Privacy policy

Farwinger (operated by Michael Farwinger, Birmingham, United Kingdom) is committed to protecting your personal data and your privacy. This policy explains what data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any data protection queries, please contact us at contact@farwinger.com.

What Personal Data We Collect

When you place an order:

  • Name, email address, delivery and billing address, telephone number
  • Payment information — this is processed securely by our payment provider; Farwinger does not store card details
  • Order history and transaction records

When you browse our website:

  • IP address, browser type, and pages visited (collected via cookies — see the Cookie section below)

How We Use Your Data

We use your personal data to:

  • Process and fulfil your orders, including arranging delivery and shipping insurance
  • Send order confirmations, dispatch notifications, and service communications
  • Respond to your enquiries and provide customer support
  • Comply with our legal obligations, including tax and accounting requirements
  • Improve our website and services

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract performance: processing necessary to fulfil your order
  • Legal obligation: processing required to comply with our legal duties (e.g., HMRC records)
  • Legitimate interests: improving our services and preventing fraud

Third-Party Processors

To fulfil your order, your data may be shared with the following trusted third parties, all of whom are required to handle your data in compliance with applicable data protection law:

  • Shopify — e-commerce platform and order management
  • SendCloud — logistics and shipment management
  • XCover — shipping insurance provider
  • Courier services — for delivery of your order
  • Payment processors (Stripe, PayPal, etc.) — for secure payment handling

International Transfers

Some of our third-party processors may be based outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Data Retention

We retain order and transaction records for 7 years to comply with HMRC requirements. Other personal data is retained only for as long as necessary to fulfil the purpose for which it was collected.

Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data in certain circumstances
  • Restriction — request that we limit processing of your data
  • Portability — receive your data in a portable format
  • Objection — object to processing based on legitimate interests

To exercise any of these rights, please email contact@farwinger.com. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

Our website uses essential cookies required for the site to function (the basket, checkout and remembering your cookie choice). Nothing else that sets a cookie loads until you accept it in the cookie banner shown on your first visit.

If you accept, these tools load:

  • Google Analytics - counts visits and pages viewed, in aggregate. Cookies kept up to 14 months.
  • Google Ads - tells us whether a visit that came from one of our ads went on to an enquiry or order. Cookies kept up to 90 days.
  • Meta pixel (Facebook and Instagram) - tells us whether a visit that came from one of our Meta ads went on to an order. Cookies kept up to 90 days.
  • Pinterest tag - tells us whether a visit that came from Pinterest went on to an order. Cookies kept up to 1 year.
  • Microsoft Clarity - shows how pages are used (where people click and scroll, and where a page confuses them) so we can improve the page. What you type into forms is masked. Cookies kept up to 1 year.

Two counters run without cookies and without identifying you: Ahrefs Web Analytics and our own first-party page counter. They record that a page was viewed, not who viewed it.

You can change or withdraw your choice at any time from the Cookie settings link in the footer of every page.

Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Payment data is handled exclusively by our PCI-DSS compliant payment processors.

Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on this page. We will notify you of material changes where required by law.

Last updated: April 2026