Privacy policy

Privacy policy for the online shop Komforna under the UK GDPR and the Data Protection Act 2018. Last updated: 30 July 2026.

1. Who is responsible

The controller responsible for the processing of personal data in this online shop is Komforna, 21 Trewern, Saron, Llandysul SA44 5DS, United Kingdom, E-Mail: info@komforna.com.

2. What data we process

Order data: name, delivery and billing address, email address, order contents and payment status, so we can process your order, deliver it and handle returns and questions.

Contact data: the content of your message and your email address when you contact us by email or through the contact form, so we can answer you.

Account data: if you create a customer account, your login details and stored addresses, so you can order faster next time.

Usage data: information about how you use the shop (pages visited, device and browser type, approximate region), collected through cookies and similar technologies, so the shop works technically and, with your consent, so we can understand how it is used.

3. Purposes and legal bases

We process your data to perform our contract with you (order, payment, delivery, returns), on the basis of Article 6(1)(b) UK GDPR; to meet legal obligations such as accounting and tax retention, on the basis of Article 6(1)(c) UK GDPR; for our legitimate interests, for example IT security, fraud prevention and the technical operation of the shop, on the basis of Article 6(1)(f) UK GDPR; and, where required, on the basis of your consent, for example for non-essential cookies and analytics, on the basis of Article 6(1)(a) UK GDPR. You can withdraw consent at any time through the cookie preferences link in the footer, with effect for the future.

4. Who receives your data

Shopify Inc. (Canada) operates the shop platform and processes order and usage data on our behalf. Payment providers process your payment; which provider handles your payment depends on the method you choose at checkout. Carriers receive your delivery address to deliver your parcel. We only share the data each recipient needs for its task. We do not sell your data.

5. Transfers outside the United Kingdom

Because Shopify is based in Canada and uses service providers in other countries, your data may be transferred outside the United Kingdom. Where this happens, the transfer is protected by appropriate safeguards, for example the UK's international data transfer agreement or addendum to the EU standard contractual clauses, as recognised under Article 46 UK GDPR.

6. How long we keep data

We keep order data for as long as legal retention periods require (in the United Kingdom generally six years for tax and accounting purposes) and delete or anonymise it afterwards. Contact messages are kept as long as needed to handle your request and any follow-up. Cookie and usage data are kept according to the retention periods of the respective cookies, which you can review in the cookie preferences.

7. Your rights

You have the right to access your personal data, to have it rectified or erased, to restrict or object to its processing, and to data portability. You can withdraw any consent at any time with effect for the future. To exercise these rights, email info@komforna.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data is being handled unlawfully.

8. Cookies

The shop uses cookies and similar technologies. Strictly necessary cookies keep the shop working (cart, checkout, security). With your consent, additional cookies may be used for analytics and personalisation. When you first visit the shop you can accept, decline or manage these via the cookie banner; you can change your choice at any time via the cookie preferences link in the footer.