PRIVACY POLICY

REFABY Ltd is a company registered in the United Kingdom and operates the website refaby.co.uk.

REFABY Ltd is the data controller for personal information we collect through our website.

For privacy enquiries, please contact support@refaby.co.uk.

When you browse our website, place an order, contact us or create an account, we may collect the following information:

• Contact details: Your name, email address, telephone number and billing or delivery address.
• Order information: Products purchased, order history, delivery preferences, cancellations, returns and refunds.
• Account information: Account identifiers, login information and preferences used to manage your REFABY account.
• Payment information: Transaction references, payment status and limited payment details provided by our payment partners. We do not store full payment card numbers.
• Technical information: IP address, browser, device details and website usage information where collected.
• Marketing preferences: Newsletter subscriptions and your communication preferences.

We use your information to:

• Process orders, payments, deliveries, returns and refunds.
• Create and manage customer accounts.
• Respond to enquiries and provide customer support.
• Send order confirmations and delivery updates.
• Send marketing communications where permitted by law.
• Protect our website, prevent fraud and resolve technical issues.
• Improve our services and shopping experience.
• Comply with legal, accounting and tax obligations.

Depending on the activity, our lawful basis may be performance of a contract, compliance with a legal obligation, our legitimate interests or your consent.

Where we rely on legitimate interests, we consider your rights and expectations before processing your information.

REFABY may offer the option to create an account or sign in using Google or Facebook.

If you choose social login, we may receive your name, email address and a unique account identifier, depending on the provider and permissions granted.

We use this information to create or identify your REFABY account and provide access to account features.

We do not receive your Google or Facebook password.

Social login is optional. You can continue using other available account or guest checkout options.

For more information, please review the Google Privacy Policy and Meta Privacy Policy.

Our website uses cookies and similar technologies to support essential functions such as shopping baskets, checkout sessions, account authentication and website security.

We may also use optional analytics and marketing technologies to understand website performance and improve our services.

Where required by UK privacy law, we will ask for your consent before using non-essential cookies or similar tracking technologies.

You can manage cookies through your browser settings and any cookie preference controls available on our website.

We share personal information with service providers where reasonably necessary to operate our business. These may include:

• Website and hosting services: WordPress, WooCommerce and our hosting provider.
• Payment providers: Stripe and other payment services enabled at checkout.
• Delivery partners: Couriers and return-shipping providers.
• Email services: MailPoet and relevant email delivery providers.
• Social login providers: Google and Facebook, when you choose their services.

We may also disclose information where required by law.

Some service providers may process information outside the UK. Where required, appropriate safeguards are used for international transfers.

We retain information only for as long as reasonably necessary for the purposes described in this policy, including applicable legal, accounting, tax and dispute-resolution requirements.

Under applicable UK data protection law, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion in certain circumstances.
• Object to or restrict certain processing.
• Request transfer of eligible personal information.
• Withdraw consent where processing is based on consent.

You can unsubscribe from marketing emails using the unsubscribe link in those messages.

To exercise your rights, email support@refaby.co.uk.

You can also raise concerns with the UK's Information Commissioner's Office at ico.org.uk.

If you would like to delete your REFABY account or request deletion of personal information associated with your account, including information received through Google or Facebook Login, please email support@refaby.co.uk with the subject Data Deletion Request.

Please tell us the email address associated with your REFABY account. For your security, we may ask you to verify that you own the account before acting on your request. Please do not send passwords or payment card details.

Once verified, we will review your request and delete or anonymise eligible account information and social-login associations where applicable. Some information, including order, payment and transaction records, may need to be retained where required for legal, tax, accounting or dispute-resolution purposes.

We will respond without undue delay, normally within one month, subject to any lawful extension or applicable exception. If we cannot delete certain information, we will explain why.

You may also disconnect REFABY from your Facebook or Google account through that provider's settings. Disconnecting the provider does not itself delete your REFABY account or order records, so please contact us if you also want to request deletion from REFABY.

For questions about this Privacy Policy or how REFABY handles your personal information, please contact:

REFABY Ltd
Website: refaby.co.uk
Email: support@refaby.co.uk

We may update this policy to reflect changes in our services or legal requirements. The latest version will be available on this page.

Last updated: 20 October 2026