PRIVACY POLICY
PHEROLEC GLOBAL LTD
PRIVACY POLICY
Last Updated: 18 October 2026
At Pherolec Global Ltd, we are committed to protecting your privacy and handling your personal information responsibly, securely and transparently.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our websites, purchase our products, create an account, subscribe to marketing communications or otherwise interact with us.
This Privacy Policy should be read alongside our Terms and Conditions of Use and Sale and our Shipping & Returns Policy.
1. Who We Are
Pherolec Global Ltd ("Pherolec Global", "we", "us" or "our") is the controller of personal information processed for the purposes described in this Privacy Policy, except where another organisation acts as an independent or joint controller.
Company Name: Pherolec Global Ltd
Registered Office: Unit 67, 14–15 Triangle South, Bristol, BS8 1EY, United Kingdom
Company Registration Number: [Insert company registration number]
Email: pherolec.global@gmail.com
Telephone: +44 7940 261 628
Websites:
For questions concerning the handling of your personal information or to exercise your data protection rights, please contact us using the details above.
2. Applicable Data Protection Laws
We process personal information in accordance with applicable data protection legislation, including:
-
The UK General Data Protection Regulation (UK GDPR).
-
The Data Protection Act 2018, as amended.
-
The Privacy and Electronic Communications Regulations 2003 (PECR), as amended.
-
The EU General Data Protection Regulation (EU GDPR), where applicable.
-
Applicable US state privacy legislation, where relevant to our activities.
The rights available to you may depend on your location, the nature of our processing and the legislation applicable to your personal information.
3. Personal Information We Collect
We may collect the following categories of personal information.
3.1 Identity and Contact Information
-
First and last name.
-
Billing and delivery addresses.
-
Email address.
-
Telephone number.
-
Account registration information.
3.2 Order and Transaction Information
-
Products purchased.
-
Order numbers and transaction history.
-
Payment status and payment references.
-
Delivery and tracking information.
-
Refunds, returns and customer service records.
-
Tax and invoice information.
Payment card information is processed by our payment service providers. We do not intentionally store complete payment card numbers or card security codes in our own systems.
3.3 Technical and Website Usage Information
When you access our website, we may collect:
-
Internet Protocol (IP) address.
-
Browser type and version.
-
Device type and operating system.
-
Approximate geographical location derived from technical information.
-
Pages visited and interactions with website features.
-
Referral sources and website navigation information.
-
Cookie identifiers and other online identifiers.
-
Website performance and diagnostic information.
3.4 Marketing and Communication Information
Where applicable, we may collect:
-
Newsletter subscription preferences.
-
Marketing consent and opt-out records.
-
Email and SMS communication preferences.
-
Interactions with marketing messages.
-
Responses to promotional campaigns.
-
Advertising attribution and campaign interaction information.
3.5 Customer Communications
We may retain communications submitted through email, website contact forms, customer service enquiries, reviews or other channels.
We ask that you do not provide sensitive personal information unless it is necessary for a specific enquiry.
4. How We Collect Personal Information
We collect personal information:
-
Directly from you, when you place an order, create an account, contact us, subscribe to communications or submit information through our website.
-
Automatically, through website functionality, cookies and similar technologies, subject to applicable consent requirements.
-
From service providers, including payment processors, shipping providers and ecommerce platforms, where necessary to manage transactions and services.
-
From advertising and analytics partners, where permitted by applicable law and your privacy choices.
-
From publicly available or other lawful sources, where relevant and permitted.
Where personal information is collected from another source, we will provide any additional information required by applicable law.
5. How and Why We Use Personal Information
We only process personal information where we have an appropriate legal basis.
The following table summarises our principal processing activities.
| Purpose | Legal Basis |
|---|---|
| Processing orders and delivering products | Performance of a contract |
| Processing payments and refunds | Performance of a contract |
| Providing customer service relating to purchases | Performance of a contract or legitimate interests, as appropriate |
| Maintaining customer accounts | Performance of a contract |
| Maintaining legally required tax and accounting records | Legal obligation |
| Preventing fraud and protecting website security | Legitimate interests or legal obligation |
| Improving website functionality and customer experience | Legitimate interests, where appropriate |
| Sending marketing emails and SMS | Consent or legitimate interests where the applicable electronic marketing rules permit |
| Using non-essential advertising cookies and tracking technologies | Consent or another applicable exemption where legally available |
| Responding to legal claims or regulatory enquiries | Legal obligation or legitimate interests |
| Analysing sales performance and business operations | Legitimate interests, using proportionate information |
Where we rely on legitimate interests, these may include operating our business efficiently, maintaining security, preventing fraud, improving our services and understanding customer needs.
We assess these interests against the rights and freedoms of affected individuals.
Where we rely on consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
6. Marketing Communications
We may send information about our products, promotions, new releases and special offers where permitted by applicable law.
Email and SMS Marketing
We send electronic marketing communications:
-
Where you have provided valid consent; or
-
Where an applicable existing-customer marketing exception permits us to contact you about similar products and its requirements have been satisfied.
Where we rely on the UK existing-customer soft opt-in exception, we will provide a clear opportunity to opt out when collecting your contact details and in each subsequent marketing communication.
We will not treat website browsing, account registration or purchasing alone as blanket consent to unrelated marketing.
Unsubscribing
You can stop receiving promotional communications at any time by:
-
Clicking the unsubscribe link in a marketing email.
-
Using the opt-out instructions in an SMS, where provided.
-
Contacting pherolec.global@gmail.com.
We may retain limited information necessary to record and respect your opt-out preferences.
Unsubscribing from marketing will not prevent us from sending necessary transactional communications, such as order confirmations and delivery updates.
Personalised Advertising
Where enabled, we may use advertising platforms and associated technologies to measure campaigns, understand customer engagement and display relevant advertisements.
Such activities will be conducted in accordance with applicable data protection, direct marketing and cookie requirements.
We will not use personal information for advertising purposes where the required lawful basis or consent is absent.
7. Cookies and Similar Technologies
Our websites may use cookies, pixels and similar technologies to support website functionality, remember preferences, analyse performance and deliver advertising.
These technologies may fall into the following categories.
Essential Cookies
These support functions such as:
-
Shopping cart operation.
-
Secure checkout.
-
Customer authentication.
-
Fraud prevention.
-
Security and session management.
Where the applicable legal requirements for an exemption are met, these technologies may operate without prior consent.
Analytics Cookies
These help us understand website performance, visitor interactions and opportunities for improvement.
We obtain consent where required by applicable law.
Advertising and Marketing Cookies
These may support:
-
Advertising campaign measurement.
-
Conversion attribution.
-
Remarketing.
-
Personalised advertising.
-
Audience measurement and optimisation.
We obtain consent before using these technologies where required.
Cookie Preferences
Where consent is required, visitors can accept, reject or manage relevant cookie categories through the website's privacy or cookie settings.
Visitors may also control cookies through their browser settings.
Disabling certain essential technologies may affect website functionality.
More detailed information about the specific cookies and technologies used, their providers, purposes and retention periods should be made available through our Cookie Policy or cookie preference interface.
8. Ecommerce Platform and Service Providers
Our online store operates using third-party ecommerce infrastructure, including Shopify.
To operate our business, we may share relevant personal information with service providers performing functions on our behalf or acting as independent controllers.
These may include:
-
Ecommerce infrastructure: Shopify and related website services.
-
Payment processing: Payment providers made available during checkout, including PayPal where selected.
-
Order fulfilment: Warehousing, fulfilment and logistics providers.
-
Delivery services: Couriers and shipping partners.
-
Customer communications: Email and customer support service providers.
-
Marketing: Email marketing, advertising and analytics service providers, where used.
-
Professional services: Accountants, legal advisers and other authorised advisers.
-
Technical services: Website hosting, security, maintenance and IT support providers.
We share only the information reasonably necessary for the relevant purpose.
Where a service provider processes personal information on our behalf, we use appropriate contractual and organisational safeguards as required by law.
Some providers may act as independent controllers and process information under their own privacy policies.
9. Disclosure of Personal Information
We do not sell customer contact lists to unrelated third parties for their independent direct marketing purposes.
We may disclose personal information:
-
To service providers involved in operating our website and fulfilling orders.
-
To payment processors for transaction processing and fraud prevention.
-
To delivery and logistics partners to complete shipments.
-
To professional advisers where necessary.
-
To regulators, law enforcement or other authorities where legally required.
-
To protect our legal rights or respond to lawful claims.
-
In connection with a genuine business restructuring, merger, acquisition or sale of assets, subject to applicable legal requirements.
We do not disclose personal information for unrelated purposes without an appropriate lawful basis.
Certain disclosures for advertising or analytics may be classified differently under applicable US state privacy laws, even where no money is exchanged. Where those laws apply, we will provide the required notices and choices.
10. International Transfers of Personal Information
Because we operate an international ecommerce business and use third-party technology providers, personal information may be accessed, processed or stored outside the United Kingdom, including in the European Economic Area and the United States.
Where international transfers are subject to UK GDPR or EU GDPR transfer restrictions, we use an applicable lawful transfer mechanism.
Depending on the destination and circumstances, this may include:
-
Applicable adequacy regulations or decisions.
-
Approved contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum.
-
EU Standard Contractual Clauses where applicable.
-
Other transfer mechanisms or exceptions permitted by law.
Where required, we assess relevant transfer risks and implement appropriate supplementary safeguards.
Information about applicable transfer safeguards may be requested using the contact details in this policy.
We do not rely solely on your use of the website as authorisation for international transfers.
11. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, complying with legal obligations, resolving disputes and protecting our legal rights.
Retention periods depend on the category of information and the applicable requirements.
| Data Category | Retention Approach |
|---|---|
| Order and accounting records | Retained for the period required by applicable tax, accounting and legal obligations |
| Customer account information | Retained while the account remains active and for a limited period afterwards where necessary |
| Customer service communications | Retained for as long as needed to resolve enquiries, handle disputes and meet legal obligations |
| Marketing subscription records | Retained while the subscription remains active, with limited suppression records retained after opting out |
| Website analytics information | Retained according to the configured analytics service settings and applicable requirements |
| Security and fraud prevention records | Retained for a proportionate period based on security risks and legal requirements |
When information is no longer required, we securely delete, anonymise or otherwise dispose of it in accordance with applicable law.
