Privacy policy

This Privacy Policy explains how fanormw.shop collects, uses, stores, shares, and protects personal information when you visit our website, place an order, create or use a customer account, contact us, subscribe to marketing communications, request customer support, or otherwise interact with our store.

This Privacy Policy applies to personal information processed through fanormw.shop and through the services used to operate our online store, process payments, fulfil orders, provide customer support, prevent fraud, analyse website performance, and conduct marketing activities.

For the purposes of applicable UK data protection law, fanormw.shop acts as the controller of the personal information described in this Privacy Policy, except where another organisation acts independently as a controller for its own services.

1. Contact Information

For questions about this Privacy Policy, requests concerning your personal information, marketing preferences, or data protection complaints, contact:

Store: fanormw.shop
Email: info@fanormw.shop

Please state clearly in the subject line whether your message concerns:

  • A privacy enquiry

  • A data protection rights request

  • A data protection complaint

  • A marketing preference

  • A suspected security incident

  • An order-related privacy concern

2. Data Protection Laws

We process personal information in accordance with applicable UK data protection and electronic communications laws, including:

  • The UK General Data Protection Regulation

  • The Data Protection Act 2018

  • The Data Use and Access Act 2025

  • The Privacy and Electronic Communications Regulations 2003

  • Other applicable consumer, ecommerce, tax, accounting, fraud-prevention, and regulatory requirements

Where mandatory legal requirements conflict with this Privacy Policy, the applicable legal requirement will take priority.

3. Personal Information We Collect

The personal information we collect depends on how you interact with fanormw.shop.

Information You Provide Directly

We may collect information that you provide when you:

  • Place or attempt to place an order

  • Create or update a customer account

  • Subscribe to marketing communications

  • Contact customer service

  • Request an order cancellation

  • Request a return, exchange, or refund

  • Report a damaged, faulty, incorrect, or missing product

  • Submit a review, survey response, or website form

  • Participate in a promotion

  • Exercise a data protection right

  • Make a privacy or data protection complaint

This information may include:

  • Full name

  • Email address

  • Telephone number

  • Billing address

  • Delivery address

  • Account login details

  • Order number

  • Products purchased or requested

  • Product size, colour, quantity, and preferences

  • Delivery instructions

  • Customer service correspondence

  • Return, refund, and cancellation information

  • Photographs or videos submitted in connection with an order problem

  • Product reviews

  • Marketing preferences

  • Information included in privacy requests or complaints

  • Any other information you voluntarily provide

Order and Transaction Information

When you place or attempt to place an order, we may collect:

  • Products viewed, selected, or purchased

  • Basket contents

  • Order value

  • Discounts and promotional codes

  • Transaction date and time

  • Payment status

  • Shipping method

  • Delivery status

  • Tracking information

  • Return and refund history

  • Chargeback or payment-dispute information

  • Fraud and security indicators

Payment Information

Payments are processed through Shopify and the payment providers offered at checkout.

Depending on your selected payment method, the payment provider may collect:

  • Payment card details

  • Bank or digital-wallet information

  • Billing details

  • Authentication information

  • Transaction identifiers

  • Payment authorisation results

  • Fraud-prevention information

We generally receive confirmation of payment, payment status, limited payment details, and information necessary to process the order.

Complete payment card details are generally processed directly by the relevant payment provider and are not normally stored directly by fanormw.shop.

Customer Account Information

If customer accounts are available, we may collect:

  • Name

  • Email address

  • Password or authentication credentials

  • Saved delivery addresses

  • Order history

  • Account preferences

  • Communication preferences

  • Account activity

  • Login and security information

You are responsible for keeping your login information confidential and notifying us promptly if you suspect unauthorised access.

Information Collected Automatically

When you visit or interact with fanormw.shop, we and our authorised service providers may automatically collect:

  • Internet Protocol address

  • Browser type and version

  • Device type

  • Device identifiers

  • Operating system

  • Language settings

  • Time zone

  • Approximate location derived from an IP address

  • Referring website or advertising source

  • Pages and products viewed

  • Search terms

  • Links and buttons selected

  • Basket and checkout activity

  • Session dates and duration

  • Cookie identifiers

  • Website preferences

  • Technical errors

  • Website performance information

  • Fraud and security signals

This information may be collected through cookies, tracking pixels, scripts, tags, server logs, web storage, software development kits, and similar technologies.

