Privacy Policy

Last updated: 3 September 2026

1. Who we are

This website is operated by Pinzarium Ltd, a company registered in England and Wales under company number 16918502, registered office Flat 3, 343a Wellington Road North, Stockport, England, SK4 4QG.

Pinzarium Ltd is the data controller for the personal data described in this policy. For any question about this policy, or to exercise your rights, contact us using the details on our Contact page.

2. Customer service

For any question about this policy, to exercise your data protection rights, or for any other query, our customer service team can be reached at:

• Email: support@pinzarium.com
• Telephone: +44 7564 937024
• Address: Flat 3, 343a Wellington Road North, Stockport, England, SK4 4QG

3. Personal data we collect

• Contact and enquiry data — name, email address, telephone number, postal address and project details, when you complete a form or request a quote.
• Order and transaction data — items ordered, order value, billing and delivery address, and order status.
• Payment data — payments are processed by Stripe. Your full card number is entered directly into Stripe systems and is never received or stored by us. We receive only limited confirmation data such as the last four digits, card type and whether the payment succeeded.
• Technical data — IP address, browser type and version, device type, operating system and pages visited, collected through cookies and similar technologies.

4. How and why we use your data

Purpose	Lawful basis (UK GDPR)
Responding to enquiries and preparing quotes	Steps taken at your request before entering a contract
Processing, fulfilling and delivering orders	Performance of a contract
Taking payment and preventing payment fraud	Performance of a contract; legitimate interests
Keeping accounting and tax records	Legal obligation
Website security and preventing misuse	Legitimate interests
Analytics to improve the website	Consent, which you may withdraw at any time
Marketing emails where you have opted in	Consent

5. Who we share your data with

• Stripe — our payment service provider. Stripe processes payment information on our behalf in accordance with its own privacy policy and applicable terms.
• Delivery and courier partners — to deliver goods to your address.
• Our web host and IT providers — who process data on our instructions under written contracts.
• Professional advisers and authorities — our accountants, or regulators and law enforcement where disclosure is legally required.

We do not sell or rent your personal data to third parties.

6. Automated fraud detection

Stripe analyses transaction and device data to detect and prevent fraudulent payments. This involves automated processing which may result in a payment being declined. This processing is necessary for the performance of our contract with you and to prevent fraud. If a payment is declined and you believe this is incorrect, contact us and we will review the decision manually.

7. International transfers

Some of our service providers, including Stripe, are located outside the United Kingdom or transfer data to countries outside the UK, including the United States. Where personal data is transferred outside the UK we ensure an appropriate safeguard is in place. This will normally be the UK International Data Transfer Addendum to the European Commission Standard Contractual Clauses, or a determination by the UK government that the destination country provides adequate protection. You may request a copy of the relevant safeguard by contacting us.

8. How long we keep your data

• Enquiries that do not become orders — up to 2 years from your last contact with us.
• Order, payment and accounting records — 6 years from the end of the relevant accounting period, as required by UK tax law.
• Marketing consents — until you withdraw your consent.
• Website analytics data — up to 26 months.

9. Your rights

Under UK GDPR you have the right to request access to your personal data, to have inaccurate data corrected, to request erasure, to restrict or object to processing, and to receive your data in a portable format. Where processing is based on consent you may withdraw that consent at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise any of these rights, contact us using the details on our Contact page. We will respond within one month.

If you are unhappy with how we have handled your data you may complain to the Information Commissioner Office at ico.org.uk, by calling 0303 123 1113, or by writing to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

10. Security

This website uses encrypted HTTPS connections. Card details are handled entirely within the PCI-DSS compliant environment operated by Stripe and never pass through our servers. Access to personal data within our business is limited to those who need it for their role.

11. Cookies

See our Cookie Policy for details of the cookies we use and how to change your preferences at any time.

12. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised.