Privacy policy

Privacy Policy

Farèa Limited (“Farèa”, “we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy.

1. Who we are (Data Controller)

Farèa Limited is the data controller for personal data processed via www.carryfarea.com

Company number: 16430289

Registered address: Unit 29, Highcroft Industrial Estate, Enterprise Road, Horndean, Hampshire, PO8 0BT, United Kingdom

Contact: info@carryfarea.com

We may update this notice from time to time. We’ll post changes here and, where appropriate, notify you on the site.

2. What data we collect

We collect and process the following categories of personal data:

·         Identity & Contact Data: name, title, email, billing/delivery address, phone.

·         Account & Profile Data: login details, preferences, wishlists, survey responses.

·         Order & Transaction Data: products purchased, order numbers, refund/return history, amounts, VAT.

·         Payment Data: tokenised payment references and authorisation details handled by payment processors. We do not store full card numbers or CVV.

·         Technical & Usage Data: IP address, device and browser type, time zone, pages viewed, journey paths, interactions with emails.

·         Marketing Preferences: opt-in/opt-out choices and communication settings.

·         Cookies & Similar Tech: see our Cookie Policy for details on categories, purposes, and controls.

We also create Aggregated/Statistical Data (e.g., page traffic) that does not directly identify you. If combined with personal data, we treat it as personal data.

We do not intentionally collect special category data (e.g., health, religion) or criminal records data.

 

3. How we collect your data

·         Directly from you: when you browse, create an account, place an order, contact support, or enter promotions.

·         Automatically: via cookies and similar technologies when you use our site or interact with our emails.

·         From third parties: payment providers, delivery partners, analytics platforms, and anti-fraud services.

 

4. How we use your data & lawful bases

We only use your personal data when the law allows. The main purposes and legal bases are:

·         To provide our services and fulfil your order (create account, process payment, deliver goods, manage returns): contract.

·         Customer support & communications (order updates, service messages, policy changes): contract and legal obligation.

·         Postal marketing (from time to time): legitimate interests (you can opt out at any time).

·         Email marketing & newsletters: consent (opt-in). You can withdraw at any time via unsubscribe links or by contacting us.

·         Personalisation, analytics, site security, fraud prevention, and business administration: legitimate interests (to operate, improve, and protect our services).

·         Legal & tax compliance: legal obligation.

 

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

 

5. Sharing your data

We share personal data with trusted processors, only as necessary, under contracts that require confidentiality and security:

·         E-commerce & hosting: Shopify (store platform/hosting).

·         Payments: Shopify Payments/Stripe, PayPal, Apple Pay, Google Pay.

·         Delivery & logistics: Royal Mail, DPD (address, contact, order references).

 

·         Analytics & marketing tools: Google Analytics/GA4, Meta (where used), email service provider (e.g., Shopify Email/ Klaviyo).

 

·         Professional advisers: legal, banking, insurance (as necessary).

 

·         Authorities & regulators: HMRC, police, courts, ICO (where required by law).

 

·         Corporate transactions: if we sell/merge/restructure, data may transfer under the same protections.

We do not sell your personal data.

 

6. International transfers

Some providers may process data outside the UK/EEA. Where transfers occur, we use safeguards recognised by UK law, such as:

·         UK adequacy regulations (to approved countries), and/or

·         International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

Details of specific safeguards can be provided on request.

 

7. Data retention

We keep personal data only as long as necessary for the purposes set out in this notice, including to meet legal, accounting, or reporting requirements. Typically, order/transaction records are retained for seven years from the end of the financial year of the transaction. After the retention period, we securely delete or anonymise data.

 

8. Security

 

We use administrative, technical, and physical safeguards to protect your data, including HTTPS/SSL encryption, access controls, and limited access to personal data on a need-to-know basis. Payment data is handled by PCI-compliant processors; we do not store full card numbers or CVV. We maintain breach response procedures and will notify you and the ICO where legally required.

 

9. Cookies & similar technologies

We use cookies to operate the site, remember your preferences, analyse performance, and (where you consent) support marketing/retargeting. Manage your preferences via our cookie banner and your browser settings. See our Cookie Policy for details.

 

10. Your rights

 

Under UK data protection law, you have the right to:

·         Access your personal data and obtain a copy.

·         Rectify inaccurate or incomplete data.

·         Erase your data in certain circumstances.

·         Restrict processing in certain circumstances.

·         Object to processing based on legitimate interests and to direct marketing, including profiling for such marketing.

 

Data portability for data you provided to us, where processing is by consent or contract and automated.

Withdraw consent at any time where processing relies on consent.

We respond to rights requests within one month (we may ask for ID to verify your identity).

You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk

. We’d appreciate the chance to resolve your concerns first—please contact us.

 

11. Children

Our website is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has provided data, please contact us to delete it.

12. Profiling & automated decision-making

We may use limited profiling (e.g., browsing or purchase history) to tailor content and offers. We do not make decisions with legal or similarly significant effects based solely on automated processing. You can object to profiling for direct marketing at any time.

 

13. Third-party links

Our website may include links to third-party sites, plug-ins, or apps. Clicking those links may allow third parties to collect data about you. We are not responsible for their privacy practices; please read their privacy notices.

14. How to contact us

Questions about this policy or your data?

Email: info@carryfarea.com

Postal: Farèa Limited, Unit 29, Highcroft Industrial Estate, Enterprise Road, Horndean, Hampshire, PO8 0BT, UK