Privacy Policy

This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter "Data") by Empowered Products d.o.o., Pijavišće 17/G, 10000 Zagreb, Croatia (hereinafter "the Company" or "Controller") in connection with the website www.empoweredproducts.co.uk.

Our website and its underlying databases are hosted on a dedicated server located in France (OVHcloud). While our servers are located within the EEA, we ensure that all processing for UK users complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

To ensure a user-friendly experience, we use only strictly necessary functional cookies.

• The "Cart" Cookie: A persistent functional cookie used to remember your shopping cart contents. This is essential for the service you explicitly requested.

Legal Basis: UK GDPR Article 6(1)(f) (Legitimate Interest) and the Privacy and Electronic Communications Regulations (PECR). Because we do not use analytical, marketing, or third-party tracking cookies, no cookie consent banner is required under UK law.

We process data only for the following purposes:

Order Fulfillment: When you make a purchase, we process names, addresses, and payment info to fulfill your order. (Legal Basis: UK GDPR Art. 6(1)(b) - Performance of a Contract).

Inquiries: Data from contact forms is used solely to respond to your specific request. (Legal Basis: UK GDPR Art. 6(1)(f) - Legitimate Interest).

Newsletters: If you opt-in to our mailing list, we process your email address to send updates. (Legal Basis: UK GDPR Art. 6(1)(a) - Consent).

For the management of customer relationships and the fulfillment of orders, we utilize the following partners:

• Internal Platform: Our secure management system ("Access") is hosted on our dedicated infrastructure in France.
• Logistics & Fulfillment: Order details (name, shipping address, contact info) are shared with our fulfillment partner in the Netherlands to process and ship your purchases.
• Email Delivery: We use SendGrid (Twilio Inc.) for transactional and marketing emails. We ensure data protection via Data Processing Agreements and Standard Contractual Clauses (SCCs).

The Company maintains a strict "No-Share" policy. We do not sell, rent, or trade your personal information. Data is only disclosed to essential service providers (e.g., shipping carriers for delivery) or when legally mandated by public authorities.

We store your data only as long as necessary:

• Order Data: Retained for 6 years to comply with UK tax (HMRC) and commercial record-keeping requirements.
• Contact Inquiries: Deleted once the inquiry is resolved, unless a business relationship follows.
• Newsletter Data: Deleted immediately upon your unsubscription.

Under the UK GDPR, you have the right to access, rectify, or erase your data, and the right to restrict or object to processing. To exercise these rights, please contact us via our contact page. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.