Privacy policy

 

This Privacy Policy explains how aceprow.shop (“aceprow.shop”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal information when you visit our website, create an account, place an order, contact us or otherwise use our products and services.

This policy applies to personal information processed through aceprow.shop, including information collected through our online store, checkout, customer service communications, marketing activities, cookies and related technologies.

We respect your privacy and are committed to handling personal information fairly, lawfully and transparently in accordance with applicable United Kingdom data protection laws, including the UK General Data Protection Regulation, the Data Protection Act 2018 and applicable electronic communications rules.

For questions or requests concerning this policy or your personal information, contact:

aceprow.shop
Email: info@aceprow.shop

1. Who Is Responsible for Your Personal Information?

For the purposes of applicable data protection law, aceprow.shop is the controller of the personal information described in this Privacy Policy, except where another organisation independently determines how and why your information is processed.

Some service providers, such as payment providers, delivery companies, social media platforms and other third-party services, may act as independent controllers for certain processing activities. Their handling of your information is governed by their own privacy notices.

2. Personal Information We Collect

The personal information we collect depends on how you interact with our website and services.

Identity Information

This may include:

• Full name

• Username or account name

• Title or preferred form of address

• Date of birth or age confirmation where reasonably required

• Signature where required for delivery or verification

Contact Information

This may include:

• Email address

• Telephone number

• Billing address

• Delivery address

• Country or region

• Communication preferences

Account Information

If you create an account, we may collect:

• Login credentials

• Account settings

• Saved addresses

• Order history

• Wishlist or saved products

• Customer preferences

Passwords are handled through secure systems and are not normally visible to us in plain text.

Order and Transaction Information

This may include:

• Products purchased or returned

• Order number

• Order value

• Discounts and promotional codes

• Delivery method

• Order status

• Refund and exchange information

• Customer service history

• Fraud-screening results

Payment Information

Payments are generally processed by third-party payment providers.

Depending on the payment method used, we or our payment providers may process:

• Payment card type

• Cardholder name

• Billing details

• Payment transaction reference

• Limited card details, such as the final digits

• Payment status

• Fraud and authentication information

We do not normally store complete payment card numbers or card security codes on our own systems.

Communications Information

We may collect information contained in:

• Emails

• Contact forms

• Customer support messages

• Product enquiries

• Return and refund requests

• Complaints

• Reviews and feedback

• Social media messages relating to our store

Device and Technical Information

When you access our website, certain information may be collected automatically, including:

• Internet Protocol address

• Browser type and version

• Device type

• Operating system

• Language settings

• Time zone

• Approximate location derived from an IP address

• Cookie identifiers

• Device identifiers

• Referral source

• Website error and security logs

Website Usage Information

We may collect information about how you use the website, such as:

• Pages viewed

• Products viewed

• Searches performed

• Links selected

• Time spent on pages

• Shopping basket activity

• Checkout activity

• Abandoned checkout information

• Marketing campaign interactions

• Cookie and consent preferences

Marketing Information

This may include:

• Whether you have subscribed to marketing

• Marketing consent records

• Email engagement

• Advertising interactions

• Product interests

• Communication preferences

• Information used to measure advertising performance

Reviews and User-Submitted Content

When you submit a review, photograph, comment or other content, we may collect:

• Your name or chosen display name

• Review content

• Rating

• Submitted images

• Product information

• Date of submission

• Related order information

Do not include sensitive personal information in publicly submitted reviews or comments.

3. How We Collect Personal Information

We may collect personal information:

Directly From You

For example, when you:

• Place an order

• Create an account

• Subscribe to marketing

• Contact customer service

• Request a return or refund

• Complete a form

• Submit a review

• Participate in a promotion

Automatically

We may collect technical, device, usage and cookie information when you browse or interact with our website.

From Service Providers

We may receive information from:

• Shopify

• Payment processors

• Delivery and logistics providers

• Fraud-prevention providers

• Website analytics providers

• Advertising and social media platforms

• Customer support providers

• Email and communication providers

From Public or Permitted Sources

Where lawful and relevant, we may receive information from publicly available sources, social media interactions or other sources you have authorised.

4. How We Use Personal Information

We may use personal information for the purposes described below.

