Necessity: Processing required to fulfil your order and deliver goods.
- Legal Obligation: Retaining records to comply with UK tax, VAT, and financial regulations.
- Legitimate Interests: Fraud prevention, website security, spam detection, and operational updates.
- Consent: Where you explicitly opt-in to marketing communications or optional cookies.
4. Cookies
- Comment Cookies: If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies for convenience so you do not have to re-fill your details. These cookies last for one year.
- Account & Login Cookies: If you visit our login page, a temporary cookie is set to verify if your browser accepts cookies. This contains no personal data and expires when you close your browser. When logging in, cookies are set to save your login details and screen preferences. Login cookies last two days; screen options cookies last one year. Selecting “Remember Me” keeps your login active for two weeks. Logging out removes all login cookies.
- Content Editing: Editing or publishing an article stores an additional cookie in your browser containing no personal data, simply indicating the post ID of the article edited. It expires after 1 day.
5. How We Share Your Data
We do not sell or rent your personal data to third parties. We share data strictly with trusted service providers necessary to operate our business:
- Payment Gateways: Payment transactions (such as PayPal) process payment credentials securely. Relevant transaction data is shared only to the extent necessary for processing payments, issuing refunds, and managing queries.
- Couriers & Freight Handlers: Delivery details (name, address, telephone number) are shared with logistics partners to deliver your purchases.
- Security Services: Visitor comments may be checked through an automated spam detection service. Password reset requests will include your IP address in the reset email.
6. How Long We Retain Your Data
- Order Records: Customer order details, invoices, and payment records are retained for up to 7 years to meet UK statutory accounting and tax regulations.
- Comments: Comments and associated metadata are retained indefinitely to recognise and approve follow-up comments automatically.
- User Profiles: For users registered on our website, we store the personal information provided in their user profile. All users can view, edit, or delete their personal information at any time (username cannot be changed). Website administrators can also view and edit that information.
7. Your Rights Under UK GDPR
Under UK data protection law, you possess rights including:
- Right of Access: Request copies of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete information.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where retention is no longer legally required.
- Right to Restrict or Object: Object to or restrict how we process your personal data.
- Right to Data Portability: Request transfer of your data to another organisation or to you.
To exercise any of these rights, please contact us at [email protected].
8. How to Lodge a Complaint
If you have concerns regarding our data handling, don’t hesitate to get in touch with us directly so we can resolve the issue. You also have the right to lodge a formal complaint with the UK data protection supervisory authority:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
Helpline: 0303 123 1113
