Privacy Policy

This website is operated by BRITAROMA LTD, the controller responsible for the personal information described in this Privacy Policy.

This policy explains how we collect, use and protect personal information when you browse our website, place an order, subscribe to our newsletter or contact us.

Reading or using this website does not, by itself, constitute consent to marketing or optional cookies.

Personal Information We Collect

When you visit the Site, we automatically collect information about your device, including your web browser, IP address, time zone, and some of the cookies installed on your device. As you browse, we collect details about the individual pages or products you view, the websites or search terms that referred you to us, and how you interact with the Site (“Device Information”).

We also collect personal data you voluntarily provide, such as when you place an order, create an account, subscribe to our newsletter, or contact us. This may include your name, billing and delivery address, email address, phone number, and payment‑related details (processed securely by our payment providers).

Why We Process Your Data

We only process the personal data necessary to:

• Operate and maintain the Site

• Process and deliver your orders

• Communicate with you (e.g., order updates or support)

• Send marketing communications where you have consented

• Improve our products, services, and user experience

• Comply with our legal and regulatory obligations
  Device Information is used primarily for security, fraud detection, and statistical analysis to understand how visitors use our Site (in anonymous, aggregated form).
  You can browse the Site without identifying yourself. However, certain features (such as placing an order or receiving our newsletter) require personal information. Without it, those features may not be available.
  For questions about what information is required, please contact us at info@britaroma.uk.
  

  
  Who We Share Your Information With
  

  We share personal information with service providers where necessary to operate our website, process payments and deliver your orders.

  Stripe processes payments for purchases made through our website. It receives payment and transaction information needed to process payments, help prevent fraud and meet its legal obligations. For more information, see Stripe’s Privacy Policy.

  Royal Mail receives your name, delivery address and any other information needed to deliver your order. This may include contact details where required for delivery notifications or tracking.

  Our website hosting provider processes information needed to operate and maintain the website.

  We may also share information with authorities where required by law.

  
  How Long We Keep Your Information
  

  We keep personal information only for as long as necessary for the purposes described in this policy.

  For order and transaction records, we consider applicable accounting and tax requirements, the need to handle returns or complaints, and the establishment, exercise or defence of legal claims.

  For enquiries and customer support correspondence, we consider how long the information is needed to resolve your enquiry and any related follow-up.

  When personal information is no longer needed, we delete it securely or anonymise it.

  Legal Basis for Processing

  
  We process your personal data to fulfil a contract with you (for example, when you place an order), or where it is necessary for our legitimate business interests, such as improving our services and communicating with customers.
  Your data may be transferred and processed outside the UK and EEA (for example, in Canada or the United States). When this occurs, we take appropriate safeguards to protect your personal information in accordance with UK data protection laws.

  Your Rights

  
  If you are based in the UK or EU, you have the right to:

• Be informed about how we use your data

• Access the personal data we hold about you

• Request correction or deletion of your data

• Restrict or object to processing

• Request data portability

• Object to automated decision-making and profiling
  To exercise any of these rights, contact us using the details below.

  Information Security

  
  We store personal data on secure servers and use industry‑standard technical and organisational measures to protect it from unauthorised access, loss, misuse, or alteration. While we take all reasonable precautions, no online system or storage method can be entirely risk‑free.

  Links to Other Websites

  
  Our Site may contain links to third‑party websites. We are not responsible for their privacy practices and encourage you to read their privacy policies before providing any personal data.

  
  

  Legal Disclosure

  
  We may disclose your personal data if required by law, or if we believe in good faith that such disclosure is necessary to comply with legal obligations, protect our rights, ensure your safety or the safety of others, investigate fraud, or respond to lawful requests from authorities.

  Contact Us

  
  If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at:
  Email: info@britaroma.uk
  Company: BRITAROMA LTD
  Website: https://britaroma.uk
  Effective Date: April 2026