Privacy Policy

1. Who's responsible for your data

E F A L I is the data controller for the personal information collected through efali.co.uk. You can contact us any time at lauren@efali.co.uk.

2. What we collect

• Account details your name, email address and an encrypted version of your password.
• Purchase details what you bought and when. Card details are handled entirely by Stripe; we never see or store them.
• Messages anything you send us through the contact form or by email.

3. Why we use it

To create and run your account, give you access to what you've bought, take payment, send you the emails that go with your account (confirming sign-up, resetting your password, confirming a purchase), answer your messages, and improve the site. We rely on our contract with you for anything needed to deliver your purchase, and on our legitimate interest in running and improving a small business for the rest.

4. Marketing

We only send marketing emails if you've asked for them, and every one has an unsubscribe link. Account and purchase emails aren't marketing and will still be sent while you have an account.

5. Who else sees it

We use a small number of trusted providers to run the service: Stripe for payments, our hosting and database provider for the site and your account, and our email provider to deliver messages. They only process your information on our instructions. We never sell your data.

6. Cookies and storage

We use essential browser storage to keep you signed in and to remember basic preferences, such as whether you've installed the app. We don't use advertising or third-party tracking cookies.

7. How long we keep it

Account information is kept while your account is open, and for a short period afterwards. Records of purchases are kept for six years because tax rules require it. Contact messages are kept while they're useful for supporting you, then deleted.

8. Your rights

Under UK GDPR you can ask to see the information we hold about you, correct it, delete it, restrict or object to how we use it, or receive a copy of it. Email lauren@efali.co.uk and we'll respond within one month. If you're unhappy with how we've handled it, you can complain to the Information Commissioner's Office at ico.org.uk.

9. Security

Your data is stored on secure, access-controlled services, passwords are encrypted, and the site is served over HTTPS. No system is perfectly secure, but we take care with what you trust us with.

10. Changes

If we change this policy we'll update the date at the top of this page. Significant changes will be flagged to you by email.