Privacy Policy
Fantazia Fireworks Ltd

Fantazia Fireworks Ltd is responsible for processing your personal data in accordance with this privacy policy. Here’s our information:

Company Name: Fantazia Fireworks Ltd

Company Registration Number: 13882594

Registered Office: 

Email: info@fantaziafireworks.co.uk

Phone: 01527 272 832 - 07790 294 111

Website: www.fantaziafireworks.co.uk

To make this policy more user-friendly, we use “we,” “us,” “our,” etc., to describe our company. When we talk about our “website,” we mean www.fantaziafireworks.co.uk. When we refer to “you,” we mean users of our website or customers of our online services or products.

Links to Other Websites

On our website, in our emails, and on our social media profiles, we may provide links to other companies, apps, or websites (“other websites”) that are not ours. This policy does not cover how those websites process your data. We encourage you to read their privacy policies before providing any personal data.

Why, What, and How Long We Process Your Data

We process your personal data for the following purposes:

1. Delivering Our Services & Products

We process your data to provide our services, contact you, process orders, manage accounts, and provide customer support.

Data Processed:

• Contact details: name, email, phone number
• Company details: business name, address, country
• Purchase history
• Account login details
• Payment information
• Customer interactions, such as support queries

Legal Bases:

• Your consent (GDPR Article 6.1.a)
• To perform our contract with you (GDPR Article 6.1.b)
• To comply with legal obligations (GDPR Article 6.1.c)
• Legitimate business interests (GDPR Article 6.1.f)

Retention Period: Data is kept as long as necessary for service delivery plus five years after termination of your account/relationship with us.

2. Marketing

We may process your data for marketing purposes, including sending newsletters and promotional offers.

Data Processed:

• Contact details
• Purchase history
• Marketing preferences
• Event participation details

Legal Bases:

• Your consent (GDPR Article 6.1.a)
• Contract performance (GDPR Article 6.1.b)
• Compliance with legal obligations (GDPR Article 6.1.c)
• Legitimate business interests (GDPR Article 6.1.f)

Retention Period: Data is kept as long as you subscribe to marketing communications. If you unsubscribe, we retain your data for two years to prevent further marketing.

3. Website and Service Optimization

We process data to improve our website and services.

Data Processed:

• IP address
• Browser type
• Cookies
• Website interactions

Legal Bases:

• Your consent (GDPR Article 6.1.a)
• Contract performance (GDPR Article 6.1.b)
• Compliance with legal obligations (GDPR Article 6.1.c)
• Legitimate business interests (GDPR Article 6.1.f)

Retention Period: Data is retained for up to two years.

4. Business and Product Development

We analyse customer data for business insights and improvements.

Data Processed:

• Contact details
• Purchase history
• Website usage

Legal Bases:

• Your consent (GDPR Article 6.1.a)
• Contract performance (GDPR Article 6.1.b)
• Compliance with legal obligations (GDPR Article 6.1.c)
• Legitimate business interests (GDPR Article 6.1.f)

Retention Period: Data is retained for up to three years after your last interaction with us.

5. Statistical Analysis

We compile website usage statistics.

Data Processed:

• IP address
• Cookie data

Legal Bases:

• Your consent (GDPR Article 6.1.a)
• Compliance with legal obligations (GDPR Article 6.1.c)
• Legitimate business interests (GDPR Article 6.1.f)

Retention Period: Data is retained for up to three years.

6. Legal Compliance

We process data to comply with regulatory requirements.

Data Processed:

• Contact details
• Purchase records
• Governmental authority requests

Retention Period: Data retention complies with statutory legal requirements.

Keeping Your Data Safe

We implement technical and organizational measures to secure your data. However, the Internet is not 100% secure, and we advise against sharing sensitive information via email.

Third-Party Processors

We use service providers to help deliver our services, including:

• Email and CRM: Mailchimp
• Hosting: 123 Reg owned by GoDaddy

We ensure that our processors have appropriate security measures and legal agreements in place.

International Data Transfers

We may transfer your data outside the UK/EU, including to the USA. We ensure these transfers comply with data protection regulations through:

Standard Contractual Clauses (SCCs) approved by the EU/UK authorities.

Your Rights

You have the following rights under GDPR:

• Access & Rectification: Request access to or correction of your data.
• Erasure: Request deletion of your data under certain conditions.
• Withdraw Consent: Withdraw consent where processing is based on consent.
• Restrict Processing: Request processing restrictions in certain cases.
• Object to Processing: Object to data use, including for marketing.
• Data Portability: Request a structured, machine-readable copy of your data.

To exercise your rights, contact us via info@fantaziafireworks.co.uk.

Complaints

If you believe we have mishandled your data, you have the right to file a complaint with the UK’s Information Commissioner’s Office (ICO) at www.ico.org.uk.

Changes to This Policy

We may update this policy to reflect changes in our practices. Any significant updates will be communicated via our website or email.