Ffyngau

Legal

Privacy Policy

Ffyngau Cyf (“Ffyngau”, “we”, “us”, “our”)
Company number 17387318, registered in Wales.
Registered office: 15 Yorke Street, Wrexham, LL13 8LW.
Contact: ffrind@ffyngau.co.uk

Last updated: September 2026

This policy explains what personal data we collect, why, and what your rights are. Ffyngau Cyf is the data controller and is registered with the Information Commissioner’s Office (ICO).

What we collect

Depending on how you use our site, we may collect:

  • Order information: your name, delivery and billing address, email address, phone number (if provided), and order details.
  • Payment information: handled by our payment provider, Stripe. We do not see or store your full card details.
  • Email sign-ups: if you join our mailing list, your email address and any name you provide.
  • Website usage data: only if you allow analytics cookies through our cookie banner, information about how you use the site (pages visited, device and browser type, approximate location). See “Cookies and analytics” below.

Why we use it, and our lawful basis

  • To fulfil your order (process payment, dispatch goods, provide support). Lawful basis: performance of a contract with you.
  • To send marketing emails, if you have signed up. Lawful basis: your consent. You can withdraw consent and unsubscribe at any time using the link in any email.
  • To run and improve our website. Lawful basis: our legitimate interests in operating and understanding our site. Analytics cookies are only set where you consent via our cookie banner.
  • To meet legal obligations, for example keeping records for tax and accounting.

Who we share it with

We share data only with the service providers that help us run the business:

  • Stripe: to take payment securely and help prevent fraud.
  • Brevo: to send order-related emails and, if you have signed up, marketing emails.
  • Royal Mail: to deliver your order.
  • Our website platform (WordPress / WooCommerce) and hosting provider, to run the site and store orders.
  • Google Analytics: to understand website usage, only if you allow analytics cookies.

We do not sell your personal data to anyone.

Cookies and analytics

Our site uses cookies. When you first visit, only essential cookies are used. Analytics tools are not loaded, and set no cookies, unless you allow them in our cookie banner. We do not use advertising or marketing tracking on this site. You can change or withdraw your choice at any time using the “Cookie settings” link at the bottom of every page. We remember your choice for six months.

  • Essential (always on): needed for the site, basket and checkout to work. This includes WooCommerce basket and session cookies, Stripe’s fraud prevention cookies, and a cookie that remembers your cookie choice.
  • Analytics (only with your consent): Google Analytics, which tells us how visitors use the site (pages visited, device and browser type, approximate location), and WooCommerce order attribution, which records how you found us (for example a search engine or a link) when you place an order.

How long we keep it

We keep order and transaction records for as long as required for accounting and legal purposes (generally six years). Marketing sign-up data is kept until you unsubscribe or ask us to remove it.

Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate data;
  • ask us to delete your data (where we are not legally required to keep it);
  • object to or restrict certain processing;
  • withdraw consent to marketing at any time;
  • request a copy of your data in a portable format.

To exercise any of these, email ffrind@ffyngau.co.uk. You also have the right to complain to the ICO (ico.org.uk) if you are unhappy with how we handle your data.

Changes to this policy

We may update this policy from time to time. The current version is always the one published on this page.

Contact

Ffyngau Cyf, 15 Yorke Street, Wrexham, LL13 8LW.
Email: ffrind@ffyngau.co.uk