Introduction
We are ZAVVINKO Ltd, a company registered in England and Wales with company number 11130160. Our registered office is at Unit 1, Anglia Parkway, Ipswich, Suffolk, IP1 5QL, United Kingdom. We are the data controller responsible for your personal data.
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us or email privacy@csixactive.com.
We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by other means such as email where appropriate.
Lawful Bases for Processing
Under UK data protection law, we must have a lawful basis for processing your personal data. We rely on the following:
Contract.
Where processing is necessary to perform our contract with you, such as processing your order, delivering products, and handling returns.
Consent.
Where you have given clear consent for us to process your personal data for a specific purpose, such as marketing emails or SMS. You can withdraw consent at any time.
Legitimate interests.
Where processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests. This includes improving our website, personalising your experience, fraud prevention, and understanding how customers use our services.
Legal obligation.
Where processing is necessary to comply with a legal obligation, such as keeping financial records for tax purposes or preventing fraud under Anti-Money Laundering regulations.
Information We Collect
We collect personal data that you provide to us directly, as well as data collected automatically when you use our website.
Information you provide:
Full name, email address, phone number, postal address, billing address, date of birth, payment card details, order history, account login details, your preferences (such as style, size and colour), social media handles, and any other information you choose to provide.
Information collected automatically:
IP address, browser type, device information, pages visited, time spent on pages, products viewed, items added to basket, referring website, location data, and other browsing behaviour. This information is collected using cookies and similar technologies.
How We Use Your Information
Below we explain what we do with your data, why we do it, and the lawful basis we rely on.
Orders and Payments
Processing your order.
We collect your details to process and fulfil your order, take payment, arrange delivery, and send you order confirmations and updates. We work with third-party payment processors to collect and process your payment information securely. Lawful basis: Contract.
Delivery.
We share your name, address, and contact details with our delivery partners so they can deliver your order and notify you of delivery status. Lawful basis: Contract.
Returns and refunds.
We use your order information to process returns and issue refunds in accordance with our Returns Policy. Lawful basis: Contract.
Financial records.
We keep records of transactions for tax, accounting, and fraud prevention purposes. Lawful basis: Legal obligation and legitimate interests.
Your Account
Account creation.
We collect your details to create and manage your account, save your preferences, and provide access to your order history. Lawful basis: Contract and consent.
Proof of identity.
We may need to verify your identity in certain situations, such as confirming a discount eligibility or verifying it was you who placed an order. Lawful basis: Contract and legitimate interests.
Website Experience and Personalisation
Browsing behaviour.
We track how you browse our website to personalise your experience, show you relevant products, and get you to the products you want faster. Lawful basis: Legitimate interests.
Site navigation.
We analyse your movements across our website to improve navigation and ensure you find what you're looking for quickly. Lawful basis: Legitimate interests.
Remembering you.
We use your information to identify you when you return to our website so we can provide a better, more personalised experience. Lawful basis: Legitimate interests.
Default settings.
We may set default options for you, such as language and currency, to make it easier to use our website. Lawful basis: Legitimate interests.
Staying logged in.
We offer the option to stay logged in without having to sign in each time. You can revoke this at any time. Lawful basis: Legitimate interests.
Purchase History and Basket
Shopping history analysis.
We analyse what you have bought, searched for, viewed, and returned to understand what you like and to improve our products and services. Lawful basis: Legitimate interests.
Personalised recommendations.
We use your order history and browsing behaviour to provide product recommendations based on your style, preferences, and purchase patterns. Lawful basis: Legitimate interests.
"Back in stock" emails.
If you've signed up to be notified when a product is back in stock, we'll email you when it becomes available. Lawful basis: Consent.
"Left in basket" emails.
We may send you a reminder email if you've added items to your basket but didn't complete your purchase. Lawful basis: Legitimate interests.
Marketing Communications
Email marketing.
If you've opted in, we'll send you emails about our products, promotions, competitions, and offers. These emails may contain tracking pixels that help us understand how you interact with them. Lawful basis: Consent.
