Privacy Policy

Who we are

Senzia (senzia.co.uk) is the data controller for the personal data described here. You can reach us at hello@senzia.co.uk, or by post at 1 Glencroft Road, Solihull B92 9BA, United Kingdom.

What we collect and why

To fulfil your order. Your name, email address, delivery address, billing address and telephone number. We need these to take payment, ship your parcel and contact you if something goes wrong. The lawful basis is performance of a contract.

To take payment. Card details are entered directly into Stripe's hosted payment fields and are never sent to or stored on our servers. We receive only the card brand, the last four digits and whether the payment succeeded.

To keep your cart. A cart identifier stored in a strictly necessary cookie, so your basket survives a refresh. No consent is required for this and it carries no marketing data.

If you sign in with Google. Google tells us your name and email address, and that it has verified the address. We use them to open your account, or to create one. We receive nothing else from your Google account, and never your password. The lawful basis is performance of a contract.

To send marketing. Your email address, if and only if you have explicitly opted in. The lawful basis is consent, and you can withdraw it at any time from the link at the bottom of every marketing email.

To tell you when a product is back. If you ask us to notify you about a product that is coming soon, we keep your email address and the product you asked about, and send you one email when it can be ordered again. We use your address for nothing else: it does not join our mailing list, and we will not email you about other products. The lawful basis is your request, and you can ask us to delete it at any time.

If you use Senzia Advisor. What you type to the advisor is sent to Google (the Gemini API) to understand your request and write the reply, together with details of the products being discussed and the products in your basket. We do not send your name, email address, delivery address or payment details, so please do not type them. The conversation can be continued for 24 hours as you browse. We keep it for up to 30 days after your last message so we can see what customers ask and improve the advisor, then delete it. If you ask for the conversation by email, we use your address only to send it; it is not added to any mailing list. We keep anonymous records of what was asked for (such as "vanilla, under £30") and which suggestions were added to a basket for up to 180 days. The lawful basis is our legitimate interest in helping you choose.

To detect fraud and abuse. A salted hash of the IP address used to place an order, and your browser's user agent string. We do not store raw IP addresses against orders. The lawful basis is our legitimate interest in preventing fraudulent transactions.

To understand how you found us. When you add something to your basket, we note the page you first arrived on, the website that sent you there (a search engine or ChatGPT, for example) and any campaign tag in that link, and keep them with your order. We record only the name of that website, never the full address you came from, and we do not use a cookie for it. The lawful basis is our legitimate interest in knowing which channels bring us customers.

Analytics and advertising

If you accept analytics and advertising cookies, we use Google Analytics 4, Google Ads conversion tracking and, where configured, Meta Pixel, to understand how the site is used and to measure our advertising. Product details, order values and order numbers are shared with those services; your name, email address and postal address are not. If you decline, Google's tags still load but set no cookies, and send only cookieless signals that Google uses to estimate conversions in aggregate.

Who we share data with

• Stripe — payment processing.
• Our email provider — order confirmations and other transactional email.
• Our carriers — name, address and telephone number, to deliver your parcel.
• Supabase — our database and file hosting provider.
• Google — the Gemini API, which writes Senzia Advisor's replies.

We do not sell personal data, and we do not share it with anyone else for their own marketing.

How long we keep it

Order records are retained for seven years to meet tax and accounting obligations. Marketing consent records are kept until you withdraw consent and for two years afterwards, so we can demonstrate that you did. Abandoned cart data is deleted after 30 days. Senzia Advisor conversations are deleted 30 days after the last message, and the anonymous records of them after 180 days. A request to be told when a product is back is deleted 30 days after we send that email, or after a year if the product never returns.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict how we use it, or to receive it in a portable format. You can object to processing based on legitimate interests. Email us and we will respond within one month. If you are not satisfied, you may complain to your national data protection authority.