Privacy Policy

Scope of This Policy

This policy applies to:

1. Visitors to our Website

2. Customers who place orders with us

3. Individuals who contact us or create an account

4. It should be read together with our Terms & Conditions and Refund & Returns Policy.

​

Personal Data We Collect​

We may collect and process the following categories of personal data:

​

Identity and Contact Data

Name, billing and delivery address, email address, telephone number.

​

Account Data

Login credentials and account preferences (if you create an account).

​

Transaction Data

Details of products purchased, order history, payments, and delivery information.
Payment card details are processed securely by our payment provider (Wix Payments) and are not stored by us.

​

Technical Data

IP address, browser type, device information, operating system, and usage data collected through cookies and similar technologies.

​​

 

Marketing Preferences

1. Your preferences in receiving marketing communications, where you have opted in.

2. We do not intentionally collect special category data (such as health data). Please do not provide such information when contacting us.

​

How We Use Your Personal Data and Lawful Bases

1. We process personal data only where permitted by UK GDPR. The table below explains why we process your data and the lawful basis relied upon.

2. PurposeLawful Basis

3. Processing orders, payments, and deliveriesPerformance of a contract

4. Managing customer accounts and subscriptionsPerformance of a contract

5. Customer service and order enquiriesPerformance of a contract

6. Fraud prevention and record keepingLegal obligation / Legitimate interests

7. Website analytics and performance improvementLegitimate interests

8. Marketing communicationsConsent

9. Compliance with legal and regulatory obligationsLegal obligation

10. Where we rely on legitimate interests, these include operating our business effectively, improving our services, and protecting against fraud, while ensuring minimal impact on your privacy.

​

Marketing Communications

1. We will only send marketing communications where you have given your consent.

2. You may withdraw your consent at any time by:

3. Clicking the unsubscribe link in any marketing email

4. Contacting us at support@erynoq.com

5. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

​

Sharing Your Personal Data

1. We may share personal data with trusted third parties where necessary, including:

2. Wix (website hosting, checkout, and payments)

3. Payment processors (via Wix Payments)

4. Delivery partners (e.g. Royal Mail)

5. Professional advisers (legal, accounting, or compliance)

6. Public authorities, where legally required

7. All third parties are required to process personal data securely and in accordance with data protection law.

8. We do not sell personal data.

​

International Data Transfers

1. Some of our service providers (including Wix) may process personal data outside the UK.

2. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

3. The UK International Data Transfer Agreement (IDTA), or

4. The UK Addendum to the EU Standard Contractual Clauses

5. These safeguards are designed to ensure your personal data receives an equivalent level of protection.

​

Data Retention

1. We retain personal data only for as long as necessary for the purposes set out in this policy:

2. Order and transaction records: up to 6 years (to meet legal and tax obligations)

3. Account data: until you request deletion or after 2 years of inactivity

4. Marketing data: until you withdraw consent

5. Customer service correspondence: as long as necessary to resolve the matter

​

Your Data Protection Rights

1. Under UK GDPR, you have the right to:

2. Request access to your personal data

3. Request correction of inaccurate data

4. Request erasure of your data (where applicable)

5. Request restriction of processing

6. Object to processing

7. Request data portability

8. Withdraw consent at any time (where processing is based on consent)

9. To exercise your rights, contact us at support@erynoq.com.
   We will respond within one month, subject to legal requirements.

10. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

​

Cookies

1. We use cookies and similar technologies to operate and improve the Website.

2. Essential cookies are required for the Website to function

3. Analytics and marketing cookies are used only with your consent

4. For full details, please see our Cookie Policy.

​

Security of Your Data

1. We implement appropriate technical and organisational measures to protect personal data, including secure systems, restricted access, and encryption where appropriate.

2. Despite these measures, no system is completely secure. If you believe your personal data has been compromised, please contact us immediately.

​

Children’s Data

Our Website and products are intended for individuals aged 18 and over.
We do not knowingly collect personal data from children.

​

Data Protection Officer

We are not required to appoint a Data Protection Officer under UK GDPR.

​

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on the Website with an updated effective date.

​

Contact Us

1. If you have questions about this Privacy Policy or how we handle personal data, please contact:

2. Wilco Holding Ltd
   86–90 Paul Street
   London, England, EC2A 4NE
   Email: support@erynoq.com