Privacy Policy

At Rizbiz, we're committed to protecting your privacy. This policy explains how we handle your personal data when you use our services. As a UK-based company, we comply with the UK GDPR and other relevant protection laws.

What information we collect

Information you give us directly

• Account details: Your full name, password (encrypted),email, phone-number when you create an account or link a third-party service (like Facebook, Apple, Microsoft or Google).
• "Order delivery details": The name, email, phone-number and address of the person the order is delivered to.
• Marketing preferences: Permission of your consent for us to send you marketing preferences.

Information we collect automatically

• Device information: Device's unique identifier, operating system, IP Address.
• Usage data: Collected using cookies to analyse how you interact with our site (such as view items, view cart, begin checkout), including your browser type.
• Server logs: Inform us about how you interact with our site.

Cookies we use to collect data

How We Use Your Data

We use your personal data for several key purposes. Under UK data protection law, we must have a valid reason, or "lawful basis", for each one.

• To provide our services, we process your data to fulfill your orders and send essential communications, which is necessary to perform our contract with you.
• To manage your account and provide access to your profile and order history, we process your data under the lawful basis of contractual necessity.
• To offer customer support, we use your information to respond to your inquiries and resolve issues, which is necessary for the performance of our contract with you.
• To send you marketing communications and personalized product recommendations, we process your data under the lawful basis of your explicit consent, which you can withdraw at any time.
• To improve our services and products, we analyze how you interact with our services, processing this data under the lawful basis of our legitimate interests to enhance our business.
• To meet our safety requirements and maintain records for tax purposes, we process your data under the lawful basis of legal obligation.

How do we share your data with third-parties

We only share essential information with the third-party providers listed below to ensure we can deliver our complete service.

Payment platform

During the checkout process, we use Stripe, a third-party payment provider. We only share your email, the items ordered, and any delivery costs. This information is the minimum required for Stripe to process your payment. For more information on Stripe's privacy practices, please refer to their privacy policy at https://stripe.com/gb/privacy.

Shipping platform

We utilize Shipstation API, a third-party shipping provider, to generate shipping labels. To facilitate package delivery, we share necessary “Order delivery details” with them. For more information on Shipstation API's privacy practices, please refer to their privacy policy at https://auctane.com/legal/privacy-policy/.

Web analytics

We use Google Analytics to provide information on how you use our site, this helps us improve our user experience. You can view privacy practices at https://www.google.com/intl/en/policies/privacy/. You can also opt-out of this service by visiting https://tools.google.com/dlpage/gaoptout.

Advertising

We use behavioural advertising to highlight products we believe may be of interest to you, to learn more on how behavioural advertising works, please see http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

If you wish to opt-out of advertising, please use the below advertiser we use:

• Facebook: https://www.facebook.com/settings/?tab=ads
• Google: https://www.google.com/settings/ads/anonymous

Data Retention

We keep your personal data only as long as necessary to achieve the purposes outlined in this policy or as required by law. When you close your account, your personal data is immediately deleted, unless longer retention is legally mandated (for instance, for tax records). If you ask us to remove your data, we will do so once your identity is confirmed.

How We Protect Your Data

We use robust security measures to protect your data from loss, misuse, and unauthorised access. These include:

• Password information is stored in an encrypted and non-reusable format.
• HTTPS encryption is utilized to establish a secure channel between users and our servers.
• Secure protocols, such as POST, are employed to ensure data encryption during transmission between users and our servers.
• Only the minimum necessary information is provided to third-parties for task execution.
• Information is stored on secured servers.
• Regular log monitoring is conducted to identify and address potential threats to our data storage systems.
• Employees receive training on data protection best practices to prevent accidental data leaks.
• Internal access to data is restricted to only those employees who require it to perform their job functions.

Your rights to your data

Under data protection laws, you have specific rights regarding your personal data:

• Right to be informed: About how your data is collected and used.
• Right of access: To request a copy of the data we hold about you.
• Right to rectification: To correct inaccurate or incomplete data.
• Right to erasure: To request deletion of your data, unless data retention is legally mandated (for instance, for tax records).
• Right to restrict processing: To limit how we use your data.
• Right to data portability: To receive your data in a machine-readable format and transfer it.
• Right to object: To our processing of your data, especially for direct marketing.
• Right to withdraw consent: At any time, if processing is based on your consent.
• Right to lodge a complaint: With the Information Commissioner's Office (ICO) if you believe your rights have been infringed.

You can manage certain rights, such as rectification, directly from your profile page. For all other rights, please contact us (using the details below). We may require identity verification to prevent unauthorised disclosure of your information.

Contact Us