Privacy policy

 

Last updated: 21 June 2026

This Privacy Policy explains how Anyora Limited, trading as Anyora, collects, uses, shares, stores and protects personal information when you visit anyora.uk, create or use an account, place or attempt to place an order, communicate with us or otherwise use our store and services.

It also explains your data-protection rights, how you can control certain uses of your information and how to make a complaint.

This Privacy Policy should be read together with our:

1. Who we are

Anyora Limited is the controller responsible for the personal information described in this policy, except where another organisation acts as a separate controller for its own services and processing.

Anyora Limited, trading as Anyora
Company number: 16938766
Registered in England and Wales

72 Ambergate Road
Bilston
WV14 0SR
United Kingdom

Email: support@anyora.uk
Telephone: +44 1902 382162
Website: anyora.uk
Contact page: Contact Anyora

Customer-support hours are Monday to Friday, 9:00am to 5:00pm UK local time, excluding public holidays.

UK local time means Greenwich Mean Time or British Summer Time, as applicable.

In this policy, “Anyora”, “we”, “us” and “our” mean Anyora Limited.

2. When this policy applies

This policy applies when you:

  • visit or use our website;

  • browse or search for products;

  • create or use a customer account;

  • add products to your basket;

  • begin, complete or abandon a checkout;

  • place or attempt to place an order;

  • select a payment method;

  • make a payment or receive a refund;

  • use Shop Pay or another accelerated checkout service;

  • contact customer support;

  • request a cancellation, return, repair, replacement or refund;

  • make a complaint;

  • subscribe to marketing;

  • interact with an advertisement for Anyora;

  • interact with our cookie banner or privacy controls;

  • participate in payment, identity, authentication or fraud-prevention checks; or

  • otherwise interact with Anyora.

A third party that provides a service directly to you may process personal information under its own privacy notice.

3. Personal information we collect

The information we collect depends on how you interact with us.

Identity and contact information

This may include:

  • your name;

  • email address;

  • telephone number;

  • billing address;

  • delivery address;

  • recipient information;

  • customer, account or order reference;

  • contact preferences; and

  • marketing preferences.

Order and transaction information

This may include:

  • products, quantities and variants viewed or ordered;

  • basket and checkout contents;

  • order date and value;

  • discounts and promotional codes;

  • delivery method and charge;

  • payment status;

  • transaction reference;

  • refunds, cancellations and returns;

  • repair or replacement requests;

  • delivery and tracking information;

  • chargebacks and payment disputes; and

  • customer-service records connected with an order.

Payment-related information

Payments may be processed by Shopify Payments, PayPal or another payment provider displayed during checkout.

The payment provider normally collects complete payment credentials directly through its secure payment interface.

Anyora normally receives limited transaction information, which may include:

  • payment status;

  • transaction reference;

  • payment-method type;

  • billing information;

  • masked or limited card information;

  • authentication status;

  • refund information;

  • dispute information; and

  • fraud or risk indicators.

Anyora staff do not normally have access to complete payment-card numbers or card security codes.

Do not send us complete:

  • card numbers;

  • card security codes;

  • banking passwords;

  • PayPal passwords;

  • digital-wallet credentials; or

  • authentication codes.

Customer-account information

Where you choose to create an account, we may process:

  • account contact information;

  • login and authentication information;

  • saved addresses;

  • account preferences;

  • order history;

  • return and cancellation requests; and

  • account activity.

Creating an account is optional where guest checkout is available.

Communications and customer-support information

This may include:

  • emails;

  • contact-form submissions;

  • telephone enquiries;

  • correspondence;

  • complaints;

  • cancellation, return and refund communications;

  • photographs or videos supplied as evidence of damage, faults or incorrect delivery;

  • privacy-rights requests; and

  • data-protection complaints.

If we record a customer-support call, we will provide an appropriate notice before or at the beginning of the recording where required.

Marketing information

This may include:

  • whether and when you subscribed;

  • the method and wording used to collect your preference;

  • marketing messages sent to you;

  • delivery and unsubscribe information;

  • opening or link-interaction information where our service provider lawfully makes it available;

  • unsubscribe or objection requests;

  • checkout-reminder information; and

  • associated technical information.