SMS/Text marketing.
If you've opted in to receive text messages, we'll send you updates about products, promotions, and offers. We use a third-party provider who stores your phone number and tracks message delivery. Lawful basis: Consent.
Product information.
We may send you information about our products and services, including new releases. Lawful basis: Legitimate interests and consent where required.
You can opt out of marketing communications at any time by clicking the unsubscribe link, updating your account preferences, or by contacting us.
Advertising and Retargeting
Web ads and retargeting.
We may show you CSIX Active advertisements as you browse other websites and social media platforms. We use cookies to deliver content and ads tailored to your interests. Lawful basis: Consent (via cookie preferences) and legitimate interests.
Social media advertising.
We share your information with advertising partners to show you relevant banner ads and promotions on social media platforms. Lawful basis: Consent and legitimate interests.
Affiliate links.
We may use your data to match your orders to affiliate partners who referred you to us. We share purchase history with affiliates so they can track successful referrals. Lawful basis: Legitimate interests.
Social Media
Social login.
We may allow you to use your social media accounts to log in to our website, which involves sharing personal data linked to that account with us. Lawful basis: Consent and legitimate interests.
Social tags and mentions.
If you tag us or post about us on social media, we may use your photo, video, or content on our website or social media pages. We may also analyse your social media profile and connect it with your customer profile. Lawful basis: Legitimate interests.
Monitoring opinions.
We may monitor, respond to, or repost content you've shared publicly about us. Lawful basis: Legitimate interests.
Information sharing.
We may analyse how you share our products and content with your friends to understand your preferences. Lawful basis: Legitimate interests.
Competitions, Promotions and Referrals
Competitions and prize draws.
If you enter a competition, we collect your details to administer the competition, check eligibility, and contact you if you win. Lawful basis: Contract (competition terms) and consent.
Discount codes and promotions.
We may send you discount codes and promotional offers as a thank you for being a customer. Lawful basis: Consent.
Refer a friend.
We use a third-party provider to run our referral programme. Your data and your friend's data will be processed in line with the provider's privacy policy, which we will highlight at the time of referral. Lawful basis: Consent.
Customer Support
Responding to enquiries.
When you contact us, we collect information including your order number and purchase history to respond to your query. We may record calls for training and quality purposes. Lawful basis: Contract and legitimate interests.
Complaints.
When you make a complaint, we use your data to investigate and respond. We may also use complaints to improve our services. Lawful basis: Contract, legal obligation, and legitimate interests.
Data rights requests.
When you submit a request relating to your data protection rights, we use your information to verify your identity and respond. Lawful basis: Legal obligation.
Surveys, Feedback and Reviews
Feedback and reviews.
We may contact you to ask for feedback on our products and services, or invite you to leave a review. We sometimes use third-party providers to do this. Lawful basis: Consent and legitimate interests.
Customer insight surveys.
We may invite you to participate in surveys to help us improve. Lawful basis: Consent.
Analytics and Improvement
Guest behaviour analysis.
We monitor and analyse your behaviour on our website to understand purchasing patterns, improve our services, and provide a better experience. Lawful basis: Legitimate interests.
Third-party data collection.
We may use third-party service providers to collect data on our behalf across the internet, including on our website. This helps us understand what customers say about us and how we compare to other brands. Lawful basis: Legitimate interests.
Website improvement.
We use information about how visitors use our website to improve functionality, content, and user experience. Lawful basis: Legitimate interests.
Fraud Prevention and Security
Fraud detection.
We use your data, including from public sources, to detect, prevent, and investigate fraudulent activity. Lawful basis: Legitimate interests and legal obligation.
Security.
We use technical and organisational measures to protect your data and our systems from unauthorised access. Lawful basis: Legitimate interests and legal obligation.
Service Communications
Important updates.
We may contact you about changes to our terms, policies, or services that affect you. Lawful basis: Contract and legal obligation.
