Privacy policy

Last updated 24 September 2026.

Who is responsible for your data

Gebenco is the data controller for personal information collected through gebenco.com. You can reach us at hello@gebenco.com or by post at 4–6 Greatorex Street, London, E1 5NF, United Kingdom.

What we collect

We may collect the following, depending on how you interact with us:

• Contact and account details — name, email address, phone number, and delivery address when you place an order or complete a contact form.
• Order information — items purchased, order value, payment status, and correspondence related to your order. Payment details are handled by Stripe and are never stored by Gebenco.
• Marketing preferences — whether you have subscribed to our letter and your consent choices.
• Technical data — IP address, browser type, device, and pages visited. This is collected automatically to keep the website secure and working, and — with your consent — to improve our understanding of how the site is used.

How we use it

We use your information to:

• Process, fulfil, and support your orders.
• Respond to questions and enquiries.
• Send our letter and marketing communications where you have subscribed and consented.
• Understand how the website is used and improve it (analytics, with your consent).
• Run advertising and retargeting campaigns (with your consent).
• Prevent fraud and meet our legal and accounting obligations.

Legal basis for processing

We process your information on the following grounds:

• Contract — to fulfil an order you have placed.
• Legitimate interests — to keep the website secure and to respond to enquiries.
• Legal obligation — to meet accounting, tax, and regulatory requirements.
• Consent — for optional analytics, marketing cookies, and marketing communications. You may withdraw consent at any time.

Service providers and third parties

We work with selected providers who process data only as necessary for the services they perform. These include:

• Stripe — secure payment processing.
• Medusa / Cloudflare — ecommerce platform and website infrastructure.
• SwipeOne — contact and newsletter forms, and email marketing delivery.
• Marketing agencies — who assist with campaign planning and execution.
• Analytics providers — Google Analytics 4, Mixpanel, and Microsoft Clarity (with your consent).
• Advertising platforms — Meta (Facebook/Instagram), Google Ads, TikTok Ads, Pinterest, and Microsoft Advertising (with your consent, for retargeting and campaign measurement).

We do not sell personal information. We aim to keep data storage within the UK and EU where possible; some service providers may process data in other countries. Where they do, we rely on appropriate safeguards such as Standard Contractual Clauses.

How long we keep information

• Order records — 3 years from the date of order, then deleted or anonymised.
• Marketing subscriptions — until you unsubscribe or withdraw consent.
• Enquiry correspondence — up to 2 years, or longer if related to an order or dispute.
• Technical/analytics data — as configured in each tool's data retention settings.

Your rights

Under UK GDPR, you have the right to:

• Access a copy of the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your information (subject to legal obligations).
• Restrict or object to certain types of processing.
• Receive your information in a portable format.
• Withdraw consent at any time (this does not affect processing already carried out).

To exercise any of these rights, email hello@gebenco.com. We will respond within one calendar month. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

Cookies

Read our Cookie policy for full information about the technologies used on this website and how to manage your preferences.

Changes to this policy

We may update this policy from time to time. The current version will always appear on this page.

Privacy questions? Email hello@gebenco.com.