Privacy policy

Privacy Policy

This policy explains how Averune collects and uses your personal data when you visit averune.shop or buy from us, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data controller

The controller responsible for your personal data is Averune, 1 Anson Close, Maldon CM9 6ZH, United Kingdom. E-mail: oriehamp72098@outlook.com. Phone: +44 7756 969574.

2. Data we collect

Order data: name, delivery and billing address, e-mail, phone number, items purchased and order history.
Payment data: payments are handled by our payment providers; we receive only confirmation of payment and limited card details (such as card type and last four digits).
Communication data: messages you send us through our contact form, e-mail or phone.
Technical data: IP address, browser and device information, and cookie data according to your cookie choices.

3. How we use your data and our lawful bases

To process, deliver and support your order - performance of a contract (Art. 6(1)(b) UK GDPR).
To meet tax and accounting obligations - legal obligation (Art. 6(1)(c)).
To prevent fraud and keep our website secure - legitimate interests (Art. 6(1)(f)).
To send our newsletter and to set non-essential cookies - your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Sharing your data

We share personal data only where needed: with Shopify (our e-commerce platform and hosting), our payment providers, Royal Mail (delivery), ParcelPanel (order tracking page), and our e-mail provider. We never sell your personal data.

5. Cookies and consent

When you first visit our website from the United Kingdom or another region where consent is required, our cookie banner (Shopify's built-in consent banner) asks for your consent before any non-essential cookies are set. You can accept all cookies, decline all non-essential cookies, or choose by category under "Manage preferences": Strictly necessary (always active), Preferences, Analytics and Marketing. You can change or withdraw your consent at any time with the "Cookie settings" link in the footer of every page. Full details are in our Cookie Policy.

6. How long we keep your data

We keep order and invoice records for 6 years to meet HMRC tax and accounting requirements. Contact-form messages are kept for up to 2 years. Newsletter data is kept until you unsubscribe.

7. Your rights under UK GDPR

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, e-mail oriehamp72098@outlook.com; we reply within one month. You also have the right to complain to the Information Commissioner's Office (ICO), ico.org.uk, phone 0303 123 1113.

8. International transfers

Some of our service providers, including Shopify, may process data outside the UK. Where they do, the transfer is protected by UK adequacy regulations or the International Data Transfer Agreement / UK Addendum to the EU standard contractual clauses.