We periodically review our retention practices.
12. Data Security
We take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, destruction, alteration or disclosure.
These measures may include:
-
Access controls and account authentication.
-
Secure payment processing.
-
Encryption in transit where appropriate.
-
Security monitoring and software updates.
-
Restricted access to customer information.
-
Contractual security obligations for service providers.
-
Procedures for identifying and responding to security incidents.
Although no online system can guarantee absolute security, we take reasonable and appropriate measures to protect personal information.
Where a personal data breach triggers a legal notification obligation, we will notify the relevant authority and affected individuals as required.
13. Your Data Protection Rights
Depending on the applicable law and circumstances, you may have the right to:
-
Access: Request confirmation of whether we process your personal information and obtain a copy.
-
Rectification: Request correction of inaccurate or incomplete information.
-
Erasure: Request deletion of personal information where the legal requirements are satisfied.
-
Restriction: Request that certain processing activities be restricted.
-
Data portability: Request certain personal information in a structured, commonly used and machine-readable format.
-
Objection: Object to processing based on legitimate interests in applicable circumstances.
-
Withdraw consent: Withdraw consent where processing relies on consent.
-
Automated decisions: Exercise applicable rights concerning qualifying solely automated decisions, including profiling.
You have the right to object at any time to the processing of your personal information for direct marketing, including related profiling.
We will stop processing your personal information for direct marketing when you exercise that right.
Some rights are subject to legal exceptions, including where information must be retained for tax, accounting, fraud prevention or legal purposes.
14. Exercising Your Rights
To exercise your privacy rights, contact:
Please describe your request clearly so that we can respond appropriately.
We may request reasonable additional information to verify your identity where necessary.
We will respond within the timeframe required by applicable law, generally within one month for requests under UK GDPR, subject to lawful extensions and other applicable procedural rules.
Requests are normally handled free of charge.
A reasonable fee may apply in limited circumstances permitted by law, such as certain manifestly unfounded or excessive requests or requests for additional copies.
15. Automated Decision-Making and Profiling
We may use automated systems to support fraud detection, payment verification, advertising measurement and customer experience improvements.
Certain service providers may conduct automated processing under their own responsibility.
Where automated decision-making or profiling is subject to specific legal safeguards, we will comply with applicable requirements, including providing further information and available rights where necessary.
We do not use solely automated decisions producing legal or similarly significant effects unless an applicable lawful basis and the required safeguards are in place.
16. Children's Privacy
Our products and services are intended for adults aged 18 or over.
We do not knowingly collect personal information directly from children for marketing or customer account purposes.
If we become aware that we have collected personal information from a child without an appropriate lawful basis, we will take steps to address the situation in accordance with applicable law.
Parents or guardians may contact us with relevant privacy concerns.
17. Third-Party Websites
Our website may contain links to websites operated by third parties.
We do not control the privacy practices of independently operated third-party websites.
We recommend reviewing the privacy policies of external websites before submitting personal information.
This provision does not exclude any legal responsibility we may have for our own processing activities or the third-party services we select.
18. US Privacy Rights
Customers residing in certain US states may have additional privacy rights under applicable state legislation.
Depending on the relevant law and whether it applies to our activities, these rights may include:
-
Accessing personal information.
-
Correcting inaccurate information.
-
Requesting deletion.
-
Obtaining a portable copy of certain information.
-
Opting out of qualifying sales, sharing, targeted advertising or profiling.
-
Appealing certain decisions regarding privacy rights requests.
Where legally required, we will provide appropriate mechanisms for exercising these rights and honour recognised opt-out preference signals.
Requests may be submitted to pherolec.global@gmail.com.
The availability and scope of these rights depend on the applicable state legislation.
19. Complaints
If you have concerns about how we handle your personal information, please contact us first so that we can investigate and seek to resolve the matter.
You also have the right to complain to the relevant supervisory authority.
In the United Kingdom, the supervisory authority is:
Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Telephone: +44 303 123 1113
If EU GDPR applies, you may also have the right to lodge a complaint with a competent supervisory authority in the European Economic Area.
20. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in legislation, our business activities, technology or data processing practices.
The updated version will be published on our website with a revised effective date.
Where required by law, we will provide additional notice or obtain consent before introducing materially different processing activities.
Changes to this policy do not retrospectively make unlawful processing lawful.
21. Contact Us
For privacy-related enquiries, requests or complaints, please contact:
Pherolec Global Ltd
Unit 67, 14–15 Triangle South
Bristol, BS8 1EY
United Kingdom
Email: pherolec.global@gmail.com
Telephone: +44 7940 261 628
Website: www.pherolec-global.com
Pherolec Global Ltd – All Rights Reserved.
This Privacy Policy is intended to provide transparent information about our handling of personal data. Nothing in this policy limits or excludes rights available under applicable data protection legislation.