Information Received from Other Sources

We may receive personal information from:

  • Shopify

  • Payment processors

  • Banks and card networks

  • Digital-wallet providers

  • Delivery companies

  • Warehouses and fulfilment providers

  • Suppliers

  • Fraud-prevention and security providers

  • Marketing and advertising platforms

  • Analytics providers

  • Customer service applications

  • Review and survey providers

  • Social media platforms

  • Professional advisers

  • Public authorities

  • Other parties where permitted by law

For example, a delivery company may provide tracking or delivery-status information, and a payment provider may notify us whether a transaction was approved, declined, disputed, reversed, or refunded.

4. How We Use Personal Information

We use personal information only where we have a lawful reason to do so.

Processing and Fulfilling Orders

We use personal information to:

  • Receive and review orders

  • Verify order details

  • Authorise and process payments

  • Confirm product availability

  • Package and fulfil orders

  • Arrange shipping and delivery

  • Send order confirmations

  • Provide tracking information

  • Communicate about an order

  • Process cancellations

  • Manage returns and exchanges

  • Issue refunds

  • Resolve delivery and payment problems

  • Maintain transaction records

The legal basis is normally the performance of a contract or taking steps at your request before entering into a contract.

Providing Customer Support

We use personal information to:

  • Respond to customer enquiries

  • Verify customer and order information

  • Investigate complaints

  • Resolve damaged, faulty, incorrect, or missing-item claims

  • Provide return instructions

  • Handle refund requests

  • Communicate about delivery problems

  • Maintain records of customer communications

The legal bases may include performance of a contract, compliance with legal obligations, and our legitimate interests in providing effective customer service.

Operating and Improving the Website

We may use information to:

  • Operate website functions

  • Maintain shopping baskets

  • Support checkout

  • Remember customer preferences

  • Improve website navigation

  • Diagnose technical problems

  • Monitor website availability

  • Measure website performance

  • Understand how visitors use the store

  • Test new functions

  • Improve products and customer services

  • Maintain website security

The legal bases may include legitimate interests and, where required, consent.

Preventing Fraud and Protecting Security

We may process information to:

  • Detect suspicious transactions

  • Prevent payment fraud

  • Verify account or order activity

  • Prevent unauthorised account access

  • Protect customer information

  • Prevent misuse of discounts and promotions

  • Investigate false delivery or return claims

  • Respond to chargebacks

  • Protect payment systems

  • Enforce store policies

  • Detect malware and cyberattacks

  • Establish, exercise, or defend legal claims

The legal bases may include legitimate interests, compliance with legal obligations, and the establishment, exercise, or defence of legal claims.

Marketing and Advertising

Where permitted by law, we may use personal information to:

  • Send promotional emails

  • Inform customers about products and offers

  • Personalise marketing content

  • Measure marketing performance

  • Understand whether advertising resulted in a website visit or purchase

  • Create advertising audiences

  • Display relevant advertisements

  • Limit repeated advertisements

  • Improve marketing campaigns

We rely on consent where consent is required.

In limited circumstances, we may rely on the electronic marketing soft opt-in for existing customers where:

  • We obtained the contact details directly during a sale or genuine sales enquiry

  • The marketing concerns similar products or services

  • We provided a clear opportunity to opt out when collecting the information

  • Every marketing message includes a simple method to unsubscribe

You may unsubscribe at any time by using the unsubscribe option in a marketing message or contacting info@fanormw.shop.

Unsubscribing from marketing does not stop essential service messages, including order confirmations, delivery notices, refund confirmations, security communications, or responses to enquiries.

Analytics

Subject to applicable consent requirements, we may use analytics information to:

  • Count website visits

  • Understand customer journeys

  • Identify popular products

  • Measure page performance

  • Monitor checkout completion

  • Diagnose website problems

  • Improve website design and content

  • Measure advertising effectiveness

Where analytics technologies require consent, they will be activated only after the relevant consent is provided.

