Privacy Policy

Who is responsible for your data

FARAH B’ LTD (trading as Farah Care), company number 17517425, 128 City Road, London, EC1V 2NX, United Kingdom, is the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Contact us about privacy at info@farahb.uk.

What we collect

• Order details: your name, email address, phone number, delivery address, the products and sizes you order, and any notes you add.
• Payment information: payments are processed by Stripe. We receive confirmation of payment and limited details such as the card type and last four digits — never your full card number.
• Messages: what you send us by email or WhatsApp.
• Website usage (only if you accept analytics cookies): pages viewed, the website or campaign that referred you, device type, browser, language and approximate location (country/city) derived by our hosting provider. We do not store your IP address in our analytics.

Health information

You may choose to tell us information such as your type of surgery or measurements in your order notes. We use it only to help you choose the right size and to fulfil your order, on the basis of your explicit consent, and we do not use it for marketing. Please only share what is needed.

How and why we use your data

• To process, deliver and support your order — necessary to perform our contract with you.
• To keep accounting and tax records — a legal obligation.
• To prevent fraud, keep our website secure and improve our service — our legitimate interests.
• To understand how visitors use our website — only with your consent through the cookie banner.

We do not sell your personal data, and we do not send marketing messages unless you ask us to.

Who we share it with

• Cloudflare — website hosting and database.
• Stripe — card payment processing; Wise and our bank — receiving and refunding payments.
• Couriers and postal services — to deliver your order.
• WhatsApp (Meta) or email providers — only if you choose to contact us that way.
• Professional advisers, and authorities where the law requires it.

These providers only use your data to provide their service to us.

International transfers

Some providers process data outside the UK. Where this happens we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

How long we keep it

• Order and invoice records: 6 years after the order, as required for UK tax purposes.
• Messages: up to 2 years after our last contact.
• Analytics data: up to 14 months.

Your rights

You have the right to access your data, correct it, ask us to delete it, restrict or object to its use, receive it in a portable format and withdraw consent at any time. To use any of these rights, email info@farahb.uk; we respond within one month. You can also complain to the UK Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

Security

Our website is served over encrypted HTTPS connections, access to order data is password-protected, and card payments are handled by Stripe, which is certified to PCI DSS Level 1.

Children

Our website is not intended for anyone under 18 and we do not knowingly collect their data.

Changes

We may update this policy. The latest version is always on this page with its date.