Privacy policy

1. Who we are. Calm System, a business based in the United Kingdom, is the controller of the personal data described in this policy. Contact us about privacy at calmsystems3@gmail.com. Our postal address is in our Contact information. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What we collect.

  • Contact and order details: name, email address, delivery and billing address, phone number, order history.
  • Payment information: processed by our payment providers; we do not see or store your full card details.
  • Messages you send us.
  • Website and device information, such as IP address, browser type and pages visited, collected through cookies and similar technologies.

3. How we use it and our lawful basis.

  • To process, deliver and support your orders (performance of a contract).
  • To meet tax, accounting and legal obligations (legal obligation).
  • To keep our store secure, prevent fraud and improve our website (legitimate interests).
  • To send marketing emails, only if you have subscribed (consent). You can unsubscribe at any time using the link in any email.

4. Who we share it with. We share personal data only as needed with service providers who help us run the store, including Shopify (our e-commerce platform), payment providers, delivery carriers and suppliers who fulfil orders. We may also share data where required by law. We do not sell your personal data.

5. International transfers. Some providers, including Shopify, process data outside the UK. Where they do, we rely on safeguards recognised under UK law, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum.

6. Cookies. We use cookies that are needed for the store to work, such as the cart and checkout. We use analytics or marketing cookies only with your consent, which you can give or withdraw through the cookie banner.

7. How long we keep it. We keep order and transaction records for as long as required for tax and accounting purposes (usually six years). We keep marketing data until you unsubscribe. Other data is kept only as long as needed for the purposes above.

8. Your rights. You have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To use these rights, email us. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

9. Changes. We may update this policy and will post the new version on this page.