Legal and Regulatory Compliance

We may process and retain information to:

  • Comply with tax and accounting obligations

  • Comply with consumer protection law

  • Respond to lawful requests

  • Maintain required transaction records

  • Process data protection requests

  • Handle privacy complaints

  • Investigate disputes

  • Enforce contracts

  • Defend legal claims

  • Cooperate with regulators, courts, or law enforcement authorities

The legal basis is normally compliance with a legal obligation or our legitimate interests in protecting our rights.

5. Lawful Bases for Processing

Depending on the processing activity, we may rely on one or more of the following lawful bases.

Contract

Processing is necessary to enter into or perform a contract with you, including processing, fulfilling, delivering, returning, or refunding an order.

Legal Obligation

Processing is necessary to comply with an obligation imposed by law, including tax, accounting, consumer protection, data protection, fraud-prevention, and regulatory requirements.

Legitimate Interests

Processing is necessary for our legitimate interests or those of another party, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

  • Operating and improving fanormw.shop

  • Providing customer support

  • Maintaining accurate records

  • Preventing fraud

  • Securing the website

  • Understanding store performance

  • Managing disputes

  • Protecting legal rights

  • Communicating with existing customers where permitted

  • Preventing misuse of our services

Consent

We may rely on consent for:

  • Certain marketing communications

  • Non-essential analytics technologies

  • Advertising cookies and pixels

  • Personalised advertising

  • Other optional processing activities

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Legal Claims

We may process information where necessary to establish, exercise, or defend legal claims.

6. Cookies and Similar Technologies

fanormw.shop uses cookies and similar storage or access technologies.

These technologies may include:

  • Cookies

  • Tracking pixels

  • Scripts

  • Tags

  • Web storage

  • Device identifiers

  • Link-tracking technologies

  • Similar browser or device technologies

Strictly Necessary Technologies

Strictly necessary technologies support essential functions such as:

  • Page navigation

  • Shopping baskets

  • Checkout

  • Payment processing

  • Account login

  • Security

  • Fraud prevention

  • Network management

  • Remembering privacy choices

These technologies may operate without consent where permitted by law because they are necessary to provide a service requested by the user or qualify for another legal exception.

Functional Technologies

Functional technologies may remember:

  • Language

  • Region

  • Display preferences

  • Customer account settings

  • Previously selected options

  • Other website preferences

Where consent is required, these technologies will only operate after consent is provided.

Analytics Technologies

Analytics technologies help us understand:

  • Website traffic

  • Page performance

  • Product popularity

  • Customer journeys

  • Technical errors

  • Checkout activity

  • Marketing effectiveness

Where required by law, analytics technologies will only be used after consent is provided.

Advertising Technologies

Advertising technologies may be used to:

  • Display relevant advertisements

  • Measure advertisement performance

  • Attribute purchases to advertising campaigns

  • Create advertising audiences

  • Limit advertisement frequency

  • Understand interaction with advertisements

  • Personalise marketing where permitted

Advertising technologies requiring consent will not be activated until the relevant consent is provided.

Managing Cookie Preferences

You may manage available cookie and tracking preferences through:

  • The cookie banner displayed on fanormw.shop

  • The website’s privacy settings

  • Your browser settings

  • Device privacy settings

  • Applicable advertising-platform controls

You may withdraw or change consent at any time through the available privacy controls.

Blocking strictly necessary technologies may prevent essential website functions, including checkout, basket management, account login, and payment processing.

7. Shopify

fanormw.shop is hosted and supported by Shopify.

Shopify provides ecommerce infrastructure that may be used to:

  • Host the website

  • Display products

  • Maintain shopping baskets

  • Operate checkout

  • Process orders

  • Support customer accounts

  • Provide payment functions

  • Detect fraud

  • Provide security

  • Manage store data

  • Support analytics and privacy controls

Shopify may process personal information on our behalf as a service provider.

