Privacy policy
PRIVACY POLICY
At a Glance
We respect your privacy. Here’s what you need to know, simply:
Who we are: Digibuyr UK.
What we collect: Contact details, payment details, account information, purchase history, marketing preferences, and technical data (cookies, IP, browser).
Why we use it: To process your orders, run our website, improve our services, send marketing (if you agree), and keep things secure.
How long we keep it: Up to 6 years, unless law requires longer.
Who we share it with: Shopify (our store platform), payment providers, delivery services, and trusted third-party partners like Google and Meta for analytics/ads.
Your rights: You can access, correct, delete, or restrict your data. You can also opt out of marketing at any time.
1 Who We Are
Digibuyr (“we”, “our”, “us”) is a reference to Digibuyr. We are the data controller of your personal information under the UK GDPR.
2 Personal Information We Collect
We collect the following types of personal information when you use our services:
Contact details: name, billing/shipping address, phone number, email.
Financial details: payment card details (processed securely by Shopify/third-party processors), transaction history.
Account details: username, password, security preferences.
Order & transaction history: items viewed, purchased, returned, or cancelled.
Communications: messages sent to customer support.
Technical data: device, browser, IP address, cookies, analytics data.
Marketing preferences: newsletter sign-ups, opt-in choices.
We do not collect special category/sensitive data (e.g. health, biometrics, religion).
3 How We Collect Data
Directly from you when you create an account, place an order, or contact us.
Automatically through cookies and analytics when you use our website.
From third parties (Shopify, payment providers, delivery companies, advertising platforms).
4 How We Use Your Personal Information
We only process your information where we have a lawful basis under GDPR:
Contract: to process orders, take payment, deliver products, and provide support.
Consent: for email/SMS marketing and cookies where required.
Legal obligation: to meet tax, accounting, and regulatory requirements.
Legitimate interests: to improve our website, personalise ads, prevent fraud, and protect security.
5 Marketing & Communications
We may send you marketing emails, SMS, or postal offers if you’ve opted in or if we rely on legitimate interests.
You can opt out at any time via unsubscribe links or by contacting us.
We may use social media advertising (e.g. Facebook Pixel, Google Ads) to show you relevant promotions.
6 Cookies & Tracking
We use cookies and similar technologies for the following:
Essential site functions (shopping cart, checkout).
Analytics (Shopify, Google Analytics).
Advertising & retargeting (Facebook Pixel, Google Ads).
You can manage or disable cookies via your browser settings. Some cookies are essential and cannot be disabled if you want to use the site.
7 Data Retention and Duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.
Transactional and order-related records may be retained for up to 6 years to comply with UK tax and accounting obligations.
8 Sharing Your Personal Information
We may share data with 3rd parties including the following:
Shopify (our website host and e-commerce provider).
Payment processors (to handle payments securely).
Delivery providers (to ship your orders).
Trusted service providers (IT, analytics, marketing platforms like Google and Meta).
Legal authorities where required by law.
Business transfers (if we merge, sell, or restructure).
9 Your Rights
You have the right to:
Access your data.
Correct inaccuracies.
Request deletion.
Restrict or object to processing.
Data portability (receive your data in a structured format).
Withdraw consent (where processing is based on consent).
To exercise these rights just email us . We may need to verify your identity before actioning your request.
10 International Data Transfers
As Shopify and some partners are based outside the UK/EU (e.g. US, Canada), your data may be transferred internationally. Where this happens, we rely on Standard Contractual Clauses (SCCs) or other safeguards recognised under UK GDPR.
11 Security
We use technical and organisational measures to protect your data. No system is 100% secure, but we work with Shopify and trusted partners to safeguard your information.
12 Children’s Data
Our services are not intended for children under 18. We do not knowingly collect their data. If you believe a child has given us personal data, please contact us to delete it.
13 Complaints
If you have a concern or complaint about how we handle your data, please contact us below.Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority. For the EEA, you can find a list of the responsible data protection supervisory authorities at: https://edpb.europa.eu/about-edpb/about-edpb/members
14 Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website, with the date shown at the top.
15 Contact
For any questions or to exercise your data rights, contact:
Digibuyr
Email: hello@digibuyr.co
Where Shopify processes your personal data only on our behalf (e.g. hosting the store, enabling checkout, processing payments, storing orders), we remain the data controller, and Shopify acts as our data processor.
Where Shopify processes your personal data for its own purposes (e.g. improving its services, fraud prevention across all merchants, aggregated analytics, or targeted advertising features), Shopify acts as a separate data controller. In those cases, Shopify is responsible