Processing and Fulfilling Orders

We use information to:

• Confirm and process orders

• Take or verify payments

• Arrange delivery

• Send order and delivery updates

• Handle cancellations, returns, refunds and exchanges

• Maintain transaction records

The relevant lawful bases may include performance of a contract and compliance with legal obligations.

Managing Customer Accounts

We may use information to:

• Create and maintain accounts

• Authenticate users

• Save customer preferences

• Display order history

• Prevent unauthorised access

The relevant lawful bases may include performance of a contract and our legitimate interests in providing account functionality.

Providing Customer Service

We use information to:

• Respond to enquiries

• Resolve delivery or product issues

• Process complaints

• Provide information about orders

• Investigate customer service matters

The relevant lawful bases may include performance of a contract, compliance with legal obligations and our legitimate interests in supporting customers.

Preventing Fraud and Protecting Security

We may use information to:

• Detect suspicious orders

• Prevent fraud, abuse and unauthorised transactions

• Protect customer accounts

• Secure our website

• Investigate security incidents

• Enforce our policies and legal rights

The relevant lawful bases may include our legitimate interests, recognised legitimate interests where applicable, and compliance with legal obligations.

Improving Our Website and Services

We may use information to:

• Understand website performance

• Diagnose technical problems

• Improve navigation and checkout

• Analyse customer demand

• Improve products and customer service

• Test website features

• Develop business operations

The relevant lawful basis is generally our legitimate interests. Where consent is legally required for cookies or similar technologies, we rely on consent.

Sending Service Communications

We may send non-marketing messages concerning:

• Order confirmation

• Payment confirmation

• Dispatch and delivery

• Returns and refunds

• Account security

• Policy or service changes

• Customer support matters

These communications are necessary to provide the requested service and are not treated as optional marketing merely because they are sent electronically.

Marketing and Promotions

Where permitted, we may send information about:

• New products

• Promotions

• Discounts

• Abandoned shopping baskets

• Store updates

• Relevant offers

We may rely on your consent or, where legally available, the existing-customer exception for similar products and services.

You may unsubscribe at any time by:

• Selecting the unsubscribe link in a marketing email

• Adjusting available communication settings

• Contacting info@aceprow.shop

Unsubscribing from marketing does not prevent us from sending necessary transactional or service messages.

Personalisation and Advertising

Subject to applicable consent requirements, we may use information to:

• Recommend products

• Personalise website content

• Measure advertising performance

• Create advertising audiences

• Display relevant advertisements

• Limit repeated advertisements

• Understand how customers respond to campaigns

We do not use advertising or profiling technologies requiring consent unless the appropriate consent or another valid legal exemption applies.

Complying With Legal Obligations

We may use and retain information to:

• Maintain tax and accounting records

• Respond to lawful requests

• Comply with consumer protection obligations

• Handle legal claims

• Cooperate with regulators or law enforcement

• Meet product safety and fraud-prevention requirements

Establishing and Defending Legal Claims

We may process information where reasonably necessary to establish, exercise or defend legal rights, resolve disputes or enforce contractual terms.

5. Lawful Bases for Processing

Depending on the circumstances, we may rely on one or more of the following lawful bases:

Contract

Processing is necessary to enter into or perform a contract with you, including processing orders, payments, deliveries, returns and refunds.

Legal Obligation

Processing is necessary to comply with a legal or regulatory obligation.

Legitimate Interests

Processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

Our legitimate interests may include:

• Operating and improving the store

• Providing customer support

• Protecting website security

• Preventing fraud

• Understanding business performance

• Maintaining business records

• Defending legal claims

Consent

We rely on consent where required, including for certain marketing communications, advertising cookies and tracking technologies.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Recognised Legitimate Interests

Where permitted by applicable UK law, we may rely on a recognised legitimate interest without carrying out the usual balancing assessment, such as where processing is necessary for certain public security, emergency or safeguarding purposes.

6. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage, tags, scripts and similar technologies.

These technologies may be used to:

• Operate the shopping basket and checkout

• Remember login details and preferences

• Maintain website security

• Prevent fraud

• Measure website performance

• Analyse website traffic

• Personalise content

• Support advertising and marketing

• Remember cookie choices

Necessary Technologies

Certain technologies are necessary for the operation, security or functionality of the website and may be used without consent where permitted by law.