For certain Shopify features and enhanced services, Shopify may also process information for purposes determined by Shopify and may act as an independent or joint controller where applicable.

Customers may use Shopify’s privacy controls or privacy portal where available to learn more about Shopify’s processing and exercise applicable choices concerning Shopify services.

8. How We Share Personal Information

We may share personal information only where reasonably necessary for the purposes described in this Privacy Policy.

Shopify and Technical Providers

We may share information with Shopify and providers that host, secure, maintain, or support fanormw.shop.

Payment Providers

Payment processors, banks, card networks, and digital-wallet providers may receive information required to:

  • Authorise payments

  • Authenticate customers

  • Prevent fraud

  • Process refunds

  • Handle payment disputes

  • Comply with financial regulations

Delivery and Fulfilment Providers

We may share information with:

  • Warehouses

  • Suppliers

  • Fulfilment providers

  • Couriers

  • Postal operators

  • Tracking providers

  • Delivery partners

The information shared may include:

  • Customer name

  • Delivery address

  • Telephone number

  • Email address

  • Order contents

  • Delivery instructions

  • Tracking information

Customer Service Providers

We may use service providers that help manage:

  • Customer emails

  • Support tickets

  • Returns

  • Refunds

  • Product reviews

  • Surveys

  • Customer communications

Analytics and Marketing Providers

Subject to consent and applicable legal requirements, we may share or make information available to:

  • Analytics services

  • Advertising platforms

  • Social media platforms

  • Email marketing providers

  • Marketing measurement providers

  • Audience and campaign-management providers

Fraud-Prevention and Security Providers

We may share transaction, device, order, payment, account, and technical information with providers that assist with:

  • Fraud detection

  • Identity or payment verification

  • Chargeback prevention

  • Website security

  • Cybersecurity

  • Risk management

Professional Advisers

We may share information with:

  • Lawyers

  • Accountants

  • Auditors

  • Tax advisers

  • Insurers

  • Consultants

  • Other professional advisers

Information will be shared only where reasonably necessary for professional services or legal claims.

Government and Legal Authorities

We may disclose information to:

  • Courts

  • Regulators

  • Law enforcement authorities

  • Tax authorities

  • Government bodies

  • Other legally authorised recipients

We will do so where required by law, necessary to protect legal rights, or reasonably necessary to prevent or investigate unlawful conduct.

Business Transfers

If fanormw.shop or part of its operations is sold, merged, transferred, financed, reorganised, or acquired, personal information may be disclosed to:

  • Prospective purchasers

  • Successor operators

  • Investors

  • Lenders

  • Professional advisers

  • Relevant transaction participants

Appropriate confidentiality and data protection measures will be applied where required.

9. International Data Transfers

Shopify and other service providers may process personal information outside the United Kingdom.

Where personal information is transferred to a country that is not covered by applicable UK adequacy regulations, we will rely on a lawful transfer mechanism where required.

These mechanisms may include:

  • UK adequacy regulations

  • The UK International Data Transfer Agreement

  • The UK Addendum to approved standard contractual clauses

  • Binding corporate rules

  • Contractual and organisational safeguards

  • Another transfer mechanism permitted by UK data protection law

  • A legally recognised exception where applicable

We may also assess the circumstances of relevant transfers and require technical, contractual, and organisational protections.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

When deciding how long to retain information, we consider:

  • The nature of the information

  • The purpose of processing

  • Legal and regulatory obligations

  • Tax and accounting requirements

  • Consumer protection requirements

  • Applicable limitation periods

  • Fraud-prevention needs

  • Security requirements

  • The likelihood of a dispute

  • The need to establish, exercise, or defend legal claims

Order and Transaction Records

Order, payment, refund, tax, and accounting records may normally be retained for up to six years after the relevant transaction or financial period, or longer where required by law or an active dispute.

Customer Service Records

Customer service communications may be retained for a reasonable period after an enquiry or complaint is resolved.

Records relating to legal claims, payment disputes, delivery investigations, or fraud may be retained for longer where reasonably necessary.

Customer Accounts

Account information may be retained while an account remains active and for a reasonable period afterwards.

