Privacy notice

01Who we are

Anubys ("we", "us") is the data controller for the personal information described here. Company number [company number], registered office [registered office address]. Questions, or any request about your data, go to [support@anubys.co.uk].

02What we collect and why

When you order: your name, delivery and billing address, email, phone number and what you bought. We need these to take the order, ship it and keep the accounting records the law requires. Lawful basis: performance of our contract with you, and legal obligation for the tax records.

When you pay: nothing. Card details go straight to Stripe and are never held by us. We see the last four digits and whether the payment succeeded.

When you contact us: the message and anything in it, so we can answer and so we have a record if the same issue comes back. Lawful basis: our legitimate interest in running a support function.

When you use the site: pages viewed and basic device information, to keep the site working and see what is broken. Lawful basis: consent, where consent is required for the cookie involved.

If you subscribe: your email address, until you unsubscribe. Lawful basis: consent.

03Returns, exchanges and warranty claims

This section matters, so it gets its own heading rather than a line buried in a list.

We offer free size exchanges, a 60-day returns window and a lifetime warranty. These are voluntary promises that cost us money, and a small number of people abuse schemes like them. To keep offering them we keep a record of:

• every return, exchange and warranty claim linked to your orders, including the reason given and the condition the item arrived in;
• the number of free exchanges you have used, and when;
• notes made by the person who handled the case;
• where relevant, the delivery address used, so that repeated claims from the same household are visible even across different accounts.

We use this for two things and nothing else: processing the return or claim in front of us, and identifying patterns that suggest the goodwill part of the policy is being abused. Lawful basis: our legitimate interests in preventing fraud and abuse, and in keeping a generous returns policy viable for the customers who use it as intended. We have weighed this against your interests and consider it proportionate because the data is limited to your own transactions with us, it is not shared for marketing, and the only consequence is the possible withdrawal of a free postage label we were never obliged to offer.

No decision here is made by automated means. If we withdraw the free postage element, a person has reviewed the case and we will tell you in writing, with the reason, so that you can put your side of it. Your statutory rights are never affected by any of this.

We keep return and claim records for 24 months from the date of the claim, except where a longer period is needed for the warranty itself, for a dispute, or for tax records, which we keep for six years as HMRC requires.

04Who we share it with

Only the people who have to see it to do their job:

• Stripe, to take the payment and handle any refund or chargeback;
• our couriers, to deliver the parcel and carry the return label;
• our email provider, to send order confirmations and, if you asked for it, anything else;
• our hosting and analytics providers, who process site data on our instructions;
• professional advisers and authorities, where the law requires it.

We never sell your personal information, and we do not share it for anyone else’s marketing. Where a provider processes data outside the UK we rely on the UK International Data Transfer Addendum or an adequacy decision.

05How long we keep it

• Order and payment records: six years after the end of the tax year, because HMRC requires it.
• Return, exchange and warranty records: as set out above.
• Support emails: three years from the last message in the thread.
• Marketing consent: until you withdraw it, and a suppression record afterwards so that we do not email you again by accident.
• Site analytics: 14 months.

06Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or send it to someone else. You can object to processing we do on the basis of legitimate interests, including the returns monitoring described above, and we will stop unless we can show compelling grounds that override your objection. You can withdraw marketing consent at any time.

Email [support@anubys.co.uk] and we will respond within one month. There is no charge.

If you are not happy with how we handle it you can complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113. We would rather you came to us first, but it is your right either way.

07Cookies

Essential cookies keep your basket and your checkout session working, and cannot be turned off without breaking the site. Anything else, including analytics, runs only with your consent, which you can change or withdraw at any time from the cookie settings link in the footer.

08Changes

If we change this notice we will update the date at the top. Where a change materially affects how we use information we already hold, we will tell you directly rather than rely on you noticing.