Privacy Policy

Cirova (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit cirova.co.uk or place an order with us.

What Data We Collect

• Name, email address, phone number, and delivery address (when you place an order).
• Payment information (processed securely by our payment provider — we do not store card details).
• IP address, browser type, and browsing behaviour on our site (via cookies).
• Any information you provide when contacting us.

Why We Collect It

• To process and deliver your orders.
• To communicate with you about your order.
• To improve our website and services.
• To send marketing communications (only with your consent).

Legal Basis for Processing

Contract: to fulfil your order. Legitimate interest: to improve our services. Consent: for marketing emails.

How Long We Keep Your Data

We retain your personal data for as long as necessary to fulfil the purposes outlined above, or as required by law. Order data is retained for 6 years for accounting and legal purposes.

Your Rights Under UK GDPR

You have the right to: access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, withdraw consent for marketing at any time, and lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. To exercise any of these rights, contact us at support@cirova.co.uk.

Third-Party Sharing

We share your data only with trusted service providers necessary to operate our business (e.g., Shopify, payment processors, courier services). We do not sell your data to third parties.

Data Security

We use industry-standard security measures to protect your data, including SSL encryption on our website.