You may request account deletion, subject to information that must be retained for legal, transaction, fraud-prevention, or dispute-resolution purposes.

Marketing Information

Marketing information may be retained until you:

  • Unsubscribe

  • Withdraw consent

  • Object to direct marketing

  • Request deletion where applicable

  • Cease interacting with our marketing for an extended period

We may retain limited suppression information after you unsubscribe to ensure that your preference continues to be respected.

Cookies and Analytics

Cookie and analytics information is retained according to:

  • The duration of the relevant cookie

  • The settings of the service provider

  • The purpose of the technology

  • Applicable consent and legal requirements

When personal information is no longer required, we will delete, anonymise, or securely dispose of it unless continued retention is legally required or permitted.

11. Data Security

We use reasonable technical and organisational measures designed to protect personal information against:

  • Unauthorised access

  • Accidental loss

  • Misuse

  • Alteration

  • Disclosure

  • Destruction

  • Unlawful processing

Security measures may include:

  • Secure website connections

  • Payment-security controls

  • Access restrictions

  • Account authentication

  • Fraud monitoring

  • Security updates

  • Data minimisation

  • Service-provider contracts

  • Confidentiality requirements

  • Backup procedures

  • Incident-response procedures

No internet transmission, website, or storage system can be guaranteed to be completely secure.

You are responsible for:

  • Keeping passwords confidential

  • Using a secure password

  • Protecting access to your device

  • Logging out of shared devices

  • Notifying us of suspected unauthorised account access

If a personal data breach occurs, we will investigate it and make any legally required notifications to affected individuals and the appropriate regulator.

12. Your Data Protection Rights

Depending on the circumstances and subject to legal limitations, you may have the following rights.

Right to Be Informed

You have the right to receive clear information about how your personal information is collected and used.

Right of Access

You may request:

  • Confirmation of whether we process your personal information

  • A copy of eligible personal information

  • Supplementary information about the processing

Right to Rectification

You may request correction of inaccurate personal information or completion of incomplete information.

Right to Erasure

You may request deletion of personal information in certain circumstances.

This right does not apply where continued processing is required for:

  • Legal obligations

  • Transaction records

  • Fraud prevention

  • Public-interest reasons

  • Legal claims

  • Other lawful purposes

Right to Restriction

You may request that processing be restricted in certain circumstances, including while the accuracy or lawfulness of processing is being reviewed.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request eligible information in a structured, commonly used, and machine-readable format.

Right to Object

You may object to processing based on legitimate interests in certain circumstances.

We will consider your objection and stop processing unless we have compelling legitimate grounds or the processing is necessary for legal claims.

Right to Object to Direct Marketing

You have the right to object at any time to the use of your personal information for direct marketing.

After receiving an objection, we will stop using your information for direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

Withdrawal does not affect processing carried out lawfully before consent was withdrawn.

Rights Concerning Automated Decision-Making

Automated systems may assist with payment, fraud, security, or order-risk assessments.

Where a decision is made solely through automated processing and produces a legal or similarly significant effect, you may have the right to:

  • Request human intervention

  • Express your point of view

  • Obtain information about the decision

  • Challenge the decision

These rights are subject to applicable legal conditions and exceptions.

13. How to Exercise Your Rights

To exercise a data protection right, email:

info@fanormw.shop

Please include:

  • Your full name

  • The email address associated with your account or order

  • Your order number, where relevant

  • The right you wish to exercise

  • A clear description of the information or processing concerned

We may request reasonable information to confirm your identity.

We will not request more information than is reasonably necessary for verification.

We will normally respond without undue delay and within one calendar month after receiving a valid request and any information reasonably required to verify your identity or clarify the request.

Where permitted by law, the response period may be extended if a request is complex or multiple requests have been made. We will inform you where an extension applies.

Rights requests are normally free of charge. We may charge a reasonable fee or refuse a request where permitted by law, including where a request is manifestly unfounded or excessive.

14. Data Protection Complaints Procedure

You have the right to complain if you believe that we have not handled your personal information in accordance with applicable data protection law.

