Privacy Policy

1. Introduction

This Privacy Policy explains how DRABEST UK LIMITED (“we”, “us” or “our”) collects, uses, stores and protects personal data when you use our website, place orders, create an account, contact us, subscribe to marketing communications or otherwise interact with us.

We are committed to processing personal data lawfully, fairly and transparently in accordance with applicable data protection laws, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation (“EU GDPR”).

By using the Website, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.

2. Who We Are

The controller responsible for the processing of personal data under this Privacy Policy is:

DRABEST UK LIMITED

Company No. 09691129

3-4 Railway Street

Great Bridge

Tipton

DY4 7AD

United Kingdom

E-mail: sales@drabestuk.com

DRABEST UK LIMITED is registered with the Information Commissioner’s Office (“ICO”) under registration number ZB933661.

We have not appointed a formal Data Protection Officer. Questions relating to privacy and data protection may be directed to Radosław Chwast, Director, using the contact details above.

3. Personal Data We Collect

We may collect and process personal data that you provide directly when you place an order, create an account, contact us, subscribe to newsletters, submit reviews or otherwise interact with the Website. This may include your name, billing and delivery addresses, e-mail address, telephone number, company details, payment-related information, account credentials, order history and communications with us.

We may also automatically collect certain technical and usage information when you use the Website. This may include your IP address, browser type, operating system, device identifiers, approximate location information, browsing behaviour, interactions with the Website and advertising data collected through cookies and similar technologies.

In certain circumstances, we may receive personal data from third-party service providers, including payment providers, delivery companies, analytics providers, advertising partners and fraud prevention services.

4. How We Use Personal Data

We use personal data to operate the Website and provide our products and services. This includes processing and delivering orders, processing payments, providing customer support, managing customer accounts, handling returns and complaints, issuing invoices and communicating with Customers regarding orders or enquiries.

We also use personal data to improve the functionality, performance and security of the Website, analyse customer behaviour, prevent fraud and misuse, comply with legal and regulatory obligations and maintain internal business records.

Where permitted by law, we may use personal data to send marketing communications, personalise advertising and analyse the effectiveness of our marketing campaigns.

We generally process personal data:

• to perform contracts concluded with Customers, including processing orders, payments, deliveries, returns and customer service;

• to comply with legal and regulatory obligations;

• for our legitimate business interests, including operating and improving the Website, fraud prevention, Website security and internal administration, provided that such interests are not overridden by Customers’ rights and freedoms; and

• on the basis of consent where consent is required under applicable law, including certain marketing, advertising and cookie-related activities.

Where consent is relied upon, you may withdraw that consent at any time with future effect.

5. Marketing and Advertising

Where permitted by law or where you have provided consent, we may send marketing communications relating to our products, services, promotions and offers.

We may also use cookies, pixels and similar technologies to personalise advertising, measure the effectiveness of advertising campaigns and better understand customer interests and interactions with the Website.

This may involve profiling and automated analysis relating to customer preferences, browsing behaviour and interactions with advertisements and Website content in order to improve marketing relevance and Website performance.

The Website may use advertising and analytics services provided by third parties including Google Analytics, Google Ads, Meta Ads, Meta Pixel, Hotjar and Microsoft Clarity.

You may unsubscribe from marketing communications at any time by using the unsubscribe link included in marketing e-mails or by contacting us directly.

6. Cookies and Analytics

The Website uses cookies and similar technologies to ensure the Website functions properly, maintain security, remember user preferences, enable shopping basket functionality, analyse Website traffic and support advertising and analytics activities.

Some cookies are strictly necessary for the operation of the Website, while others are used for analytics, functionality and advertising purposes.

Where required by applicable law, non-essential cookies and similar technologies are used only with your consent. Consent preferences may be managed at any time through our cookie settings tool provided via Cookiebot.

The Website may also include links to or integrations with third-party platforms and social media services, including Facebook, Instagram and YouTube, which may collect information in accordance with their own privacy policies.

Further information regarding the cookies and similar technologies used on the Website is available through our Cookie Policy and cookie settings tool.

7. Sharing Personal Data

We may share personal data with carefully selected third parties where reasonably necessary for the operation of the Website and our business activities.

This may include hosting and IT providers, payment processors, delivery and courier companies, analytics and advertising partners, customer service providers, fraud prevention services and professional advisers.

Personal data is disclosed only to the extent reasonably necessary for the relevant purpose and subject to appropriate contractual, organisational and security safeguards.

We also use external hosting, cloud infrastructure and IT service providers who process personal data on our behalf subject to appropriate contractual and security safeguards.

We do not sell personal data to third parties.

8. International Transfers

Certain third-party service providers may process personal data outside the United Kingdom and/or the European Economic Area.

Where personal data is transferred internationally, we take appropriate measures to ensure that such transfers are carried out in accordance with applicable data protection laws and that appropriate safeguards are implemented to protect personal data.

Such safeguards may include adequacy decisions, standard contractual clauses, the UK International Data Transfer Agreement (“IDTA”), the UK Addendum to EU Standard Contractual Clauses or other lawful transfer mechanisms.

9. Data Retention and Security

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including fulfilling contractual obligations, complying with legal, tax, accounting and regulatory requirements, resolving disputes, preventing fraud and protecting legal rights.

Certain information relating to orders and transactions may be retained for longer periods where required by applicable law or where reasonably necessary for accounting, tax, fraud prevention or legal compliance purposes.

When personal data is no longer required, it will be securely deleted, anonymised or otherwise disposed of in a secure manner.

We implement appropriate technical and organisational security measures designed to protect personal data against unauthorised access, misuse, disclosure, alteration, accidental loss or destruction. Such measures include secure hosting infrastructure, restricted access controls and encrypted connections where appropriate.

While we take reasonable steps to protect personal data, no system or method of transmission over the internet can be guaranteed to be completely secure.

10. Your Rights

Subject to applicable law, you may have the right to request access to personal data, request correction of inaccurate personal data, request deletion of personal data, restrict or object to certain processing activities, withdraw consent, request portability of personal data and object to direct marketing activities.

You may also have the right to object to processing carried out on the basis of legitimate interests, including certain profiling, analytics and personalised advertising activities.

You may also have the right to lodge a complaint with the Information Commissioner’s Office (“ICO”) or another competent supervisory authority.

We may request reasonable information to verify your identity before responding to requests relating to personal data rights.

11. Contact and Updates

If you have any questions about this Privacy Policy or about how we process personal data, please contact: