Privacy Policy – Global Attraction UK

This Privacy Policy explains how Global Attraction UK (“we”, “us”) collects, uses and protects your personal information when you use our website and buy from us. We are the data controller for the personal data described here.

Information we collect

Information you give us — name, billing and delivery address, email address, telephone number and order details when you place an order or create an account.
Payment information — card payments are processed by our payment provider. We do not store your full card details on our servers.
Information collected automatically — IP address, browser type, device information and pages visited, collected through cookies and similar technologies.

How we use your information

To process and deliver your order and provide customer support.
To manage your account and order history.
To send order confirmations, dispatch notices and service messages.
To send marketing communications where you have consented, which you can withdraw at any time.
To detect and prevent fraud, and to meet our legal and accounting obligations.

Legal bases for processing

We process your data to perform our contract with you (fulfilling orders), to comply with legal obligations (tax and accounting records), on the basis of your consent (marketing and non-essential cookies), and for our legitimate interests (improving our service and preventing fraud).

Sharing your information

We share personal data only where necessary: with delivery partners to deliver your order, with payment providers to take payment, with IT and hosting providers who support this website, and with professional advisers or authorities where the law requires it. We do not sell your personal data.

How long we keep it

Order and transaction records are kept for six years to meet UK tax and accounting requirements. Marketing preferences are kept until you unsubscribe. Account data is kept while your account remains open.

Your rights

Under UK data protection law you have the right to access your personal data, to have inaccurate data corrected, to request erasure, to restrict or object to processing, and to data portability. To exercise any of these rights, contact us using the details below.

If you are unhappy with how we have handled your data you may complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Security

We use appropriate technical and organisational measures, including encryption in transit, to protect your personal data. No transmission over the internet is completely secure, but we take reasonable steps to safeguard your information.