Technical and usage information

Depending on your choices and our technical configuration, this may include:

  • IP address;

  • browser and device information;

  • operating system;

  • approximate location derived from an IP address;

  • referring website;

  • pages viewed;

  • searches;

  • product interactions;

  • basket activity;

  • checkout activity;

  • purchase events;

  • dates and times of visits;

  • cookie and consent choices;

  • account and session information;

  • security logs;

  • advertising interactions; and

  • fraud or authentication information.

4. Special-category and criminal-offence information

We do not normally need special-category information, such as information concerning:

  • health;

  • racial or ethnic origin;

  • religious or philosophical beliefs;

  • political opinions;

  • trade-union membership;

  • genetic information;

  • biometric identification;

  • sex life; or

  • sexual orientation.

We also do not normally need information about criminal allegations or convictions.

Please do not provide this information unless it is genuinely necessary and we have requested it.

Where unnecessary or excessive sensitive information is supplied, we may delete, redact or restrict it.

Where processing special-category or criminal-offence information is necessary, we will identify an appropriate lawful basis and any additional legal condition required.

5. Information about other people

You may provide another person’s information, for example where you ask us to deliver an order to them.

Only provide information that is:

  • accurate;

  • relevant;

  • reasonably necessary; and

  • provided with appropriate authority.

Where appropriate, you should make the other person aware that their information has been provided to Anyora and direct them to this policy.

6. How we obtain personal information

We may obtain personal information:

  • directly from you;

  • automatically when you use our website, subject to applicable consent choices;

  • from Shopify and Shopify services;

  • from Shopify Payments;

  • from PayPal and other payment providers;

  • from Shop Pay where you use that service;

  • from Royal Mail, Evri or another delivery or returns provider;

  • through our connected Pinterest service;

  • from security, authentication and fraud-prevention services;

  • from banks, card networks and payment providers in connection with a transaction or dispute;

  • from professional advisers;

  • from courts, regulators or public authorities; and

  • from another lawful source where necessary.

Where we obtain information from another source, we will provide any privacy information required by law unless an applicable exception applies.

7. Why we use personal information and our lawful bases

We process personal information only where we have an appropriate lawful basis.

Taking steps before a contract and performing a contract

We use identity, contact, order, payment-status and delivery information to:

  • provide product and checkout functionality;

  • receive and review orders;

  • confirm product availability;

  • process payments;

  • dispatch and deliver goods;

  • provide customer accounts;

  • administer cancellations, returns, repairs, replacements and refunds; and

  • provide order-related customer support.

The lawful basis is normally taking steps at your request before entering into a contract or performing our contract with you.

Legal obligations

We may process information where necessary to comply with:

  • tax and accounting requirements;

  • consumer-protection law;

  • product-safety obligations;

  • data-protection law;

  • payment and financial requirements;

  • court orders;

  • regulatory obligations; and

  • other legal duties.

Legitimate interests

Where appropriate, we may process information for our legitimate interests in:

  • operating and improving our store;

  • maintaining accurate business records;

  • protecting customer accounts;

  • preventing fraud and misuse;

  • securing our website and checkout;

  • investigating delivery or product issues;

  • resolving complaints and disputes;

  • defending legal claims;

  • understanding store performance; and

  • communicating with customers about our services.

Before relying on legitimate interests, we consider whether the processing is necessary and whether your rights and interests override our interests.

Consent

Where required, we rely on consent for activities such as:

  • non-essential cookies and similar technologies;

  • advertising pixels;

  • behavioural advertising;

  • certain personalisation;

  • promotional emails; and

  • another optional use for which consent is the appropriate basis.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

8. Information needed to place an order

We need certain information to process an order, including:

  • your name;

  • email address;

  • delivery address;

  • order details; and

  • information required by the selected payment provider.

If you do not provide required information, we may be unable to accept, fulfil, deliver or support the order.

You do not have to:

  • create a customer account; or

  • agree to optional marketing

to place an order where guest checkout is available.

