Privacy policy

Last updated: 27 June 2026

 

1. Who We Are

This Privacy Policy explains how Izrito Ltd ("izrito", "we", "us", or "our") collects, uses, and protects your personal data when you visit or make a purchase from izrito.co.uk.

Izrito Ltd is registered in England and Wales. Our registered address is 20 Wenlock Road, London, N1 7GU. We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

For any data protection queries, please contact us at: hello@izrito.co.uk

 

2. What Personal Data We Collect

2.1 Data You Provide Directly

  • Name and contact details (email address, telephone number where provided)
  • Delivery and billing address
  • Payment information (processed securely by our payment provider — we do not store card details)
  • Account login credentials if you create an account
  • Communications you send to us (e.g. customer service enquiries)
  • Information you provide when signing up to our mailing list

2.2 Data Collected Automatically

  • Browsing behaviour on our website (pages visited, time spent, links clicked)
  • Device and browser information (IP address, browser type, operating system)
  • Referring website or search terms used to find us
  • Cookie and tracking data — see Section 6 for full details

 

3. How We Use Your Personal Data

We use your personal data for the following purposes and on the following legal bases:

  • Processing and fulfilling your order — Legal basis: Performance of a contract
  • Sending order confirmations, dispatch notifications, and tracking updates — Legal basis: Performance of a contract
  • Responding to customer service enquiries — Legal basis: Legitimate interests
  • Sending marketing emails where you have opted in — Legal basis: Consent
  • Improving our website and understanding how customers use it — Legal basis: Legitimate interests
  • Preventing fraud and maintaining security — Legal basis: Legitimate interests / Legal obligation
  • Complying with legal and regulatory obligations — Legal basis: Legal obligation

 

4. Third Parties We Share Data With

We do not sell your personal data. We share data only where necessary with trusted third parties who help us operate our business:

  • Shopify Inc. — our ecommerce platform and order management system
  • Google Analytics — website analytics and traffic analysis (anonymised where possible)
  • Judge.me — product review platform
  • Klaviyo — email marketing platform (where you have opted in to marketing)
  • Facebook / Meta — advertising and retargeting via Facebook Pixel
  • Royal Mail / courier partners — order fulfilment and delivery
  • Our payment processor — for secure payment handling

All third-party processors are required to handle your data in accordance with UK GDPR. We will update this policy when additional processors are engaged.

 

5. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • The right to access — request a copy of the data we hold about you
  • The right to rectification — ask us to correct inaccurate or incomplete data
  • The right to erasure — ask us to delete your data in certain circumstances
  • The right to restrict processing — ask us to limit how we use your data
  • The right to data portability — request your data in a machine-readable format
  • The right to object — object to processing based on legitimate interests or for direct marketing
  • Rights in relation to automated decision-making and profiling

To exercise any of these rights, please contact us at hello@izrito.co.uk. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

 

6. Cookies

Our website uses cookies — small text files stored on your device — to help the site function, analyse traffic, and (where you consent) personalise content and advertising.

  • Essential cookies — required for the website and checkout to function. Cannot be disabled.
  • Analytics cookies — used by Google Analytics to understand how visitors use our site. Data is anonymised where possible.
  • Marketing cookies — used by Facebook Pixel to measure ad performance and enable retargeting. Only set with your consent.
  • Preference cookies — remember your settings and choices.

You can manage your cookie preferences at any time using the cookie settings link in the footer of our website. You can also control cookies through your browser settings, though disabling essential cookies may affect site functionality.

 

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Specifically:

  • Order data is retained for 7 years to comply with HMRC requirements
  • Marketing data is retained until you withdraw consent or unsubscribe
  • Customer service correspondence is retained for 3 years
  • Analytics data is retained in accordance with Google Analytics' default retention settings

 

8. Data Security

We take the security of your personal data seriously. Our website is hosted on Shopify's secure platform, all payment processing is handled by PCI-DSS compliant processors, and we use SSL/TLS encryption for all data transmissions. Access to personal data is restricted to those who need it to operate our business.

No method of transmission over the internet is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

 

9. International Transfers

Some of our third-party service providers (including Shopify, Google, and Meta) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses or reliance on adequacy decisions.

 

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.


11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: