Privacy policy

Last updated: January 5th, 2026

This Privacy Policy explains how PINKYFITS Ltd. (“we”, “us”, or “our”) collects, uses, stores, shares, and protects your personal data when you visit our website, purchase products from us, sign up to our communications, or otherwise interact with us.

We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), the UK Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Important Information and Who We Are

Purpose of This Privacy Policy

This Privacy Policy aims to give you clear information on how we collect and process your personal data and your rights in relation to that data.

Controller

PINKYFITS Ltd. is the data controller responsible for your personal data.

  • Company Address: Forth House, 28 Rutland Square, Edinburgh EH1 2BW  
  • Email: privacy@pinkyfits.com

If you have any questions about this Privacy Policy, or if you wish to exercise your legal rights, please contact us using the details above.

2. Scope of This Policy

This Privacy Policy applies to personal data collected when you:

  • Visit or browse our website
  • Purchase products from us
  • Create an account (if applicable)
  • Sign up to receive marketing communications
  • Contact us with enquiries or feedback
  • Participate in promotions, competitions, or surveys

We sell products in the UK and EU and may also accept international orders. Where local laws apply in addition to UK/EU GDPR, we will comply with those laws where required.

3. Children’s Data

Our website and products are not intended for children, and we do not knowingly collect personal data relating to children.

If you believe that a child has provided us with personal data without appropriate consent, please contact us at privacy@pinkyfits.com, and we will take steps to delete that data promptly.

4. Personal Data We Collect

Personal data means any information that identifies, relates to, or could reasonably be linked to an identifiable individual.

We may collect, use, store, and transfer the following categories of personal data:

A. Identity Data

  • Full name
  • Date of birth

B. Contact Data

  • Billing address
  • Delivery address
  • Email address
  • Telephone number

C. Transaction Data

  • Details of products purchased
  • Order numbers
  • Payment status
  • Refunds and returns

D. Payment and Financial Data

  • Payment method
  • Partial payment card details (such as last four digits), expiry 
  • Transaction references

We do not store full payment card details. All payments are processed securely by third-party payment service providers.

E. Profile Data

  • Customer account details (if applicable)
  • Purchase history
  • Preferences
  • Feedback and survey responses

F. Marketing and Communications Data

  • Email sign-up status
  • Marketing preferences
  • Records of consent and opt-outs

G. Technical Data

  • Internet Protocol (IP) address
  • Browser type and version
  • Device type and operating system
  • Time zone setting and approximate location
  • Unique device identifiers

H. Usage Data

  • Information about how you use and interact with our website, products, and services

I. Aggregated and Anonymised Data

We may collect and use aggregated or anonymised data for analytical, statistical, and research purposes. This data does not identify you and is not personal data under data protection laws.

5. How We Collect Personal Data

We collect personal data through the following methods:

Direct Interactions

You may provide personal data when you:

  • Purchase products
  • Complete website forms
  • Sign up to marketing communications
  • Contact us by email or other means
  • Provide feedback or participate in surveys or promotions

Automated Technologies

As you interact with our website, we automatically collect Technical and Usage Data through:

  • Cookies
  • Server logs
  • Analytics tools

Please see our Cookie Policy for further details.

Third Parties

We may receive personal data from:

  • Payment providers
  • Delivery and logistics providers
  • Analytics and advertising partners
  • Technical service providers

6. How We Use Your Personal Data

We only use your personal data where the law allows us to do so.

Lawful Bases for Processing

We rely on one or more of the following lawful bases:

  • Performance of a contract – to process and deliver your orders
  • Legal obligation – to comply with tax, accounting, and regulatory requirements
  • Legitimate interests – to operate and improve our business, prevent fraud, and ensure security
  • Consent – for marketing communications and non-essential cookies

Purposes for Processing

We use personal data to:

  • Register and manage customers
  • Process orders, payments, refunds, and deliveries
  • Communicate with you about orders and services
  • Manage customer enquiries, complaints, and feedback
  • Send marketing communications (where permitted)
  • Improve our website, products, and services
  • Administer and protect our business and website
  • Prevent fraud and misuse

7. Marketing and Communications

You will receive marketing communications from us if:

  • You have actively signed up to receive them; or
  • You have purchased products from us and have not opted out, where permitted by law

You can opt out of marketing communications at any time by:

Opting out of marketing will not affect service-related communications such as order confirmations.

8. Cookies and Similar Technologies

We use cookies and similar technologies to:

  • Enable website functionality
  • Improve website performance
  • Analyse usage
  • Deliver relevant advertising

Strictly necessary cookies are always enabled.
Non-essential cookies are used only with your consent.

For further details on cookies, see our Cookie Policy.

9. Online Advertising and Social Media

We may use online advertising and social media platforms (such as Meta, Google, TikTok, or similar services) to:

  • Promote our products
  • Measure advertising performance
  • Deliver targeted advertising

These platforms may process personal data independently, in line with their own privacy policies. You can manage your preferences through our cookie settings and the controls provided by each platform.

Social media advertising platforms may also use this data for their own purposes as independent data controllers, including combining it with other information they hold about you. Further details on how each platform processes your data are available in their respective privacy policies.

10. Disclosures of Your Personal Data

We may share your personal data with trusted third parties, including:

  • Payment service providers
  • Delivery and logistics providers
  • Website hosting and IT service providers
  • Email marketing platforms
  • Analytics and advertising partners
  • Professional advisers (legal, accounting, insurers)
  • Regulators and authorities where required by law

We may also disclose personal data in connection with a business sale, merger, or restructuring.

All third parties are required to respect the security of your personal data and process it only in accordance with our instructions and the law.

11. International Transfers

We may transfer your personal data to service providers that carry out certain functions on our behalf. This may involve transferring personal data outside the UK to countries which have laws that do not provide the same level of data protection as the UK law.

Whenever we transfer your personal data out of the UK to service providers, we ensure a similar degree of protection is afforded to it by ensuring that the following safeguards are in place:

  • We will only transfer your personal data to countries that have been deemed by the UK to provide an adequate level of protection for personal data.

12. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. Access to personal data is restricted to employees, agents, contractors, and third parties who have a legitimate business need and who are subject to confidentiality obligations and required to process data only on our instructions.

We also have procedures in place to manage suspected personal data breaches and will notify affected individuals and relevant regulators where legally required.

13. Data Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including legal, regulatory, tax, accounting, and reporting obligations. Retention periods are determined by considering the nature and sensitivity of the data, the purposes of processing, potential risks, and applicable legal requirements.

In general:

  • Customer and transaction data is retained for up to six years to meet legal and tax obligations
  • Marketing data is retained until you opt out
  • Technical and usage data is retained in line with applicable analytics retention policies

We may retain personal data for longer where there is a complaint or a reasonable prospect of litigation. In some circumstances, personal data may be anonymised for research or statistical purposes, in which case it may be used indefinitely.

You may request deletion of your personal data in certain circumstances, as outlined.

14. Your Legal Rights

Under UK GDPR and EU GDPR, you have the right to:

  • Request access to your personal data
  • Request correction of inaccurate data
  • Request erasure of your personal data
  • Restrict processing
  • Object to processing (including direct marketing)
  • Request data portability
  • Withdraw consent at any time

Requests are generally free of charge. We aim to respond within one month, although complex requests may take longer.

To exercise your rights, contact privacy@pinkyfits.com.

You have the right to make a complaint to the UK Information Commissioner’s Office (ICO) or your local EU supervisory authority.

We would appreciate the opportunity to address your concerns first, so please contact us directly.

16. Accuracy of Personal Data

It is important that the personal data we hold about you is accurate and up to date. Please inform us if your details change during your relationship with us.

17. Third-Party Links

Our website may include links to third-party websites. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

18. Changes to This Privacy Policy

We keep this Privacy Policy under regular review and may update it from time to time. Any changes will be posted on this page, and the “Last updated” date will be revised.

Contact Us

If you have questions about this Privacy Policy or your personal data:

📧 privacy@pinkyfits.com