International Transfers
Some of our service providers are located outside the United Kingdom. Where we transfer your personal data outside the UK, we ensure appropriate safeguards are in place to protect your data, such as Standard Contractual Clauses approved by the UK Government or transfers to countries with adequate data protection laws.
For a copy of the relevant transfer mechanism, please email privacy@csixactive.com.
How Long We Keep Your Data
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a different retention period is required by law.
Account data.
We keep your account information for as long as your account is active. If you close your account, we will delete or anonymise your data within a reasonable period, unless we need to retain it for legal purposes.
Order data.
We keep records of your orders for six years after the date of purchase for tax, accounting, and legal purposes.
Marketing data.
We keep your marketing preferences until you unsubscribe or ask us to delete your data.
Analytics data.
We retain anonymised analytics data for as long as it remains useful for improving our services.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to distinguish you from other users, improve your browsing experience, analyse website usage, and deliver targeted advertising.
Essential cookies.
Necessary for the website to function, such as enabling you to log in, add items to your basket, and complete checkout.
Analytics cookies.
Help us understand how visitors interact with our website by collecting information about pages visited and actions taken.
Marketing cookies.
Used to deliver relevant advertisements, track campaign effectiveness, and enable retargeting across other websites and platforms.
Third-party tracking.
We allow third-party advertising and analytics providers to collect data using cookies, pixels, web beacons, and device identifiers. This information may be used to analyse traffic, determine content popularity, and deliver advertising targeted to your interests.
You can manage your cookie preferences through your browser settings or our cookie consent tool. Please note that disabling certain cookies may affect the functionality of our website.
For more information about interest-based advertising and your choices, visit www.aboutads.info/choices.
For more details, please see our Cookie Policy.
Your Rights
Under UK data protection law, you have the following rights:
Right to information.
You have the right to know how we process your personal data (which this Privacy Policy explains).
Right of access.
You have the right to request a copy of the personal data we hold about you.
Right to rectification.
You have the right to request that we correct any inaccurate or incomplete personal data.
Right to erasure.
You have the right to request that we delete your personal data in certain circumstances. Please note we may keep a record of your name linked to your request.
Right to restrict processing.
You have the right to request that we restrict the processing of your personal data in certain circumstances. This won't prevent us from processing any new information you provide after your request.
Right to data portability.
You have the right to request a copy of your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
Right to object.
You have the right to object to processing of your personal data where we are relying on legitimate interests, or where we are processing your data for direct marketing purposes.
Right to withdraw consent.
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. For example, you can unsubscribe from marketing emails at any time.
To exercise any of these rights, please email privacy@csixactive.com. We will respond to your request within one month. We may ask you to verify your identity before taking action on your request.
Exceptions.
In certain scenarios, your rights may be limited, such as if you ask us to delete information we are required to hold by law. If this applies, we will let you know and explain why.
Marketing Opt-Outs
You can opt out of marketing communications at any time by:
Clicking the unsubscribe link in any marketing email; replying STOP to any marketing text message; updating your preferences in your account settings; or by contacting us.
It may take a few days for all our systems to update, so you may still receive communications while we process your request.
Please note that even if you opt out of marketing, we will still send you service communications about your orders and account, as these are necessary to fulfil our contract with you.
Location Data
We may collect information about your location based on your IP address or, with your consent, more precise location data from your device. You can disable location services in your device settings at any time, though this may affect certain features.
Data Security
We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, and access controls.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security. If you have concerns about security, please contact us.
Third-Party Links
Our website may contain links to third-party websites. These websites have their own privacy policies and we are not responsible for their practices. Please review their privacy policies before disclosing any personal data.
Children's Privacy
Our website and services are not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please email privacy@csixactive.com and we will delete such data.
Complaints
If you are unhappy with how we have handled your personal data, please contact us first or email privacy@csixactive.com so we can try to resolve your concerns.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Telephone: 0303 123 1113
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us or email privacy@csixactive.com.
Postal Address: Unit 1, Anglia Parkway, Ipswich, Suffolk, IP1 5QL, United Kingdom