9. Shopify hosting and core ecommerce services

Our online store is hosted through Shopify.

For core ecommerce services, Shopify may process information on our behalf to provide services including:

  • website hosting;

  • shopping-basket functionality;

  • checkout;

  • customer accounts;

  • order administration;

  • transactional communications;

  • fraud detection;

  • platform performance;

  • store security;

  • analytics and reporting; and

  • store administration.

Shopify may also act as a separate controller for certain consumer-facing, enhanced or independently determined processing.

Further information is available in the Shopify Consumer Privacy Policy.

10. Shopify Network Intelligence and Enhanced Services

Shopify Network Intelligence is enabled for our store.

When Shopify Network Intelligence is enabled, Shopify may securely use customer information from interactions with:

  • Anyora;

  • Shopify;

  • Shop;

  • Shop Pay;

  • other participating Shopify merchants; and

  • Shopify-supported services

together with other Shopify data to generate insights and provide Enhanced Services.

Depending on the service, Enhanced Services may support:

  • security and fraud prevention;

  • improved checkout and payment experiences;

  • store performance;

  • personalisation;

  • product recommendations;

  • measurement;

  • advertising-related services;

  • improved advertising targeting; and

  • improvements to Shopify and merchant services.

Shopify may share information with relevant service providers and may process it in countries outside the United Kingdom.

Other merchants do not receive direct access to Anyora’s customer information merely because Shopify Network Intelligence is enabled.

For some Network Intelligence and Enhanced Services processing, Shopify acts as a separate controller and determines its own purposes, lawful bases and methods of processing.

Our Shopify cookie banner and privacy controls communicate applicable consent and opt-out choices to Shopify.

Where a customer does not consent to non-essential technologies through an appropriately integrated privacy control, applicable device data is marked so that Shopify Network Intelligence does not use it for non-essential purposes.

Customers can:

  • change their choices through our cookie-preferences control;

  • contact Anyora concerning information controlled by Anyora; and

  • use the Shopify Privacy Portal to exercise relevant rights directly with Shopify, including withdrawing consent, objecting to certain processing or requesting deletion.

11. Shop Pay and managed payment methods

Shop Pay and managed payment methods are enabled.

Where you select Shop Pay, Shopify may process information including:

  • your email address;

  • telephone number;

  • billing address;

  • delivery address;

  • payment information;

  • order information;

  • account information; and

  • authentication and security information.

Using Shop Pay is optional. You may select another payment method displayed during checkout.

Managed payment methods may affect the order or availability of eligible payment options according to matters such as:

  • customer location;

  • device or browser;

  • account eligibility;

  • payment-provider support; and

  • transaction characteristics.

Shopify provides these services under its own privacy terms.

12. Pinterest app pixel

Pinterest is connected to our store as an app pixel through Shopify Customer Events.

Subject to your cookie and consent choices, the Pinterest app pixel may receive information including:

  • page views;

  • product views;

  • searches;

  • basket activity;

  • checkout activity;

  • purchases;

  • order value;

  • currency;

  • browser and device information;

  • IP address and approximate location;

  • cookie or advertising identifiers; and

  • hashed contact identifiers where configured and lawfully permitted.

Pinterest may use this information to:

  • measure advertising performance;

  • attribute visits and purchases;

  • create or improve advertising audiences;

  • detect fraud;

  • improve Pinterest services; and

  • personalise advertising with the appropriate consent.

Pinterest may act as a separate controller for its own processing.

Further information and available choices are provided in the:

Anyora does not use customers’ personal information or images in advertising without their consent.

13. Cookies and similar technologies

We use cookies, pixels, local storage and similar technologies to:

  • operate the website;

  • keep the website and checkout secure;

  • remember customer choices;

  • provide requested functionality;

  • understand store performance; and

  • support advertising and measurement where permitted.

Our Shopify cookie banner is displayed to United Kingdom visitors and uses automated regional settings.

The banner provides options to:

  • accept;

  • decline; and

  • manage preferences.

Technologies may be placed into categories such as:

  • strictly necessary;

  • preferences;

  • analytics; and

  • advertising.

