Privacy policy

Farwinger (operated by Michael Farwinger, Birmingham, United Kingdom) is committed to protecting your personal data and your privacy. This policy explains what data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any data protection queries, please contact us at contact@farwinger.com.

What Personal Data We Collect

When you place an order:

  • Name, email address, delivery and billing address, telephone number
  • Payment information — this is processed securely by our payment provider; Farwinger does not store card details
  • Order history and transaction records

When you browse our website:

  • IP address, browser type, and pages visited (collected via cookies — see the Cookie section below)

How We Use Your Data

We use your personal data to:

  • Process and fulfil your orders, including arranging delivery and shipping insurance
  • Send order confirmations, dispatch notifications, and service communications
  • Respond to your enquiries and provide customer support
  • Comply with our legal obligations, including tax and accounting requirements
  • Improve our website and services

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract performance: processing necessary to fulfil your order
  • Legal obligation: processing required to comply with our legal duties (e.g., HMRC records)
  • Legitimate interests: improving our services and preventing fraud

Third-Party Processors

To fulfil your order, your data may be shared with the following trusted third parties, all of whom are required to handle your data in compliance with applicable data protection law:

  • Shopify — e-commerce platform and order management
  • SendCloud — logistics and shipment management
  • XCover — shipping insurance provider
  • Courier services — for delivery of your order
  • Payment processors (Stripe, PayPal, etc.) — for secure payment handling

International Transfers

Some of our third-party processors may be based outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Data Retention

We retain order and transaction records for 7 years to comply with HMRC requirements. Other personal data is retained only for as long as necessary to fulfil the purpose for which it was collected.

Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data in certain circumstances
  • Restriction — request that we limit processing of your data
  • Portability — receive your data in a portable format
  • Objection — object to processing based on legitimate interests

To exercise any of these rights, please email contact@farwinger.com. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

Our website uses essential cookies required for the site to function, and optional analytics cookies to help us understand how visitors use our site. You can manage your cookie preferences via the cookie banner displayed when you first visit our site.

Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Payment data is handled exclusively by our PCI-DSS compliant payment processors.

Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on this page. We will notify you of material changes where required by law.

Last updated: April 2026