Privacy Policy

1. Who we are

TAVROS is a trading name operated by Wojciech Pasierb, a sole trader in the United Kingdom.

Data controller: Wojciech Pasierb trading as TAVROS.

Business address: TAVROS, 58 Peregrine Road, Ilford, IG6 3SZ, United Kingdom.

Email: hello@tavros.uk

Website: tavros.uk

This Privacy Policy explains how we collect, use, share and protect personal information when you visit our website, create an account, place an order, contact us, subscribe to marketing, request a return or exchange, or otherwise interact with TAVROS.

2. Personal information we collect

We may collect the following categories of personal information:

• Identity and contact information — name, delivery and billing address, email address, optional telephone number and optional company name.
• Order and transaction information — products ordered, size and colour, order number, amount paid, discounts, delivery method, returns, refunds, exchanges and Store Credit information.
• Account information — account identifiers, login and security information, order history and account preferences.
• Payment information — payment status, transaction references and limited payment-related information supplied by our payment provider. Card payments are processed by Stripe. TAVROS does not need to receive or store your full card number, CVV or PIN.
• Delivery information — tracking events, delivery status and, where provided by the carrier, delivery evidence such as Proof of Delivery.
• Communications — emails, customer-service enquiries, complaints, return requests and other messages you send to us.
• Technical and security information — IP address, browser/device information, timestamps, security logs, fraud or risk indicators and information needed to protect the website and transactions.
• Cookie and preference information — cookie choices and information collected through cookies or similar technologies, where applicable.
• Marketing information — newsletter subscription status, consent records, unsubscribe status and marketing preferences.

3. Where we get personal information from

We normally collect personal information directly from you when you browse the website, create an account, place an order, contact us or subscribe to marketing.

We may also receive relevant information from service providers involved in your transaction, including Stripe for payment processing and Royal Mail for delivery and tracking.

If you create an account using the same email address as a previous guest order, we may securely link eligible previous orders to that account.

We do not buy personal information for email marketing and we do not sell your personal information.

4. Why we use your information and our lawful bases

We only use personal information where we have a lawful basis under UK data protection law.

• Orders and fulfilment — to process purchases, take payment, dispatch goods, provide order updates, handle changes, returns, exchanges and refunds. Lawful basis: contract.
• Customer service and complaints — to answer enquiries, investigate problems and resolve complaints. Lawful basis: contract and/or our legitimate interests in providing customer support and managing our business.
• Payments, refunds and financial records — to process payments and refunds and keep required accounting and tax records. Lawful basis: contract and legal obligation.
• Fraud prevention, security and chargebacks — to protect customers, TAVROS and payment systems, investigate suspicious activity and respond to payment disputes. Lawful basis: our legitimate interests in preventing fraud, protecting our business and establishing or defending legal claims.
• Accounts and Store Credit — to provide account features, order history and Store Credit functionality. Lawful basis: contract and/or legitimate interests in providing requested account services.
• Transactional communications — to send information needed for an order, delivery, return, refund, account security or other service request. Lawful basis: contract, legal obligation and/or legitimate interests, depending on the message.
• Email marketing — to send newsletters, offers or product news only where you have chosen to receive them. Lawful basis: consent.
• Cookies, analytics and advertising — non-essential cookies or similar technologies used for analytics, personalisation or advertising are used only where the required consent has been obtained. Strictly necessary technologies may be used without consent where the law permits.
• Website operation and improvement — to maintain, secure, troubleshoot and improve tavros.uk. Lawful basis: our legitimate interests, except where consent is required for a particular technology.

5. Information needed to place an order

To complete an order, we need certain information such as your name, delivery address, email address and payment information. If you do not provide information that is necessary to form or perform the contract, we may be unable to accept or fulfil your order.

A telephone number is optional unless a specific delivery or service feature clearly requires it.

Providing an email address at checkout does not subscribe you to marketing.

6. Email marketing

Marketing subscription is voluntary and separate from checkout.

TAVROS uses an opt-in process for newsletter marketing. Where double opt-in is enabled, you must also confirm your subscription using the confirmation message sent to you.

You can unsubscribe at any time using the unsubscribe link in a marketing email or by contacting hello@tavros.uk.

Unsubscribing from marketing does not stop transactional or service emails that are necessary for orders, refunds, account security or other requested services.

We may keep a minimal suppression record after you unsubscribe so that we can respect your choice and avoid sending marketing to you again unless you later opt in.

7. Cookies and similar technologies

We use cookies and similar technologies for functions such as keeping the website secure, remembering basket or session information and storing privacy preferences.

Non-essential analytics, advertising or marketing cookies and pixels are not activated before the required consent is obtained.

You can manage non-essential choices through the cookie banner or Cookie Settings where available.

