Effective date : 25 October 2026

1. Who we are

Ezehay is a brand operated by two companies:

United Kingdom: Ezehay Limited, Dove Barns, Ivy House Farm, Green Lane, Wibtoft, LE17 5BB, United Kingdom.

European Union: SARL ezehay Europe, 150 Chemin de Brunard, 46090 Aujols, France.

Ezehay Limited is responsible for personal information used to administer UK customer orders. SARL ezehay Europe is responsible for personal information used to administer EU customer orders. Both companies may access information through a shared website, order management system and email mailbox for customer service and business administration.

You can contact either company about privacy matters at info@ezehay.com.

This notice explains how personal information is handled when you use the ezehay website, place an order, create an account or contact us.

2. Information we collect

Depending on how you use the website, we may collect:

• Contact and delivery details: name, email address, telephone number, billing and shipping addresses, and business or VAT details if supplied.
• Orders and accounts: purchases, selected products and variations, order history, customer account details (if you choose to register), refunds, returns and warranty correspondence. Guest checkout is also available.
• Payments: payment status, transaction references and refund details. Payments are handled by providers including Stripe and PayPal. We do not normally receive or store complete card numbers.
• Communications: messages sent through our contact form or to our shared email address, and our responses.
• Technical information: IP address, device and browser information, security logs and information necessary to run the website.
• Analytics information: information about website usage collected through Google Analytics, subject to applicable consent requirements.

3. Purposes and lawful bases

We process personal information for the purposes below. The legal basis depends on the particular activity:

• Order processing and delivery

  Lawful basis: Performance of a contract.

• Customer enquiries and support

  Lawful basis: Steps relating to a contract or legitimate interests, as appropriate.

• Accounting and taxation

  Lawful basis: Legal obligation.

• Website operation, security and fraud prevention

  Lawful basis: Legitimate interests or legal obligation, as applicable.

• Non-essential website analytics

  Lawful basis: Consent, where required.

• Future promotional emails

  Lawful basis: Consent or another legally permitted basis, with the relevant opt-out rights.

Our legitimate interests include responding to customers, protecting the website, preventing misuse and operating an efficient business. Where we rely on legitimate interests, we consider the effect on individuals’ rights.

We do not currently send marketing newsletters. If we introduce them, we will explain the subscription arrangements and provide a means to unsubscribe. Transactional messages about your orders are not marketing emails.

4. Sharing information

We do not sell personal information.

We may share necessary information with:

• The relevant ezehay company and authorised personnel of the other ezehay company where required for shared customer support and business administration.
• Payment providers, including Stripe and PayPal.
• Delivery and logistics providers handling your order.
• Website hosting and technical support providers, including Hostinger.
• Providers supporting website operation and consent management, including Complianz.
• Google Analytics, subject to the applicable analytics settings and consent choices.
• Providers of customer review displays, including Trustindex, insofar as those services process personal data.
• Accountants, professional advisers, insurers and public authorities where there is an appropriate need or legal obligation.

Orders and customer enquiries from both the UK and EU may arrive in the shared info@ezehay.com mailbox. Authorised personnel working for either company can access them to answer questions, coordinate fulfilment, resolve problems and provide after-sales support. Each company remains responsible for administering its own customer orders.

Our WooCommerce records and separate company business records may both contain information relevant to an order. We limit access according to business need and take appropriate steps when engaging processors on our behalf.

5. International handling of information

Our UK and French companies may share personal information across borders. Some suppliers may also process information in countries outside the UK or European Economic Area. Where required, we rely on an applicable adequacy arrangement or other lawful transfer safeguards. The relevant providers, processing locations and safeguards must be verified before this notice is published; you may request further information using the email above.

6. Retention and deletion

We keep personal information for as long as necessary for the purposes above, including customer support, warranties, legal claims and statutory accounting and tax requirements. Different categories of records have different retention requirements.

Order records are currently stored in WooCommerce as well as in company records. We are establishing a defined retention and review schedule for identifiable WooCommerce information, taking account of relevant UK and French obligations. Requests for deletion will be assessed against any legal need to retain particular records.

Website backups may include copies of customer records. Backups are made using UpdraftPlus and stored in a restricted-access Google Drive account. We are reviewing backup access and implementing a defined rotation and deletion schedule. Backups are used for restoration and security purposes, not ordinary marketing or customer profiling.

We retain enquiry correspondence, technical logs and analytics information only as long as needed for their respective purposes and in accordance with the applicable settings and retention schedule. Specific periods or criteria should be inserted after those settings are verified.

7. Cookies and analytics

Essential cookies support website functions including the basket, checkout and security. We also use Google Analytics to understand site usage. Where analytics cookies or other non-essential technologies require consent, they should operate only after consent is given.

Our Complianz cookie banner provides controls to accept or reject non-essential cookies. You can revisit your cookie choices using the cookie preferences control on the website. Please consult our separate Cookie Policy for further details about the actual cookies, their providers, purposes and durations.

8. Your rights

Subject to applicable UK and EU data protection law and relevant exceptions, you may have rights to:

• Access your personal information.
• Correct inaccurate or incomplete information.
• Request erasure or restriction of processing.
• Object to processing based on legitimate interests and to direct marketing.
• Receive certain information in a portable format.
• Withdraw consent at any time where we rely on consent, without affecting earlier lawful processing.

To exercise your rights, contact info@ezehay.com. We may need to verify your identity before acting on a request. We will respond within the time required by applicable law.

You may also raise a complaint with a competent supervisory authority, including the Commission nationale de l’informatique et des libertés (CNIL) in France (www.cnil.fr) or the Information Commissioner’s Office (ICO) in the United Kingdom (ico.org.uk).

9. Security

We use appropriate organisational and technical measures intended to protect personal information, including access restrictions, secure connections and safeguards from relevant service providers. No online system can be guaranteed completely secure.

10. External websites

Links to third-party websites may take you to services with their own privacy notices. Please review those notices when leaving our website.

11. Changes to this policy

We may update this notice to reflect operational, technological or legal changes. The published version will show its effective date, and additional notice will be given where required.

12. Contact

For questions about this notice or how your information is handled, contact info@ezehay.com.

UK: Ezehay Limited, Dove Barns, Ivy House Farm, Green Lane, Wibtoft, LE17 5BB, United Kingdom.

EU: SARL ezehay Europe, 150 Chemin de Brunard, 46090 Aujols, France.