Privacy Policy
Last updated 26 April 2026.
This Privacy Policy explains how Gebenco collects, uses, stores, and shares personal data when you use gebenco.com, place an order, or contact us.
1. Who we are
Gebenco is the data controller for personal data processed through gebenco.com for ecommerce, marketing, and customer support operations.
Contact: [email protected] · gebenco.com
2. Personal data we collect
Data you provide directly
- Name
- Email address
- Billing and delivery address
- Telephone number (if provided)
- Order details and customer service communications
Data collected automatically
- Device and browser information
- Page views and on-site interactions
- Attribution data (for example UTM parameters, referrer, campaign metadata)
- Cookie and session data
3. How we use your personal data
| Purpose | Typical data used | Legal basis |
|---|---|---|
| Process and fulfil orders | Identity, address, order and payment status data | Contract performance |
| Customer support and order updates | Contact details, order history, support history | Contract performance / legitimate interests |
| Fraud prevention and platform security | Device, session, and transactional signals | Legitimate interests |
| Analytics and service improvement | Usage and performance data | Consent (where required) / legitimate interests |
| Marketing communications | Email and engagement data | Consent |
| Legal and regulatory compliance | Transaction and records data | Legal obligation |
4. Who we share data with
We share data only where needed for operations.
- Payment processing providers
- Shipping and fulfilment partners
- Ecommerce and site infrastructure providers
- Email/CRM providers
- Analytics and tag-management providers
- Professional advisers and regulators where legally required
We do not sell personal data.
5. International transfers
Some service providers may process data outside the UK. Where this happens, we use appropriate safeguards under UK GDPR requirements.
6. Data retention
We retain data for only as long as necessary.
- Order and tax records: retained per legal and accounting requirements
- Customer account and support records: retained while needed for service and compliance
- Marketing records: retained until unsubscribed or deleted
- Analytics/attribution records: retained according to platform settings and business reporting needs
7. Your rights
You may have rights to:
- access your personal data
- correct inaccurate data
- request deletion of your data
- restrict or object to processing
- withdraw marketing consent
- request portability where applicable
- complain to the Information Commissioner's Office (ICO)
To exercise rights, email [email protected].
8. Marketing preferences
You can unsubscribe from marketing emails using the unsubscribe link in any email or by contacting us directly.
9. Cookies and tracking
For cookie use and controls, see our Cookie Policy.
10. Security
We use technical and organizational measures to reduce unauthorized access, loss, misuse, or alteration of personal data.
11. Changes to this policy
We may update this policy from time to time. Updates are posted on this page with a revised date.