More detailed information about individual cookies, purposes and retention periods is provided in our separate Cookie Policy.

8. Who we share personal information with

We share personal information only where it is reasonably necessary for the purposes described in this policy. Recipients may include:

• Stripe and other payment-related service providers used to process payments, refunds, fraud checks and payment disputes.
• Royal Mail and other delivery or fulfilment providers used to deliver orders and manage delivery issues.
• Website hosting, infrastructure, security, authentication and technical service providers.
• Email and customer-communication providers used to send transactional or marketing messages.
• Analytics or advertising providers, but only where the relevant non-essential technologies have been lawfully enabled.
• Professional advisers, insurers, banks, payment providers, regulators, courts, law-enforcement bodies or public authorities where disclosure is necessary and lawful.

We do not sell personal information to advertisers or other third parties.

9. International transfers

Some service providers may process personal information outside the United Kingdom.

Where a restricted international transfer is made, we take steps required by UK data protection law, such as relying on UK adequacy regulations or using appropriate safeguards (for example, an approved UK international data transfer mechanism) together with any required transfer assessment.

You may contact hello@tavros.uk if you would like more information about the safeguards relevant to a particular transfer.

10. How long we keep information

We do not keep personal information for longer than reasonably necessary for the purpose for which it was collected, taking into account legal, accounting, tax, fraud-prevention and dispute-resolution requirements.

• Order, transaction and tax records are kept for at least the period required by HMRC. For a sole trader, business records generally need to be kept for at least 5 years after the 31 January submission deadline for the relevant tax year.
• Account information is normally kept while the account remains active. If you request deletion, information that is not required for another lawful purpose will be deleted or anonymised, while transaction or legal records may need to be retained.
• Customer-service and complaint records are kept for as long as reasonably necessary to resolve the matter, maintain an appropriate history and establish or defend legal claims.
• Marketing consent records are kept while consent is active and for a reasonable period afterwards to demonstrate compliance. A minimal suppression record may be retained for as long as necessary to honour an opt-out.
• Security, fraud and technical records are kept only for as long as reasonably necessary for security, prevention, investigation and legal purposes.

When information is no longer needed, we delete it, anonymise it or otherwise put it beyond normal use where appropriate.

11. Account deletion

You may request deletion of your TAVROS account by contacting hello@tavros.uk.

Account deletion does not necessarily mean immediate deletion of every record. We may retain order, payment, tax, fraud, complaint or legal information where we have a lawful reason or legal obligation to do so.

If you have an active order, return, claim or unused Store Credit, we may need to complete or resolve that matter before deleting information that is required to provide the service or protect your rights.

If you later create a new account using the same email address, it is treated as a new account. Previous marketing choices are not automatically restored, and you must opt in again if you want marketing.

12. Fraud prevention and automated tools

We may use payment-provider, website-security or fraud-prevention tools that generate automated risk signals or indicators.

Those signals may be used to help us review an order, payment, account or claim. We do not currently intend to make decisions producing legal or similarly significant effects about customers solely by automated means without appropriate safeguards where the law requires them.

We never ask for your full card number, CVV, PIN or online-banking password as part of TAVROS customer verification.

13. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

No website, transmission or storage system can be guaranteed to be completely secure. If a personal-data breach occurs, we will assess it and notify affected individuals and/or the Information Commissioner's Office where the law requires us to do so.

14. Your data protection rights

Depending on the circumstances and lawful basis, you may have the right to:

• ask for access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask for deletion of information in certain circumstances;
• ask us to restrict the way we use information in certain circumstances;
• receive certain information in a portable format where the right to data portability applies;
• object to certain processing based on legitimate interests;
• withdraw consent at any time where we rely on consent; and
• complain about the way we use your personal information.

To exercise a right, contact hello@tavros.uk. We may need to verify your identity before acting on a request. We normally respond within the period required by data protection law.

15. Your right to object

You have the right to object at any time to the use of your personal information for direct marketing.

If you object or unsubscribe, we will stop using your information for that marketing method, subject only to keeping the minimal information needed to record your opt-out.

You may also have the right to object to processing based on our legitimate interests. In that case we will stop the relevant processing unless we have a lawful reason to continue, such as compelling legitimate grounds or the need to establish, exercise or defend legal claims.

16. Complaints about data protection

If you have a concern about how TAVROS has handled your personal information, please contact hello@tavros.uk first so we can investigate.

You also have the right to complain to the UK Information Commissioner's Office (ICO). Information about making a complaint is available at: https://ico.org.uk/make-a-complaint

17. Changes to this Privacy Policy

We may update this Privacy Policy when our services, technology, providers or legal obligations change.

The latest version will be published on tavros.uk with an updated date. Where a change materially affects how we use personal information, we will take additional steps to inform people where appropriate.