Legal
Privacy Policy
What personal information we collect when you shop with ALVENIO, why we use it, who we share it with and your rights.
Last updated: 26 September 2026
1. Who is responsible for your data
The controller of your personal data is DAP SQUARED LTD, trading as ALVENIO, a company registered in England and Wales (company details on our Legal Information page). For any privacy question or request, email support@alvenio.shop.
2. What we collect
- Order information: your name, email address, billing and delivery addresses, phone number if you give it, the products you buy, order value and currency.
- Payment information: payments are handled by our payment providers (Stripe and, where offered, PayPal). We receive confirmation of payment and limited details such as the card type and last four digits, but never your full card number or security code.
- Account information: if you create an account, your login email, a securely stored password and your order history.
- Messages: what you send us through the contact form or by email or phone.
- Technical information: your IP address, browser type and the pages you request, recorded in our server logs for security, and the essential cookies described in our Cookie Policy.
We do not use advertising or analytics trackers, and we do not build marketing profiles.
3. Why we use it and our legal basis
| Purpose | Legal basis (UK and EU GDPR) |
|---|---|
| Processing and delivering your order, handling returns and refunds | Performance of a contract |
| Sending order, dispatch and refund emails | Performance of a contract |
| Answering your messages and complaints | Legitimate interests (customer service); contract where it concerns an order |
| Preventing fraud and keeping the website secure | Legitimate interests; legal obligation |
| Keeping accounting and tax records | Legal obligation |
| Managing your account | Performance of a contract |
We will only send you marketing emails if you have asked us to, and every such email will include an unsubscribe link. We do not make decisions about you based solely on automated processing.
4. Who we share it with
We share personal data only with service providers who help us run the shop, under contracts that require them to protect it:
- Payment providers: Stripe and, where offered, PayPal, to process payments, refunds and fraud checks. They act as independent controllers for some of this processing under their own privacy notices.
- Delivery carriers: your name, delivery address, and email or phone where needed for delivery updates.
- Hosting and email: our website hosting provider and email service, which store data on our behalf.
- Professional advisers and authorities: accountants, or public authorities when the law requires it.
We do not sell your personal information and we do not share it for cross-context behavioural advertising.
5. International transfers
Some of our providers process data outside the UK or the European Economic Area, for example in the United States. Where this happens, we rely on adequacy decisions or on safeguards approved under UK and EU law, such as the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.
6. How long we keep it
- Order and payment records: 6 years after the end of the financial year of the order, to meet UK tax and accounting law.
- Contact messages: up to 24 months after your last message.
- Accounts: until you ask us to delete your account; order records are then kept as above.
- Server logs: up to 30 days.
7. Your rights
Under UK and EU data protection law you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To use any of these rights, email support@alvenio.shop; we reply within one month.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk) or to the data protection authority in your EU country. We would appreciate the chance to deal with your concern first.
8. Additional information for US residents
If you live in California or another US state with a consumer privacy law, you have the right to know what personal information we collect and how we use it (as described above), to request access to it, to ask us to correct or delete it, and not to be discriminated against for exercising these rights. We do not sell or share personal information, and we do not use sensitive personal information for purposes that would require an opt-out. You can make a request by email; we may need to verify your identity before acting on it.
9. Children
Our shop is intended for adults. We do not knowingly collect personal information from children under 16.
10. Security
The website is served over an encrypted HTTPS connection. Access to order data is limited to people who need it to run the shop, and payment card data is handled only by our PCI DSS-compliant payment providers.
11. Changes to this policy
We will update this page if our practices change. The date of the last update is shown at the top.