Privacy Policy

This Privacy Policy explains how UZY processes personal data when you browse our website, place an order, communicate with customer support or use related online services.

Your personal data is not processed simply because you are deemed to have “accepted” this Privacy Policy. Each processing activity is based on an appropriate legal basis, such as performance of a contract, compliance with a legal obligation, legitimate interests or consent, depending on the circumstances.

• processing and fulfilling orders
• arranging payment and delivery
• managing customer accounts where such functionality is available
• providing customer service and technical support
• handling returns, complaints and warranty-related requests
• maintaining website security and preventing misuse or fraud
• complying with applicable legal, tax and accounting obligations
• analysing and improving services where an appropriate legal basis exists
• sending marketing communications where permitted by law

• Performance of a contract — Article 6(1)(b) GDPR
• Compliance with a legal obligation — Article 6(1)(c) GDPR
• Legitimate interests — Article 6(1)(f) GDPR, where the legal requirements are met
• Consent — Article 6(1)(a) GDPR, where processing requires consent

Our website may use cookies and similar technologies. Some cookies are necessary for the website to function, maintain security or provide a feature requested by the user.

Analytics, personalisation or marketing cookies are used only where there is an appropriate legal basis and, where consent is required, after that consent has been obtained.

Personal data may be shared only where necessary and lawful for the relevant purpose.

• courier and logistics providers
• payment service providers
• hosting, cloud and IT service providers
• customer support and communications providers
• accounting, legal and other professional advisers
• analytics or marketing providers where their use is lawful
• public authorities where disclosure is required by law

We do not sell personal data to third parties as a standalone marketing database.

Some service providers may process personal data outside the European Economic Area. Where such transfers take place, we use an appropriate transfer mechanism and safeguards required by applicable data-protection law.

Depending on the circumstances, this may include an adequacy decision or appropriate safeguards such as Standard Contractual Clauses adopted by the European Commission.

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

The measures used are selected according to the nature of the processing, the type of information involved and the relevant risks.

Depending on the circumstances and legal basis for processing, applicable data-protection law may give you the following rights:

Where processing is based on consent, you may also withdraw consent. You may additionally have the right to lodge a complaint with the competent data-protection supervisory authority.

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, or for as long as required by applicable legal, accounting, tax, security or claims-related obligations.

Retention periods may therefore differ between order records, customer support records, security logs and other categories of data.

Marketing messages are sent only where there is a valid legal basis and, where applicable, the required consent has been obtained.

You may unsubscribe from marketing communications using the method provided in the message or by contacting us.

Opting out of marketing does not prevent us from sending service messages that are necessary for an order, security matter or legal obligation.

We may update this Privacy Policy from time to time, for example when our services, technologies or legal requirements change.

The current version will be published on the website. Where a change materially affects the processing of personal data, any notice required by applicable law will be provided.