Consent may not be required where a lawful exception applies, including where a technology is strictly necessary to:

  • transmit a communication; or

  • provide a service you expressly requested.

We request the applicable consent before using non-essential technologies for:

  • analytics;

  • advertising;

  • attribution;

  • personalisation;

  • cross-service tracking; or

  • behavioural profiling.

You may change or withdraw your choices through the cookie-preferences control available on our website.

Withdrawal does not affect processing that lawfully occurred before the choice was changed.

Our Cookie Policy provides further information about relevant technologies, providers, purposes and durations.

14. Data Sharing Opt-Out page

Shopify’s automated Data Sharing Opt-Out page is configured for our store.

You can access it through the Data Sharing Opt-Out page.

The choices available through that page may depend on:

  • your location;

  • applicable privacy law;

  • Shopify’s regional settings; and

  • the processing active for your visit.

Where applicable, the page may allow eligible visitors to opt out of activities legally treated as:

  • sale;

  • sharing;

  • targeted advertising; or

  • similar processing.

United Kingdom visitors can manage non-essential cookies and tracking through our cookie-preferences control and may exercise relevant Shopify rights through the Shopify Privacy Portal.

15. Payment providers

Shopify Payments, PayPal, Apple Pay, Google Pay and other payment providers displayed during checkout may process information to:

  • authorise and complete payments;

  • authenticate customers;

  • verify payment methods;

  • prevent fraud;

  • issue refunds;

  • manage disputes and chargebacks;

  • meet financial and regulatory obligations; and

  • protect payment-system security.

A payment provider may act as a separate controller under its own privacy notice.

16. Delivery and returns providers

We currently use Royal Mail and Evri and may use another suitable delivery or returns provider.

We share information reasonably required to deliver, track, return or investigate an order, including:

  • the recipient’s name;

  • delivery address;

  • telephone number where reasonably necessary;

  • email address where reasonably necessary;

  • delivery instructions;

  • parcel information;

  • return information; and

  • tracking information.

Delivery providers may use email addresses or telephone numbers to send delivery notifications.

They may act as separate controllers for parts of their delivery, security, fraud-prevention and legal-compliance activities.

17. Service communications

We use contact, order, payment, account and delivery information to send necessary service communications, including:

  • order acknowledgements;

  • payment and refund updates;

  • dispatch and delivery information;

  • account-security notices;

  • responses to enquiries;

  • return instructions;

  • complaint updates; and

  • product-safety notices.

These messages are not sent for direct-marketing purposes merely because they concern an order or service you requested.

18. Promotional emails and checkout reminders

We send promotional emails only where you have provided valid consent.

Marketing consent is:

  • optional;

  • not required to place an order; and

  • not preselected for United Kingdom customers.

You can withdraw consent or object to direct marketing at any time by:

  • selecting the unsubscribe option in a marketing email;

  • changing an available preference setting; or

  • contacting support@anyora.uk.

Where checkout-reminder emails are configured, we send them only where the recipient has consented to email marketing and the communication is otherwise legally permitted.

An incomplete checkout is not treated as a completed order.

We may retain minimum suppression information so that an unsubscribe or objection continues to be respected.

19. Who we share information with

Where reasonably necessary, we may disclose personal information to:

  • Shopify and relevant Shopify service providers;

  • Shopify Payments;

  • PayPal;

  • Shop Pay;

  • Apple Pay and Google Pay where selected;

  • banks and card networks;

  • Pinterest;

  • Royal Mail, Evri and other delivery or returns providers;

  • communications and marketing providers;

  • security, authentication and fraud-prevention providers;

  • website and technical-support providers;

  • accountants, insurers, solicitors and other professional advisers;

  • courts, regulators, tax authorities and law-enforcement bodies;

  • prospective purchasers and advisers in connection with a genuine business sale, investment or restructuring; and

  • another recipient where you direct or authorise us to disclose the information.

A processor acting only on our behalf may use information only for the contracted services, in accordance with our instructions and applicable law.

