Privacy Policy

1. Who we are

Termka (“we,” “us,” “our”) is a sole-trader business registered in the United Kingdom. We design and sell handcrafted wooden phone stands through our website at termka.co.uk.

For data protection purposes, Termka is the data controller. If you have any questions about how we handle your data, you can contact us at hello@termka.co.uk.

2. What data we collect

We collect the minimum personal data necessary to fulfil your order and improve our service:

• Identity data: your name, as provided at checkout.
• Contact data: your email address, phone number (optional), and delivery address.
• Transaction data:details of the products you purchase, order value, and payment confirmation. We do not store your full card details — payment is processed securely by Stripe.
• Technical data: IP address, browser type and version, time zone, and operating system, collected automatically when you visit our site.
• Usage data: anonymised information about how you navigate our website, collected via Vercel Analytics.

3. How we use your data

We use your personal data for the following purposes, each with a lawful basis under UK GDPR:

• To fulfil your order (contractual necessity): processing payment, arranging delivery, and sending order confirmation and dispatch emails.
• To provide customer support (contractual necessity): responding to enquiries about your order, returns, or our products.
• To improve our website (legitimate interest): analysing anonymised usage patterns to improve site performance and user experience.
• To send marketing communications (consent): only if you have explicitly opted in to our newsletter. You can unsubscribe at any time.
• To comply with legal obligations (legal obligation): retaining transaction records as required by HMRC and UK tax law.

4. Cookies

Our website uses a limited number of cookies:

• Essential cookies: required for the site to function (e.g., session management, cart state). These do not require consent.
• Analytics cookies: Vercel Analytics collects anonymised, aggregated data about page views and performance. No personally identifiable information is stored in these cookies.

We do not use advertising cookies or tracking pixels from social media platforms.

5. Third parties

We share your data only with trusted third parties who help us operate our business:

• Stripe— payment processing. Stripe acts as an independent data controller for payment data. See Stripe's Privacy Policy.
• Vercel— website hosting and analytics. Data is processed in accordance with Vercel's Privacy Policy.
• Royal Mail / courier partners— we share your name and delivery address to fulfil shipping.

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

6. Data retention

We retain your personal data only for as long as necessary:

• Order data: retained for 6 years after the date of transaction, as required by HMRC for tax records.
• Marketing data: retained until you unsubscribe or request deletion.
• Analytics data: anonymised and aggregated; retained indefinitely as it cannot be linked to individuals.

7. Your rights under UK GDPR

Under the UK General Data Protection Regulation, you have the following rights:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: ask us to correct any inaccurate or incomplete data.
• Right to erasure: ask us to delete your personal data where there is no compelling reason for us to continue processing it.
• Right to restrict processing: ask us to suspend processing of your data in certain circumstances.
• Right to data portability: request your data in a structured, commonly used, machine-readable format.
• Right to object: object to processing based on legitimate interest or direct marketing.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please email hello@termka.co.uk. We will respond within one month, as required by law.

8. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data transmitted between your browser and our website is encrypted using TLS (HTTPS). Payment processing is handled entirely by Stripe, which is PCI DSS Level 1 certified.

9. International transfers

Some of our third-party service providers (Stripe, Vercel) may process data outside the United Kingdom. Where this occurs, we ensure adequate safeguards are in place, including the use of Standard Contractual Clauses or adequacy decisions recognised by the UK Secretary of State.

10. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk

11. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last updated” date. We encourage you to review this page periodically.

12. Contact us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Termka
Email: hello@termka.co.uk