Privacy Policy

1. Data Controller

Shryxellez is the data controller responsible for your personal data. Our registered address is Old Station House, Montpelier, Bristol BS6 5EE, United Kingdom. You can contact us by post at that address or by telephone on +44 117 944 4449.

2. Information We Collect

When you use our contact form or get in touch with us, we collect your name, email address and the content of your message. We do not collect sensitive personal data. We do not collect payment card details via this website.

3. Lawful Basis and Purpose

We process your data on the basis of your consent (when you submit the contact form) and, where a contract or enquiry is in progress, for the performance of a contract. We use your information only to respond to enquiries, provide quotations, fulfil orders and comply with legal obligations. We do not use your data for unsolicited marketing unless you have given separate consent.

4. Data Storage and Retention

Your data is stored on UK-based systems. We keep enquiry and order data for as long as necessary to deal with your request, fulfil the contract and meet legal obligations (for example under tax or consumer law). Typically we retain contact and order information for up to six years after the last transaction. After that, we delete or anonymise the data.

5. Your Rights Under UK Law

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 you have the right to: request access to your personal data; request correction of inaccurate data; request erasure of your data in certain circumstances; restrict or object to processing in certain circumstances; data portability where applicable; and withdraw consent at any time where we rely on consent. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK: ico.org.uk/make-a-complaint. We do not use automated decision-making or profiling.

6. Sharing and Transfers

We do not sell your data. We may share your data only with service providers necessary to run our business (for example, email or hosting providers) and only under strict confidentiality. We do not transfer your personal data outside the United Kingdom unless we have put in place appropriate safeguards as required by UK law.