This policy applies to zyphorahub.com, operated by Zyphora Hub Ltd. We are committed to protecting your personal data in accordance with UK GDPR and the Data Protection Act 2018.
1. Who we are
Data Controller: Zyphora Hub Ltd, registered in England and Wales.
Address: Suite RA01, 195–197 Wood Street, London E17 3NU, United Kingdom
Website: zyphorahub.com
Support email: Info@zyphorahub.com
Phone: +44 790 755 9545
We are not required to appoint a Data Protection Officer (DPO) but you can contact us at the above email for all data-related enquiries.
2. What personal data we collect
When you place an order
- Full name and delivery address
- Email address and phone number
- Payment information (processed securely by Stripe, PayPal, or Klarna — we do not store card details)
- Order history and transaction records
When you create an account
- Name, email address, and password (hashed)
- Saved delivery addresses
- Wishlist and order history
When you browse the site
- IP address, browser type, and device information
- Pages visited, time on site, and referring URL (via cookies and analytics tools)
When you sign up to our newsletter
- Email address only
When you contact us
- Name, email address, and the content of your message
3. How we use your personal data
| Purpose | Data used |
|---|---|
| Processing and fulfilling your order | Name, address, email, phone, payment info |
| Sending order confirmation and dispatch notifications | Email address, order details |
| Handling returns, refunds, and customer service | Order history, contact details |
| Sending marketing emails (with your consent) | Email address, purchase history |
| Improving our website via analytics | Anonymised browsing data |
| Fraud prevention and security | IP address, device data, order details |
| Complying with UK legal obligations (VAT, accounting records) | Name, address, transaction records |
4. Legal basis for processing
Under UK GDPR, we rely on the following lawful bases:
- Contract performance — to process and fulfil your order
- Legal obligation — VAT records, accounting, consumer law compliance
- Legitimate interests — fraud prevention, website security, analytics (where your interests do not override ours)
- Consent — marketing emails and non-essential cookies (you may withdraw consent at any time)
5. Who we share your data with
We do not sell your personal data. We share it only with trusted third parties necessary to operate our business:
| Third party | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | UK/EU/USA (SCCs in place) |
| PayPal | Payment processing | UK/EU/USA (SCCs in place) |
| Klarna | Buy Now, Pay Later | UK/EU |
| WooCommerce / WordPress | Ecommerce platform | UK hosting |
| Mailchimp / Email provider | Newsletter delivery | USA (SCCs in place) |
| Google Analytics | Website analytics (anonymised) | USA (SCCs in place) |
| Royal Mail / courier | Order delivery | UK |
| HMRC | VAT and tax compliance | UK |
Where data is transferred outside the UK, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).
6. Cookies
We use cookies to make our website work and to improve your experience. Please see our Cookie Policy for full details of the cookies we use and how to manage them.
7. How long we keep your data
| Data type | Retention period |
|---|---|
| Order and transaction records | 7 years (HMRC requirement) |
| Customer account data | For the life of your account, plus 2 years after last activity |
| Marketing consent and emails | Until you unsubscribe |
| Website analytics | 26 months (anonymised) |
| Customer service correspondence | 3 years |
8. Your rights under UK GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your data (subject to legal obligations)
- Right to restriction — request we limit how we process your data
- Right to portability — receive your data in a portable format
- Right to object — object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent — withdraw consent at any time where processing is based on consent
To exercise any of these rights, email us at Info@zyphorahub.com. We will respond within one calendar month.
9. Contact us & how to complain
For any questions about this Privacy Policy or how we handle your data, contact us at:
Zyphora Hub Ltd
Email: Info@zyphorahub.com
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Helpline: 0303 123 1113
This policy may be updated from time to time. We will notify you of significant changes by email or by posting a notice on this website. The date at the top of this page shows when it was last revised.