Privacy policy
Article 1. The personal information we collect
When you make a purchase in our shop, as part of the buying and selling process, we collect the personal information you give us, such as your name, address and email address.
When you browse our shop, we also automatically receive your computer's IP address, which tells us about your browser and operating system.
Email marketing (where applicable). With your permission, we may send you emails about our shop, new products and other updates.
Article 2. Consent
How do we get your consent?
When you give us personal information to complete a transaction, verify your card, place an order, arrange a delivery or return a purchase, we consider that you consent to us collecting it and using it for that purpose only.
If we ask for your personal information for a secondary reason, such as marketing, we will either ask you directly for your explicit consent or give you the chance to say no.
How do I withdraw my consent?
If you change your mind after giving your consent, you can withdraw it at any time by contacting us at contact@foloxy.com.
Article 3. Disclosure
We may disclose your personal information if we are required to by law or if you breach our terms of use.
Article 4. Shopify
Our shop is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored in Shopify's databases, on a secure server behind a firewall.
Payment. If you choose a direct payment gateway to complete your purchase, Shopify stores your card details. They are encrypted in line with the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is only kept for as long as needed to complete the transaction. Once the transaction is complete, this information is deleted.
All direct payment gateways follow the PCI-DSS standards managed by the PCI Security Standards Council, a joint effort of brands such as Visa, Mastercard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of card information by our shop and its service providers.
For more information, you may also want to read Shopify's terms of service or privacy statement.
Article 5. Third-party services
In general, the third-party providers we use will only collect, use and disclose your information to the extent needed to provide the services they supply to us.
However, some third-party service providers, such as payment gateways and other transaction processors, have their own privacy policies for the information we are required to give them for your purchase-related transactions.
For these providers, we recommend you read their privacy policies so you understand how your personal information will be handled.
In particular, some providers may be located in, or have facilities in, a different jurisdiction from you or us. If you choose to go ahead with a transaction that involves a third-party provider, your information may be subject to the laws of the jurisdiction where that provider is located.
Once you leave our shop's website or are redirected to a third-party website or application, you are no longer governed by this privacy policy or by our website's terms of use.
Links. When you click on links in our shop, they may take you away from our website. We are not responsible for the privacy practices of other websites and encourage you to read their privacy statements.
Article 6. Security
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you give us your card details, they are encrypted using SSL (Secure Socket Layer) technology and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100 percent secure, we follow all PCI-DSS requirements and apply additional generally accepted industry standards.
Cookies. Here is a list of the cookies we use. We list them here so you can choose whether or not to accept them.
_session_id, unique session token. Allows Shopify to store information about your session (referrer, landing page, etc.).
_shopify_visit, no data held. Lasts 30 minutes from the last visit, used by our website provider to record the number of visits.
_shopify_uniq, no data held. Expires at midnight the next day (visitor's time), counts the number of visits to a shop by a single customer.
cart, unique token. Lasts 2 weeks, stores information about the contents of your basket.
_secure_session_id, unique session token.
storefront_digest, unique token. Indefinite if the shop has a password, used to determine whether the current visitor has access.
Article 7. Age of consent
By using this website, you confirm that you are at least the age of majority where you live, or that you are the age of majority where you live and have given us your consent to allow any minor dependants to use this website.
Article 8. Changes to this privacy policy
We reserve the right to change this privacy policy at any time, so please review it regularly. Changes and clarifications take effect immediately when they are published on the website. If we make material changes to this policy, we will let you know here that it has been updated, so you know what information we collect, how we use it, and under what circumstances, if any, we use or disclose it.
If our shop is acquired or merged with another company, your information may be transferred to the new owners so that we can continue to sell products to you.
Your rights and contact details
Under the UK GDPR and the Data Protection Act 2018, you can ask to access, correct, update or delete the personal information we hold about you, object to its use, or make a complaint. Contact our privacy compliance officer at contact@foloxy.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).