Privacy Policy

1. Data Controller

The Data Controller is Emblexa Ltd, with registered office at 25 Deansgate, Manchester, M3 1AZ, United Kingdom, VAT GB 519 4827 38.

For any information regarding the processing of personal data, you can contact the Controller:

• Email: info@emblexa.com
• Address: 25 Deansgate, Manchester, M3 1AZ, United Kingdom

2. Types of Data Collected

Emblexa Ltd collects the following categories of personal data:

• Browsing data: IP addresses, browser type, operating system, pages visited
• Voluntarily provided data: name, surname, email, address, phone number
• Payment data: necessary to process orders (managed by secure external providers)
• Cookies and similar technologies: to improve browsing experience

3. Purposes of Processing

Personal data is processed for the following purposes:

• Order and shipping management
• Customer assistance and complaint handling
• Tax and accounting obligations
• Sending commercial communications (with prior consent)
• Statistical analysis and service improvement
• Fraud prevention and site security

4. Legal Basis for Processing

Data processing is based on:

• Contract: for the execution of requested orders and services
• Legal obligation: for tax and regulatory compliance
• Consent: for sending marketing communications
• Legitimate interest: for security and fraud prevention

5. Processing Methods

Data processing is carried out using IT and telematic tools, with organizational and logical methods strictly related to the indicated purposes. Data is protected by adequate technical and organizational security measures to ensure a level of security appropriate to the risk.

6. Data Communication and Disclosure

Personal data may be communicated to:

• Couriers and shippers for product delivery
• Banks and payment institutions for transactions
• Tax consultants and accountants for legal compliance
• Competent authorities for legal obligations
• IT and hosting service providers

Data will not be disclosed or sold to third parties for marketing purposes without explicit consent.

7. Extra-EU Data Transfer

Some services used (such as cloud services) may involve data transfer outside the European Union. In such cases, we ensure that providers guarantee adequate protection measures compliant with GDPR.

8. Retention Period

Personal data will be stored for:

• Order data: 10 years for tax obligations
• Marketing data: until consent is withdrawn
• Browsing data: maximum 12 months
• Technical cookies: session duration
• Analytics cookies: maximum 14 months

9. Data Subject Rights

Under Regulation EU 2016/679 (GDPR), the data subject has the right to:

• Access: obtain confirmation and information about processing
• Rectification: correct inaccurate or incomplete data
• Erasure: request data deletion ("right to be forgotten")
• Restriction: limit processing in certain circumstances
• Portability: receive data in a structured format
• Objection: object to processing for legitimate reasons
• Withdrawal of consent: withdraw consent at any time

To exercise these rights, contact the Controller at email address info@emblexa.com.

10. Cookie Policy

The site uses technical cookies necessary for operation and analytics cookies to improve user experience. For more information, see our Cookie Policy.

11. Minors

Emblexa Ltd services are not intended for minors under 18 years of age. We do not knowingly collect personal data from minors without parental consent.

12. Changes to Privacy Policy

The Controller reserves the right to modify this Privacy Policy at any time. Changes will be published on this page with an indication of the update date.

13. Complaints

The data subject has the right to lodge a complaint with the Information Commissioner's Office (ICO) (www.ico.org.uk) if they believe that the processing violates data protection regulations.