Analytics and Functionality Technologies

Some analytics or functionality technologies may be used without consent where a legal exemption applies and the required safeguards are satisfied.

Where consent is required, these technologies will be used only after you provide consent.

Advertising Technologies

Cookies and related technologies used for behavioural advertising, cross-site tracking or advertising profiling generally require consent.

You may accept, reject or adjust available cookie categories through our cookie banner or privacy preference settings.

You may change your preferences at any time through the cookie settings link available on the website. Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

Blocking all cookies through your browser may prevent certain website functions, such as the basket, account login or checkout, from operating correctly.

7. Shopify

Our online store is hosted and supported through Shopify.

Shopify may process personal information to provide services including:

• Website hosting

• Checkout functionality

• Order administration

• Security

• Fraud prevention

• Analytics

• Customer privacy tools

• Platform improvement

Depending on the Shopify services enabled on the store, Shopify may process information as our service provider or for its own purposes as described in its consumer privacy documentation.

Shopify and its affiliated companies and subprocessors may process information in countries outside the United Kingdom.

8. How We Share Personal Information

We do not sell personal information in the ordinary meaning of selling customer details in exchange for money.

We may share personal information with the following categories of recipients where reasonably necessary.

E-Commerce and Hosting Providers

This includes Shopify and providers that support our website, databases, checkout and online store.

Payment Providers

Payment information may be shared with payment processors, banks, card networks and fraud-prevention providers.

Delivery and Logistics Providers

We may provide names, addresses, telephone numbers and order information to:

• Couriers

• Postal operators

• Warehouses

• Fulfilment partners

• Customs or import authorities where applicable

Technology and Business Service Providers

This may include providers of:

• Website hosting

• Cloud storage

• Customer support

• Email communications

• Analytics

• Security

• Fraud prevention

• Accounting

• Professional advice

• Order management

Advertising and Social Media Providers

Where permitted and subject to required consent, information may be shared with advertising, analytics and social media platforms to measure campaigns, display advertising or create relevant audiences.

Professional Advisers

We may share information with accountants, auditors, insurers, lawyers and other professional advisers where necessary.

Government and Regulatory Authorities

We may disclose information where required by law or where reasonably necessary to:

• Respond to a court order

• Comply with a legal request

• Prevent or investigate fraud

• Protect rights and safety

• Cooperate with regulators

• Enforce legal agreements

Business Transfers

If all or part of our business is sold, merged, reorganised or transferred, personal information may be disclosed to relevant advisers, potential purchasers and the new owner, subject to appropriate confidentiality and legal safeguards.

9. International Data Transfers

Some service providers, fulfilment partners or technology providers may process information outside the United Kingdom.

Where personal information is transferred to a country that has not been formally recognised as providing adequate data protection, we will use an appropriate transfer mechanism where required, such as:

• UK-approved contractual safeguards

• The UK International Data Transfer Agreement

• A UK Addendum to approved contractual clauses

• Another legally recognised transfer mechanism

We may also rely on a lawful exception where permitted.

Service providers may use technical and organisational safeguards to protect information during international processing.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, tax, security, fraud-prevention and reporting requirements.

Retention periods may depend on:

• The type of information

• The nature of the customer relationship

• Legal and accounting obligations

• The risk of harm from unauthorised use

• The need to resolve disputes

• The possibility of legal claims

• Fraud-prevention requirements

Order and transaction records may generally be retained for up to six years after the relevant transaction or customer relationship where reasonably required for legal, tax, accounting or claims purposes.

Marketing information is retained until you unsubscribe, withdraw consent or object, unless a limited suppression record is needed to ensure that we respect your request.

Security records, cookie records and technical logs may be retained for shorter periods unless required for an investigation.

When information is no longer required, we may securely delete it, anonymise it or isolate it from further use.

11. Data Security

We use reasonable technical and organisational measures designed to protect personal information against:

• Unauthorised access

• Accidental loss

• Improper disclosure

• Alteration

• Destruction

• Fraudulent use

Measures may include:

• Encrypted connections

• Access restrictions

• Account authentication

• Security monitoring

• Service-provider assessments

• Payment security controls

• Staff or contractor confidentiality requirements

No internet transmission or storage system can be guaranteed to be completely secure. Customers are responsible for maintaining the confidentiality of account credentials and should contact us promptly if unauthorised account use is suspected.

