Privacy Policy

1. General
Airyday UK Ltd ("Airyday", "we", "us" or "our") respects the privacy of every individual who visits our website (airyday.co.uk) and interacts with our services. This Privacy Policy explains what personal data we collect, how we use it, and your rights in relation to it.

We are committed to handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and any other applicable UK data protection legislation.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not provide any personal information through this site.

For the purposes of UK GDPR, Airyday UK Ltd is the data controller. If you have any questions about this policy or how we handle your data, please contact us at: allday@airyday.co.uk.

2. What Personal Data We Collect
We will not collect any personal data about you unless you provide it to us voluntarily. Personal data we may collect includes:

• Name and contact details (e.g. email address, telephone number, postal address)
• Account information (e.g. username and password where applicable)
• Purchase and transaction data (e.g. billing and shipping information)
• Payment information (processed securely via our payment provider – we do not store full card details)
• Communications you send us (e.g. enquiries or feedback)
• Marketing preferences, including consent to receive SMS/text messages
• Mobile phone number (where provided for SMS marketing or notifications)

We collect personal data only when you voluntarily provide it, for example by completing a contact or order form, subscribing to our mailing list, or opting in to SMS communications.

3. Legal Basis for Processing
Under UK GDPR, we must have a lawful basis for processing your personal data. Depending on the activity, we rely on one or more of the following:

• Consent – where you have clearly opted in (e.g. to receive marketing emails or SMS messages)
• Contract – where processing is necessary to fulfil an order or provide a service you have requested
• Legal obligation – where we are required by law to process your data
• Legitimate interests – where we have a legitimate business interest that does not override your rights (e.g. fraud prevention, improving our website)

Where we rely on consent as a legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. How We Use Your Personal Data
We use your personal data only for the purposes for which it was collected, including:

• Processing and fulfilling your orders
• Managing your account and customer relationship
• Sending transactional communications (e.g. order confirmations, shipping updates)
• Sending promotional and marketing communications where you have consented
• Sending SMS/text messages where you have opted in (see Section 7)
• Improving our website and user experience through analytics
• Complying with legal and regulatory obligations
• Fraud prevention and security

We will not use your personal data for any purpose incompatible with the purpose for which it was originally collected, unless we obtain your consent or are otherwise permitted by law.

5. Sharing Your Personal Data
Airyday UK Ltd does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, solely to provide our services:

• Service providers and agents acting on our behalf (e.g. payment processors, delivery companies, IT providers, email and SMS platform providers)
• Professional advisors (e.g. legal, accounting, or insurance advisors) where necessary
• Regulatory or law enforcement authorities where required by law, court order, search warrant, or subpoena

All third parties with whom we share your data are required to keep it confidential and are not permitted to use it for any purpose other than performing services on our behalf.

The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties for purposes other than providing the SMS messaging service you have opted into.

6. Non-Personal Information & Cookies
When you visit our website, we may automatically collect certain non-personal information such as your browser type, operating system, referring website, and pages visited. This information is used for statistical and analytical purposes only and does not identify you personally.

We use cookies and similar tracking technologies on our website. Cookies are small text files stored on your device that help us:

• Recognise returning visitors and tailor content to your preferences
• Analyse website traffic and improve performance
• Keep track of items in your shopping cart, including abandoned carts (see Section 7)

You can manage your cookie preferences through your browser settings. Disabling cookies may affect your ability to use certain features of our website. For more information, please see our separate Cookie Policy.

We use strictly necessary cookies to enable core website functionality. Where we use non-essential cookies (e.g. analytics or marketing cookies), we will request your consent in accordance with UK law.

7. SMS Marketing and Notifications
With your explicit consent, we may send you SMS/text messages for marketing, promotional, and transactional purposes, including order updates, account alerts, and special offers.

Airyday UK's website uses cookies to help keep track of items you put into your shopping cart, including when you have abandoned your cart. This information is used to determine when to send cart reminder messages by text message.

By opting in to SMS, you agree to receive recurring SMS/text messages from Airyday UK Ltd to the mobile number you provide. Standard network message rates may apply.

Your consent to receive SMS messages is not a condition of purchase. You may opt out at any time by:

• Replying STOP to any text message you receive from us
• Clicking the unsubscribe link where available
• Contacting us directly at allday@airyday.co.uk

Upon opting out, you will receive a one-time confirmation message and no further SMS messages will be sent, unless initiated by you.

We will not share your SMS opt-in data or consent status with any third party for purposes unrelated to providing the SMS messaging service. We may share this data with platform providers, phone companies, and other vendors who assist us in delivering text messages, solely for that purpose.

The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements.

When your data is no longer required, we will securely delete or anonymise it. If you request deletion of your data, we will use reasonable efforts to remove it from our systems, subject to any legal obligations that require us to retain certain records.

9. Data Security
Airyday UK Ltd is committed to protecting your personal data. We implement appropriate technical and organisational measures to safeguard your data against unauthorised access, loss, misuse, or alteration.

All agents and service providers with access to your personal data are bound by confidentiality obligations and are not permitted to use your data for any purpose other than the services they perform on our behalf.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and, where required, inform you directly.

10. International Data Transfers
Where your personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place in accordance with UK GDPR requirements, such as standard contractual clauses or an adequacy decision by the UK government.

11. Your Rights Under UK GDPR
Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access – to request a copy of the personal data we hold about you
• Right to rectification – to request correction of inaccurate or incomplete data
• Right to erasure ('right to be forgotten') – to request deletion of your data in certain circumstances
• Right to restriction of processing – to request that we limit how we use your data
• Right to data portability – to receive your data in a structured, machine-readable format
• Right to object – to object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent – where processing is based on consent, to withdraw it at any time
• Rights related to automated decision-making and profiling

To exercise any of these rights, please contact us at allday@airyday.co.uk. We will respond within one calendar month of receiving your request. You will not be charged a fee for exercising your rights unless your request is manifestly unfounded or excessive.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: www.ico.org.uk
• Helpline: 0303 123 1113

12. How to Contact Us or Request Data Deletion
If you would like to access, correct, or request deletion of your personal data, or if you have any questions or concerns about this Privacy Policy, please contact us:

Email: allday@airyday.co.uk

We will use reasonable efforts to fulfil your request promptly and in accordance with our legal obligations.

13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on our website with a revised 'last updated' date. We encourage you to review this policy periodically.

Material changes will be communicated to you where required by law.