PRIVACY POLICY
Effective Date: 12/02/2025
1. Important Information and Who We Are
This Privacy Policy provides information on how Gwaza Ltd. ("Gwaza," "we," "us," or "our") collects, processes, and protects your personal data.
It applies to users of our website, customers, suppliers, and other business contacts.
This website is not intended for children, and we do not knowingly collect data related to children.
1A. Controller
Gwaza Ltd. is the controller and responsible for your personal data.
Our contact details:
Gwaza Ltd.
New House Farm
Shoothill
Shrewsbury
Shropshire
SY5 9NR
United Kingdom
Phone: +44 1743 850761
Email: [email protected]
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection (www.ico.org.uk). However, we encourage you to contact us first to resolve any concerns.
1B. Changes to the Privacy Policy and Your Duty to Inform Us of Changes
This Privacy Policy may be updated from time to time to remain compliant with regulations. The latest version will always be available on our website. It is important that the personal data we hold about you is accurate and current. Please inform us of any changes to your data by emailing [email protected].
1C. Third-Party Links
Our website may contain links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. We are not responsible for their privacy policies and encourage you to read their policies before providing personal data.
2. The Data We Collect About You
"Personal data" refers to any information that identifies an individual. We collect, use, store, and transfer different categories of personal data, including:
-
Identity Data – Name, company name, job title.
-
Contact Data – Address, email, phone number.
-
Transaction Data – Purchases, payments, order history.
-
Technical Data – IP address, login details, browser type.
-
Marketing & Communication Data – Preferences for receiving marketing communications.
We do not collect special category data (e.g., health, political opinions) or information about criminal convictions.
2A. If You Fail to Provide Personal Data
If we require personal data by law or to fulfill a contract and you fail to provide it, we may be unable to provide our services or products to you.
3. How We Collect Your Personal Data
We collect personal data through the following methods:
-
Direct interactions – When you create an account, make a purchase, subscribe to emails, or contact us.
-
Automated technologies – Cookies and analytics tools collect browsing and technical data.
-
Third-party sources – Payment processors (e.g., PayPal, Sage), analytics providers (e.g., Google Analytics).
4. How We Use Your Personal Data
We will only use your personal data when permitted by law. This includes:
| Purpose |
Legal Basis |
| Process orders and payments |
Performance of a contract |
| Manage customer relationships |
Legitimate interest |
| Send B2B marketing emails |
Legitimate interest (opt-out available) |
| Send promotional emails |
Consent (opt-in required for individuals) |
| Improve website and services |
Legitimate interest |
| Ensure security & fraud prevention |
Legal obligation |
We do not sell or share data for third-party marketing.
4A. Marketing Communications & Your Rights
We may send B2B marketing emails to existing and prospecting corporate customers under Legitimate Interest, ensuring relevance. This applies to:
-
Existing business customers who have purchased from us.
-
New corporate prospects with company email addresses (e.g., [email protected]).
We do not send cold marketing emails to sole traders or partnerships without explicit opt-in consent.
You can opt out of marketing emails at any time by:
5. Data Sharing & Third Parties
We may share your personal data with:
-
Service providers (e.g., couriers, payment processors, IT providers, email marketing platforms).
-
Regulatory authorities when required by law.
-
Business partners in the case of mergers or acquisitions.
All third parties must respect data security and process data only as instructed by us.
6. International Data Transfers
Some data may be transferred outside the UK, particularly to:
We ensure these transfers meet UK GDPR standards with appropriate security measures.
7. Data Security
We implement security measures to prevent unauthorized access, misuse, or loss of personal data. Access is restricted to personnel who need it for business purposes.
8. Data Retention
We retain data only as long as necessary for the purposes collected:
9. Your Legal Rights
Under UK GDPR, you have the right to:
-
Access your personal data.
-
Request correction of inaccurate data.
-
Request erasure of your data (except when legally required to retain it).
-
Object to processing for direct marketing.
-
Restrict processing under certain circumstances.
-
Request data portability to another provider.
-
Withdraw consent at any time for consent-based processing.
To exercise these rights, email [email protected].
9A. Response Time
We respond to all requests within one month unless they are complex, in which case we will notify you.
10. Cookies & Tracking Technologies
We use cookies to improve functionality and analytics. You can disable cookies in your browser settings, but this may impact your experience.
11. Changes to This Policy
We may update this Privacy Policy periodically. The latest version will always be available on our website.
Contact Us
For any privacy-related questions, contact [email protected].
Last Updated: 12/02/2025