Privacy

Who we are

SANOOSI is the data controller for the personal data described here.

To confirmUK GDPR requires the controller’s legal identity and a contact address. The trading name, registered address and a contact email address still need to be supplied.

What we collect

• Account details: your name, email address and password when you create an account. Passwords are stored hashed; we never see them.
• Order details: what you bought, the delivery address you gave, and your phone number for the carrier.
• Payment details: handled entirely by our payment provider. Card numbers never reach our systems and we do not store them.
• Newsletter: your email address, if you choose to sign up.

Why we hold it, and on what basis

• To take and deliver your order, and to handle returns. This is necessary to perform our contract with you.
• To keep accounting records. This is a legal obligation.
• To send the newsletter, only with your consent, withdrawable at any time.

Who we share it with

Only the parties needed to complete your order: our payment provider, our delivery carrier, and the hosting and email services that run this site. We never sell your data.

To confirmOnce the payment provider, carrier and newsletter provider are chosen, each should be named here.

How long we keep it

Order and accounting records are kept for six years, as UK tax law requires. Account data is kept until you delete your account. Newsletter data is kept until you unsubscribe.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or ask for it in a portable form. You can delete your account yourself from your account page. If you think we have handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

This site uses only the cookies and local storage needed to keep you signed in and to remember your basket. There is no advertising or analytics tracking, so no consent banner is required.

To confirmIf analytics or advertising pixels are added later, a consent banner becomes a legal requirement and this section must be rewritten.