Privacy policy

Last updated: July 23, 2025

This Privacy Policy explains how Cerfoma Ltd (“we”, “us”, “our” or the “Company”) collects, uses, shares, and protects your personal data when you visit or make a purchase from cerfoma.com (the “Site”), interact with us, or use any of our services (the “Services”).

By accessing or using our Services, you confirm that you have read and understood this Privacy Policy.


1. Who We Are

Cerfoma Ltd is a company registered in England and Wales. For the purposes of data protection laws in the UK and the EU, we are the “data controller” of your personal data.

If you have any questions or concerns, please contact us at:

Cerfoma Ltd
Company number: 16124866
Registered address: 15 Bayonne Silver Cross Way, Guiseley, Leeds, LS20 8FJ, United Kingdom
Email: info@cerfoma.com

2. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or for other operational reasons. We will post the updated version on our Site and revise the “Last updated” date accordingly.


3. What Personal Data We Collect

We collect the following categories of personal data, depending on your interaction with us:

a. Data You Provide Directly

  • Name, address, email, and phone number
  • Order and payment details (e.g., billing/shipping address)
  • Account login information (if applicable)
  • Communications you send us (e.g., via contact forms or email)

b. Data Collected Automatically

When you use our Site, we automatically collect:

  • IP address, browser and device information
  • Usage data and interaction history on the Site
  • Cookies and similar tracking technologies (see Section 6)

c. Data from Third Parties

We may receive your data from:

  • Shopify (our e-commerce platform)
  • Payment processors (e.g., Stripe, PayPal)
  • Advertising and analytics providers (e.g., Meta, Google)
  • Social media platforms or third-party integrations (when used)


4. How We Use Your Data

We use your personal data for the following purposes:

  • To process and deliver your orders
  • To manage your customer account
  • To provide customer support and respond to enquiries
  • To send order updates and service-related messages
  • To send marketing emails or SMS (if you opt in)
  • To improve and personalise our Services
  • To detect and prevent fraud or abuse
  • To comply with our legal obligations

Legal bases for processing include your consent, contract performance, legal obligations, and our legitimate interests (such as running and improving our business and marketing our products).


5. Sharing Your Data

We only share your personal data as necessary:

Category

Recipients

Contact, order, and payment info

Shopify, payment processors, couriers

Usage and analytics data

Analytics and marketing platforms

Marketing data

Email service providers and ad networks (only with your consent)

Legal compliance

Law enforcement or regulators where required by law

Business operations

Affiliates, hosting and IT service providers

We do not sell your personal data or share it for profiling without your explicit consent.


6. Cookies & Tracking Technologies

We use cookies and similar tools to:

  • Enable site functionality
  • Understand usage and improve performance
  • Show relevant ads on other websites

You can manage cookie preferences in your browser settings or via our cookie banner.

For more on Shopify’s cookie use, see: https://www.shopify.com/legal/cookies


7. Data Retention

We retain your personal data only as long as needed:

  • To fulfil the purposes for which we collected it
  • To comply with legal or accounting obligations
  • To resolve disputes or enforce our agreements

After the retention period, data is securely deleted or anonymised.


8. Your Rights (UK & EU)

Under the UK GDPR and EU GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Request corrections to inaccurate data
  • Erasure: Ask us to delete your data (“right to be forgotten”)
  • Restrict processing: Temporarily stop processing under certain conditions
  • Data portability: Receive your data in a structured format
  • Object: Opt out of processing for direct marketing or profiling
  • Withdraw consent: If you previously gave it
  • Complain: File a complaint with the UK ICO or your local authority

To exercise your rights, contact us at info@cerfoma.com


9. International Transfers

If we transfer your data outside the UK or EEA, we ensure appropriate safeguards are in place such as:

  • UK or EU Standard Contractual Clauses
  • Transfers to countries with adequacy decisions by the UK/EU


10. Children’s Data

Our Services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If we discover that a child has submitted data to us, we will delete it immediately.


11. Security Measures

We use reasonable administrative, technical, and physical safeguards to protect your personal data. However, no online platform is 100% secure, so please keep your account credentials confidential and notify us immediately if you suspect any breach.


12. Contact Us

If you have questions, concerns, or would like to exercise your rights, you may contact us:

Cerfoma Ltd
Company number: 16124866
Registered address: 15 Bayonne Silver Cross Way, Guiseley, Leeds, LS20 8FJ, United Kingdom
Email: info@cerfoma.com