Send data protection complaints to:

info@fanormw.shop

Please write “Data Protection Complaint” in the subject line.

Your complaint should include:

  • Your full name

  • Your preferred contact information

  • The email address associated with your order or account

  • Your order number, where relevant

  • A clear description of the concern

  • Relevant dates

  • Copies of relevant communications

  • Supporting documents or screenshots

  • The outcome you are requesting

We may request reasonable information to verify your identity or confirm that a representative is authorised to act on your behalf.

We will:

  • Provide a clear way for you to submit a complaint

  • Acknowledge the complaint within 30 days after receiving it

  • Begin appropriate enquiries without undue delay

  • Review the relevant facts fairly

  • Keep you informed where the investigation requires additional time

  • Explain the outcome without undue delay

  • Maintain appropriate records of the complaint and response

Submitting a complaint does not affect any other legal rights available to you.

15. Complaining to the Information Commissioner

You also have the right to complain to the Information Commissioner’s Office, the United Kingdom’s data protection supervisory authority.

We encourage you to contact fanormw.shop first so that we have an opportunity to investigate and resolve the concern.

Contacting us first does not remove your right to approach the Information Commissioner’s Office.

16. Marketing Preferences

You may manage marketing preferences by:

  • Using the unsubscribe option in a promotional email

  • Adjusting available account preferences

  • Changing available cookie settings

  • Contacting info@fanormw.shop

We will process unsubscribe and direct-marketing objections as soon as reasonably possible.

You may continue to receive essential service communications relating to:

  • Orders

  • Payments

  • Delivery

  • Returns

  • Refunds

  • Security

  • Customer support

  • Legal or policy notices

17. Product Reviews and Public Content

If you submit a review, photograph, comment, or other content intended for publication, that content may be visible publicly.

The displayed content may include:

  • Your selected display name

  • Initials

  • Review text

  • Rating

  • Submitted photographs or videos

  • Date of submission

Do not include the following in public content:

  • Delivery addresses

  • Telephone numbers

  • Payment details

  • Passwords

  • Order numbers

  • Identification documents

  • Sensitive personal information

We may moderate or remove content that contains personal information, unlawful material, spam, abuse, or content that violates our policies.

18. Third-Party Websites and Services

fanormw.shop may contain links to:

  • Payment services

  • Delivery providers

  • Social media platforms

  • External websites

  • Third-party applications

Independent third parties may collect and use personal information according to their own privacy policies.

We are not responsible for the privacy, security, content, or practices of independent third-party websites and services.

You should review the relevant third party’s privacy information before providing personal information.

19. Children’s Privacy

fanormw.shop is intended for a general adult shopping audience and is not specifically directed at children.

We do not knowingly collect personal information directly from children for targeted marketing.

If our online services are likely to be accessed by children, we will take reasonable steps to consider their needs and protect their personal information in accordance with applicable law.

A parent or guardian who believes that a child has provided personal information without appropriate authorisation may contact info@fanormw.shop.

We will review the matter and take appropriate action.

20. Sensitive Personal Information

We do not normally need to collect special-category or highly sensitive personal information to sell and deliver products.

Please do not send information concerning:

  • Health

  • Racial or ethnic origin

  • Religious beliefs

  • Political opinions

  • Sexual orientation

  • Biometric identifiers

  • Criminal allegations

  • Complete financial credentials

  • Government identification documents

unless it is strictly necessary and specifically requested through an appropriate process.

If sensitive information is provided unnecessarily, we may delete or restrict it where legally permitted.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

  • Changes to our business practices

  • Changes to the website

  • New Shopify functions

  • Changes to service providers

  • New analytics or marketing tools

  • Security improvements

  • Legal or regulatory developments

  • Corrections or clarifications

The updated policy will be published on this page with a revised “Last updated” date.

Where a change materially affects how personal information is used, we may provide additional notice through the website, customer account, or email where appropriate.

We encourage customers to review this Privacy Policy periodically.

22. Contact Us

For all privacy enquiries, data protection rights requests, marketing objections, cookie questions, or data protection complaints, contact:

fanormw.shop
Email: info@fanormw.shop