Privacy policy

1. Introduction

Welcome to LlyfrAwel. We are committed to protecting your privacy and handling your personal data with care and respect. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website llyfrawel.com and purchase our products, including notebooks, journals, pens, writing instruments, and file folders. Please read this policy carefully. By using our site, you consent to the data practices described herein.

2. Information We Collect

We collect information that you provide directly to us and information collected automatically.

2.1 Information You Provide

• Contact and Identity Data: Such as your name, shipping address, billing address, and email address when you place an order.
• Transaction and Payment Data: Details of purchases you make. Please note, we do not store full credit card numbers. Payment processing is handled by secure, third-party payment processors.
• Communication Data: If you contact us for customer support via email, we collect your email address and the content of your message.

2.2 Automatically Collected Information

• Technical Data: Including your IP address, browser type, operating system, referring URLs, and device information.
• Usage Data: Information about how you interact with our website, such as pages visited, time spent on pages, and products viewed. This is collected through cookies and similar tracking technologies.

3. How We Use Your Information

We use the collected information for the following legitimate business purposes:

• To process and fulfill your orders, including shipping and customer service.
• To communicate with you about your order, respond to your inquiries, and provide customer support.
• To improve our website, product offerings, and customer experience.
• To prevent fraud, enhance security, and comply with legal obligations.
• With your consent (where required), to send you promotional emails about new products, special offers, or other updates. You may opt-out at any time.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), our processing of your personal data is based on:

• Contract: Processing necessary to fulfill our sales contract with you.
• Legal Obligation: Processing necessary to comply with the law (e.g., tax records).
• Legitimate Interests: Processing for our legitimate business interests, such as improving our services and security, provided these interests are not overridden by your rights.
• Consent: Where we rely on consent for specific purposes (like marketing), you have the right to withdraw it at any time.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your data with trusted third parties only as necessary:

• Service Providers: Such as shipping carriers (e.g., postal services), payment processors, and IT service providers. They are contractually obligated to protect your data.
• Legal Requirements: If required by law, subpoena, or to protect the rights, property, or safety of LlyfrAwel, our customers, or others.
• Business Transfers: In connection with a merger, sale, or acquisition of all or part of our business.

6. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure all such transfers comply with applicable data protection laws, using standard contractual clauses or other approved mechanisms where required.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption (SSL/TLS), secure servers, and access controls. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law (e.g., for tax, accounting, or legal claims). Order information is typically retained for a period of 7 years to comply with financial regulations.

9. Your Rights

Depending on your location, you may have rights under data protection laws, which may include:

• The right to access, correct, or delete your personal data.
• The right to restrict or object to our processing of your data.
• The right to data portability.
• The right to withdraw consent.
• The right to lodge a complaint with a supervisory authority.

To exercise these rights, please contact us at [email protected]. We will respond within a reasonable timeframe as required by law.

10. Cookies and Tracking Technologies

We use cookies to enhance site functionality and analyze site traffic. You can control cookie settings through your browser preferences. Disabling cookies may limit your use of certain website features.

11. Third-Party Links

Our website may contain links to third-party sites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated version will be posted on this page with an updated effective date. We encourage you to review this page regularly.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: