Privacy policy

Controller

EMYRA LTD, a company registered in England and Wales with number 16999697, registered office 27 Old Gloucester Street, London WC1N 3AX, United Kingdom. For any privacy request write to emyra.assistance@gmail.com.

Data we process

• Order data: first and last name, delivery address, email, phone, product bought, amount.
• Payment data: handled directly by PayPal; we only receive the result and transaction ID.
• Messages you send us by email or through the contact form.
• Messages written to the site assistant: used only to generate the answer; we don't store them.
• Browsing data and, only if you accept marketing cookies, ad measurement data (Meta Pixel and Google tag).

Purposes and legal bases

• Handling your order, delivery, returns and support: performance of the contract (Art. 6(1)(b) GDPR).
• Meeting tax and accounting obligations: legal obligation (Art. 6(1)(c)).
• Preventing payment fraud: legitimate interest (Art. 6(1)(f)).
• Measuring our ads with Meta Pixel, the Conversions API and the Google tag (Google Ads and Google Analytics): only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

Recipients

Only the providers we need to sell and deliver:

• PayPal, for payment (independent controller).
• CJ Dropshipping and couriers, to prepare and deliver the parcel: they receive name, address, phone and order contents.
• Supabase (database, servers in the EU), Vercel (hosting), Resend (email delivery), Google (accounting copy of orders).
• Cloudflare and Groq, only if you use the site assistant: they receive the text of your questions to generate the answer and don't use it to train models.
• Meta Platforms and Google Ireland, only if you accepted marketing cookies.

Some providers are based outside the European Economic Area (United Kingdom, United States, China). The UK benefits from a European Commission adequacy decision; for other countries transfers rely on the Commission's standard contractual clauses or the EU-US Data Privacy Framework.

Retention

Order data: as long as tax and accounting law requires (up to 10 years). Support messages: 2 years. Ad measurement data: as set by Meta and Google, until you withdraw consent.

Your rights

You can ask for access, correction, deletion, restriction and portability of your data, and object to processing based on legitimate interest, by writing to emyra.assistance@gmail.com. We reply within one month. You can also complain to the data protection authority of your country.