12. Your Data Protection Rights

Depending on the circumstances and lawful basis used, you may have the following rights.

Right of Access

You may request confirmation of whether we process your personal information and request a copy of that information.

Right to Rectification

You may request correction of inaccurate information or completion of incomplete information.

Right to Erasure

You may request deletion of personal information in certain circumstances. This right is not absolute, and we may retain information where legally permitted or required.

Right to Restrict Processing

You may request that we restrict how information is used in certain circumstances.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request certain information in a structured, commonly used and machine-readable format.

Right to Object

You may object to processing based on legitimate interests in certain circumstances.

You have an absolute right to object to the use of your personal information for direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

Rights Relating to Automated Decisions

Where applicable, you may have rights concerning decisions made solely through automated processing that produce legal or similarly significant effects.

We do not ordinarily make significant decisions about customers solely through automated processing. Automated tools may be used for fraud screening, payment security, advertising and website personalisation, but relevant safeguards will be applied where required.

Right to Complain

You may raise a data protection complaint with us and may also complain to the Information Commissioner’s Office.

13. Exercising Your Rights

To exercise a data protection right, contact:

Email: info@aceprow.shop

Please clearly describe your request and include sufficient information to allow us to identify the relevant records.

We may request reasonable proof of identity before responding. This is intended to protect personal information from unauthorised disclosure.

We will respond without undue delay and within the period required by applicable law. In most cases, requests are handled without charge. A reasonable fee may be charged, or a request may be refused, where legally permitted because it is manifestly unfounded or excessive.

Certain rights are subject to legal limitations and exemptions. We will explain any lawful reason for refusing or limiting a request.

14. Data Protection Complaints

You may submit a complaint if you are dissatisfied with how we have collected, used, disclosed, retained, secured or otherwise handled personal information.

Send complaints to:

Email: info@aceprow.shop

Please include:

• Your name

• Relevant order or account information

• A description of the concern

• The outcome you are seeking

• Any relevant supporting information

We will acknowledge a data protection complaint within 30 days, investigate it appropriately and communicate the outcome without undue delay.

We may contact you for additional information where necessary to investigate the matter.

We encourage you to contact us first so that we have an opportunity to resolve the concern. However, you also have the right to complain to the Information Commissioner’s Office, the United Kingdom’s data protection regulator.

15. Marketing Preferences

You may opt out of marketing emails at any time by selecting the unsubscribe link in the message or contacting us.

After opting out, we may retain your email address on a suppression list to ensure that further marketing is not sent.

Opting out of marketing does not affect:

• Order confirmations

• Delivery updates

• Account security notices

• Customer support communications

• Legally required notices

16. Third-Party Websites

Our website may contain links to websites, applications or services operated by third parties.

We are not responsible for the privacy practices, security or content of third-party services. You should review the privacy notice of any external website before providing personal information.

17. Children’s Privacy

Our website and products are not directed specifically at children under 13, and we do not knowingly collect personal information directly from children under 13 without appropriate authorisation.

Customers placing orders must have the legal capacity to enter into a contract or must use the website with the involvement of a parent or legal guardian.

If you believe that a child has provided personal information improperly, contact us at info@aceprow.shop so that we can investigate and take appropriate action.

18. Sensitive Personal Information

We do not intentionally request special-category personal information, such as information concerning health, ethnicity, religion, political opinions, biometric identification or sexual orientation.

Please avoid sending sensitive personal information unless it is reasonably necessary to resolve a specific request.

Where sensitive information is received, it will be processed only where a valid legal condition applies and appropriate safeguards are used.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Changes to our services

• Changes to data-processing practices

• New service providers

• Changes to legal requirements

• Security or operational developments

The updated version will be published on this page with a revised “Last updated” date.

Where a change materially affects how personal information is used, we may provide additional notice where required.

20. Contact Us

For privacy questions, data protection requests, complaints or concerns, contact:

aceprow.shop
Email: info@aceprow.shop

Please include sufficient information for us to understand and respond to your request.