Privacy policy

Kervan Gida UK Limited, trading as Fruitinies ("we", "us", "our"), operates this website and online store, including all related information, content, features, tools, products and services (the "Services"). Our store is powered by Shopify.

This Privacy Policy explains how we collect, use and share your personal information when you visit or use the Services, make a purchase, or otherwise communicate with us. Where this Policy conflicts with our Terms of Service, this Policy applies in relation to personal information.

For the purposes of UK data protection law, Kervan Gida UK Limited is the data controller of your personal information. Our contact details are at the end of this Policy.

Please read this Policy carefully. By using the Services, you acknowledge that you have read it and understand how we handle your information.

Personal information we collect

"Personal information" means information that identifies you or can reasonably be linked to you. Depending on how you interact with the Services, we may collect:

Contact details — your name, billing address, delivery address, phone number and email address.
Payment information — payment card details, transaction details, payment method and payment confirmations. Card details are processed by our payment providers; we do not store full card numbers.
Account information — your username, password, preferences and settings.
Transaction information — the items you view, add to your basket or wishlist, and the orders you place, return, exchange or cancel, together with your order history.
Communications with us — the content of your messages to us, for example customer service enquiries, product feedback and reviews.
Device information — your device, browser and network details, IP address and other unique identifiers.
Usage information — how and when you interact with and navigate the Services.

Where we get your information

Directly from you — when you create an account, place an order, sign up to our emails, or contact us.
Automatically — from your device when you use the Services, including through cookies and similar technologies. See our Cookie Policy for details.
From our service providers — where they collect or process information on our behalf.
From our partners and other third parties — for example, social media platforms and advertising partners, where you have permitted this.

How we use your information, and our legal basis

Under UK GDPR we must have a lawful basis for using your personal information. Our bases are:

What we do	Why	Legal basis
Process and fulfil your orders, take payment, arrange delivery, handle returns and exchanges	To perform our contract with you	Performance of a contract
Create and manage your account	To provide the Services you have asked for	Performance of a contract
Respond to your enquiries and provide customer support	To help you and maintain our relationship with you	Legitimate interests
Send marketing emails and show you relevant advertising	To promote our products	Consent, or legitimate interests where you are an existing customer (soft opt-in)
Improve and personalise the Services, and analyse how they are used	To run and improve our business	Legitimate interests, and consent for non-essential cookies
Detect and prevent fraud, secure our systems, protect people	To keep the Services and our customers safe	Legitimate interests, and legal obligation
Keep accounting and tax records	To meet our statutory duties	Legal obligation
Establish, exercise or defend legal claims	To protect our rights	Legitimate interests

Where we rely on consent — for example for marketing emails or non-essential cookies — you can withdraw it at any time. Withdrawing consent does not affect processing carried out before you withdrew it.

Who we share your information with

Shopify, which hosts our store, and other service providers who act on our behalf — for example payment processing, IT and hosting, analytics, customer support, cloud storage, warehousing, fulfilment and delivery.
Marketing and advertising partners, where you have consented, so we can show you relevant advertising. These partners use your information in line with their own privacy notices.
Third parties you ask us to share with, for example when you use a social login or a social sharing feature.
Our affiliates and other companies within our group.
Others where required — in connection with a business sale, merger or reorganisation; to comply with legal obligations or valid legal requests; or to enforce our terms and protect our rights and the rights of others.

We do not sell your personal information.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes information about your access to and use of the Services in order to provide and improve them. Information you submit will be transmitted to Shopify and may be shared with third parties located outside the UK.

We also use certain Shopify enhanced features that draw on data about your interactions with our store, other merchants, and Shopify. For those features Shopify is responsible for processing your personal information, including for responding to requests about your rights. See the Shopify Consumer Privacy Policy at shopify.com/legal/privacy/app-users, and the Shopify Privacy Portal at privacy.shopify.com.

Cookies

We use cookies and similar technologies on the Services. Non-essential cookies are only set with your consent, which you give through our cookie banner and can change at any time. See our Cookie Policy for full details.

Third-party websites and links

The Services may link to websites operated by third parties. We do not control those sites and are not responsible for their content, privacy practices or security. Please read their own privacy notices before providing them with information. Including a link does not mean we endorse the site.

Children

Fruitinies products are made for children, but this website is intended for adults. The Services are not directed at children, and we do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child has given us their personal information, please contact us using the details below and we will delete it.

Security and retention

We take appropriate technical and organisational measures to protect your personal information. However, no system is completely secure and we cannot guarantee absolute security. Please do not send us sensitive or confidential information through insecure channels.

We keep your personal information only for as long as we need it:

Order and transaction records — 7 years, to meet HMRC and accounting requirements.
Account information — while your account is active, and for a reasonable period afterwards.
Marketing contact details — until you unsubscribe, or after a period of inactivity.
Customer service correspondence — normally up to 3 years.

We may keep information for longer where we need it to resolve a dispute, enforce our agreements, or comply with a legal obligation.

Your rights

Under UK data protection law you have the right to:

Be informed about how we use your personal information — this Policy.
Access the personal information we hold about you.
Rectification — ask us to correct inaccurate or incomplete information.
Erasure — ask us to delete your personal information in certain circumstances.
Restrict processing — ask us to limit how we use your information in certain circumstances.
Data portability — receive a copy of certain information in a machine-readable format, or ask us to transfer it to another controller.
Object — object to processing based on our legitimate interests, and object at any time to direct marketing.
Withdraw consent — where we rely on your consent.
Not be subject to automated decision-making that produces legal or similarly significant effects.

To exercise any of these rights, contact us using the details below. We may need to verify your identity first. We will respond within one month, which we may extend by up to two further months for complex requests — we will tell you if that happens. Exercising your rights is free of charge in most cases, and we will not treat you any differently for doing so.

You may also appoint someone to make a request on your behalf; we will ask for proof of their authority.

Marketing

You can unsubscribe from our marketing emails at any time using the link in any email, or by contacting us. We may still send you service messages about your account or orders.

Complaints

If you are unhappy with how we have handled your personal information, please contact us first so we can try to put it right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority:

Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Helpline: 0303 123 1113 ico.org.uk

International transfers

We may transfer, store and process your personal information outside the UK, including by our service providers.

Where we transfer personal information out of the UK, we rely on an appropriate safeguard — an adequacy decision made by the UK government, the UK International Data Transfer Agreement, or the UK Addendum to the European Commission's Standard Contractual Clauses.

Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or for operational, legal or regulatory reasons. We will post the updated version on this page and change the "Last updated" date. Where changes are significant, we will give you notice as required by law.