Privacy Policy
Effective Date: 1 January, 2025.
GIAVA (“we”, “us”, “our”) operates from the United Kingdom. This policy explains how we collect, use, and protect your personal data when you visit our website or purchase from us. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information We Collect
We collect only what we need to fulfil your order and improve your experience. We never sell your data. You have full rights over your information at any time.
We do not knowingly collect data from individuals under 16. If you believe a minor has submitted data to us, please contact us immediately.
How We Use Your Information
We process your personal data on the following lawful bases:
Contract performance — processing and dispatching your orders, managing returns and refunds.
Legitimate interests — fraud prevention, improving our website, internal analytics.
Legal obligation — complying with tax and accounting requirements under UK law.
Consent — sending marketing emails or SMS. You may withdraw consent at any time.
Sharing & third parties
We share your data only with trusted service providers necessary to run our business. We never sell, rent, or trade your personal data to third parties for their own marketing purposes.
Payment processors (e.g. Stripe, Shopify Payments) — to securely handle transactions.
Logistics & couriers — to deliver your order.
Email service providers — to send transactional and marketing communications.
Analytics platforms — to understand site usage (anonymised where possible).
Legal authorities — where required by law or to protect our legal rights.
Any third party we engage is bound by data processing agreements and must comply with UK GDPR.
Cookies
We use cookies and similar technologies to operate our website and improve your experience. Types of cookies we use:
Essential cookies — required for the site to function (e.g. shopping cart, login sessions). Cannot be disabled.
Analytics cookies — help us understand how visitors use the site (e.g. Google Analytics). Enabled with consent.
Marketing cookies — used to deliver relevant advertising. Enabled with consent.
You can manage your cookie preferences via the cookie banner on our site or through your browser settings.
Data Sharing
We may share your information with trusted third-party services (e.g., payment processors like Stripe, analytics providers like Google Analytics) as necessary to operate our business. We ensure these providers follow strict data protection standards.
Your Rights
Under UK GDPR you have the following rights regarding your personal data:
Access — request a copy of the data we hold on you.
Rectification — ask us to correct inaccurate or incomplete data.
Erasure — request deletion of your data (subject to legal obligations).
Restriction — ask us to limit how we process your data in certain circumstances.
Portability — receive your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests or for direct marketing.
Withdraw consent — at any time, where processing is consent-based.
To exercise any of these rights, contact us at privacy@giava.com. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.
Data retention
We retain personal data only for as long as necessary for the purposes outlined in this policy, or as required by law:
Order and transaction data: 7 years (HMRC requirements).
Customer account data: until account deletion plus 12 months.
Marketing data: until you unsubscribe or withdraw consent.
Analytics data: 26 months, then aggregated and anonymised.
security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include SSL/TLS encryption for data in transit, access controls, and regular security reviews.
Despite these measures, no online transmission is entirely risk-free. If you suspect a security incident, please contact us immediately.
contact
Data Controller
GIAVA Ltd · London, United Kingdom
Email:
Response time: within 30 days of receipt