Privacy policy

Last Updated: [4/3/26]

SHREDDA (“we,” “us,” or “our”) operates this website. We are committed to protecting your personal data and complying with applicable privacy laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the California Consumer Privacy Act (CCPA/CPRA).

If you have questions about this policy or your data, contact us at:
📧 Taj.samways@icloud.com

1. Personal Information We Collect

A. Information You Provide

When you make a purchase or interact with our store, we may collect:

Full name
Billing and shipping address
Email address
Phone number (if provided)
Payment details (processed securely through our payment providers)

B. Information Collected Automatically

When you visit SHREDDA, we automatically collect:

IP address
Browser type and device information
Time zone
Cookies and tracking data
Pages viewed and interaction data
Referring websites or search terms

2. How We Use Your Information

We use your personal data to:

Process and fulfill orders
Provide customer support
Communicate about purchases
Prevent fraud and manage risk
Send marketing communications (only if you opt in)
Improve our website, services, and advertising

3. Legal Basis for Processing (UK/EU Customers)

Under GDPR, we rely on the following lawful bases:

Contractual necessity – to process and fulfill your order
Legal obligation – to comply with tax and accounting laws
Legitimate interests – fraud prevention, business improvement
Consent – for email marketing and certain cookies

You may withdraw consent at any time.

4. Shopify & Third-Party Services

Our store is hosted by Shopify, which provides the e-commerce platform that allows us to sell our products.

Your data is stored securely through Shopify’s systems. Payment information is encrypted and processed by secure payment gateways.

We may share your data with trusted third parties, including:

Payment processors
Shipping providers
Email marketing services
Analytics providers
Advertising platforms

These providers only process data necessary to perform their services.

If data is transferred outside the UK/EU, appropriate safeguards (such as Standard Contractual Clauses) are used where required.

5. Cookies & Tracking Technologies

We use cookies to:

Operate our store
Remember cart items
Analyze website traffic
Personalize advertising

For UK/EU visitors, non-essential cookies are only used with your consent.

You may manage cookie preferences in your browser settings.

6. Your Rights (UK & EU Residents)

Under GDPR, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion (“Right to be Forgotten”)
Restrict processing
Object to processing
Data portability
Withdraw consent

To exercise your rights, email:
📧 Taj.samways@icloud.com

You also have the right to lodge a complaint with your local data protection authority.

7. Your Rights (U.S. Residents – Including California)

Under CCPA/CPRA and similar U.S. state laws, you may have the right to:

Know what personal information we collect
Access your personal information
Request deletion of your personal information
Correct inaccurate information
Opt out of the sale or sharing of personal data
Non-discrimination for exercising privacy rights

SHREDDA does not sell personal information in the traditional sense. However, certain advertising activities may be considered “sharing” under California law.

To exercise your rights, email:
📧 Taj.samways@icloud.com

We may verify your identity before fulfilling your request.

8. Data Retention

We retain your personal information only as long as necessary to:

Fulfill orders
Comply with legal obligations
Resolve disputes
Enforce agreements

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, or misuse.

However, no method of transmission over the Internet is 100% secure.

10. Children’s Privacy

SHREDDA does not knowingly collect personal information from individuals under the age of 13 (or 16 in certain jurisdictions). If we learn that we have collected such data, we will delete it promptly.