Privacy policy
Last updated: June 25, 2025
Introduction
This Privacy Policy describes how GZBO ("we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from www.gzbo.co.uk (the "Site") or otherwise interact with us in relation to the Site (collectively, the "Services"). For the purposes of this Privacy Policy, "you" and "your" refer to you as the user of the Services, whether you are a customer, website visitor, or another individual whose personal information we collect.
Please read this Privacy Policy carefully.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes in our practices or for legal, operational, or regulatory reasons. The updated version will be posted on the Site with the revised "Last updated" date. We will take any additional steps required by applicable law.
How We Collect and Use Your Personal Information
We collect personal information about you from various sources in order to provide the Services. The types of personal information we collect and how we use it depend on how you interact with us.
In addition to the specific uses described below, we may use your personal information to communicate with you, provide and improve the Services, comply with legal obligations, enforce our terms of service, and protect the Site and our users.
What Personal Information We Collect
Information You Provide Directly
- Contact details (e.g., name, address, phone number, email)
- Order information (e.g., billing/shipping address, payment confirmation)
- Account details (e.g., username, password, security questions)
- Customer support communications
Some features require you to provide personal information. If you choose not to, you may not be able to access those features.
Information Collected Automatically
We collect "Usage Data" using cookies and similar technologies. This includes:
- Device and browser information
- IP address
- Network connection details
- Site activity and interaction
Information from Third Parties
We may receive your personal information from:
- Service providers like Shopify who support our website
- Payment processors (e.g., credit/debit card providers)
- Advertising and analytics partners who use tracking technologies on our Site
All personal information received from third parties is processed in accordance with this Privacy Policy.
How We Use Your Personal Information
Providing Products and Services
To fulfil orders, process payments, send notifications, manage your account, and support your use of the Services.
Marketing and Advertising
We may use your personal information to send promotional emails or display relevant ads. If you are a UK resident, this processing is done under our legitimate interest to market our services (UK GDPR Article 6(1)(f)). You can opt out at any time.
Security and Fraud Prevention
To monitor for fraudulent or malicious activity and protect the integrity of the Services (UK GDPR Article 6(1)(f)).
Customer Service and Improvement
To provide support, respond to queries, and improve the quality and usability of our Services (UK GDPR Article 6(1)(f)).
Cookies
We use cookies and similar technologies on our Site. These are used to:
- Power and personalise the Site
- Run analytics and performance metrics
- Support advertising
Some cookies are essential; others require your consent under the Privacy and Electronic Communications Regulations (PECR).
You can manage your preferences through our cookie banner or your browser settings. Blocking cookies may affect site functionality.
To learn more about Shopify’s cookies, see: https://www.shopify.com/legal/cookies
We also honour the Global Privacy Control (GPC) signal as a valid opt-out from tracking and sharing for advertising purposes. Visit https://globalprivacycontrol.org for more information.
How We Disclose Your Personal Information
We may share your personal information with:
- Vendors and service providers (e.g., payment processors, cloud storage, fulfilment, analytics)
- Business and marketing partners (in accordance with their own privacy policies)
- Affiliates within our corporate group
- Legal authorities, if required by law
- Other parties, where you consent or direct us to share
We do not sell your personal information under UK law.
Third Party Websites and Links
Our Site may contain links to external websites. We are not responsible for their content, privacy, or security. Please review the privacy policies of any third-party site you visit.
Children’s Data
Our Services are not intended for use by anyone under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us to request deletion.
Security and Retention of Your Information
We implement appropriate security measures, but no system is 100% secure. Do not send sensitive data via unsecured channels.
We retain your data for as long as necessary to provide the Services, meet legal obligations, and resolve disputes.
Your Rights
As a UK resident, you may have the following rights under the UK GDPR and Data Protection Act 2018:
- Access – request a copy of your personal information
- Rectification – correct inaccurate personal data
- Erasure – request deletion of your data
- Portability – request transfer of your data
- Restrict Processing – request limits on how we use your data
- Object – object to processing for certain purposes, including direct marketing
- Withdraw Consent – if we rely on consent, you may withdraw it
- Opt Out of Marketing – unsubscribe using the link in our emails
- File a Complaint – see below
To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on your request.
Complaints
If you are not satisfied with our response, you may lodge a complaint with the UK Information Commissioner’s Office (ICO):
- Website: www.ico.org.uk
- Phone: 0303 123 1113
International Transfers
Your personal information may be transferred outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs).
Contact
For any questions, concerns, or to exercise your rights, please contact:
Sam Rookes
Email: sales@gzbo.co.uk
Phone: 0117 244 2352
Address: GZBO, 7 Liberty Industrial Park, Bristol, ENG, BS3 2SU, UK
For the purposes of UK data protection laws, GZBO is the data controller of your personal information, unless stated otherwise.