20. Sale of contact information and advertising use

Anyora does not sell customer contact information to third parties, whether in exchange for money or another commercial benefit.

Sharing information with a service provider for a purpose explained in this policy is not a sale of customer contact information by Anyora.

Anyora does not use customers’ personal information or images in advertising without their consent.

Anyora’s website is operated primarily to offer and sell physical goods, not to collect personal information.

We request only information reasonably necessary for the purposes described in this policy.

21. International processing and transfers

Shopify currently displays the European Union as the selected data-storage hosting location for our store.

This does not mean that all processing by Shopify or another provider takes place only in the European Union.

Shopify, PayPal, Pinterest and other organisations supporting our store operate internationally. Personal information may therefore be processed outside the United Kingdom.

Where Anyora makes a restricted international transfer, we use a legally recognised transfer arrangement where required.

Depending on the circumstances, this may include:

  • transfer to a country or organisation covered by United Kingdom adequacy regulations;

  • the United Kingdom International Data Transfer Agreement;

  • the United Kingdom Addendum to approved standard contractual clauses;

  • binding corporate rules; or

  • another lawful transfer mechanism.

Where required, we also consider whether additional safeguards are necessary.

A separate controller is responsible for the transfer safeguards applying to processing it independently carries out.

Contact support@anyora.uk for further information about safeguards relevant to information controlled by Anyora and how to obtain an available copy.

22. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

We determine retention periods by considering:

  • the purpose of the processing;

  • the nature and sensitivity of the information;

  • contractual requirements;

  • legal and regulatory obligations;

  • tax and accounting requirements;

  • fraud and security risks;

  • complaint and dispute periods; and

  • the need to establish, exercise or defend legal claims.

Orders, payments, refunds and accounting records

Relevant order, transaction and accounting records are normally retained for six years from the end of the company financial year to which they relate.

They may be retained longer where required because of:

  • a tax enquiry;

  • fraud investigation;

  • regulatory action;

  • a complaint;

  • litigation;

  • a court order; or

  • another legal obligation.

Customer accounts

Account information is retained while an account remains active and for a reasonable period afterwards where necessary for:

  • security;

  • customer support;

  • fraud prevention;

  • dispute handling; or

  • legal claims.

Information connected with an order may continue to be retained under the order-record period after an account is closed.

Customer support, returns, complaints and disputes

Routine enquiries are retained only for as long as reasonably necessary to respond to and administer them.

Records connected with an order, return, chargeback, safety issue, contractual complaint or potential legal claim may be retained for up to six years after the relevant transaction, or longer while proceedings remain active.

Incomplete checkouts

Incomplete-checkout information is retained according to our Shopify configuration and only for as long as reasonably necessary for:

  • checkout recovery;

  • security;

  • fraud prevention;

  • analytics; and

  • legal compliance.

If an incomplete checkout becomes an order, the resulting order information is retained as part of the order record.

Marketing information

Marketing-subscription information is retained while you remain subscribed.

We may retain:

  • evidence of consent; and

  • minimum suppression information

after you unsubscribe or object, where necessary to demonstrate compliance and continue respecting your choice.

Fraud and security records

Fraud, authentication and security records are retained according to:

  • the seriousness of the risk;

  • the status of an investigation;

  • dispute or chargeback periods; and

  • the need to prevent repeated abuse or defend legal claims.

Cookie and consent records

Cookie-consent and preference records are retained for as long as reasonably necessary to demonstrate and respect your choices.

Consent may be requested again where technologies, purposes, settings or legal requirements materially change.

Privacy-rights requests and complaints

We retain sufficient records of privacy-rights requests and data-protection complaints for as long as reasonably necessary to:

  • respond to the request or complaint;

  • demonstrate compliance;

  • identify recurring issues; and

  • handle legal or regulatory proceedings.

When information is no longer required, we delete it, anonymise it or securely restrict its use.

23. Information security

We use reasonable technical and organisational measures designed to protect personal information.

These may include:

  • encrypted website connections;

  • secure hosted checkout;

  • access controls;

  • authentication;

  • restricted administrative access;

  • established payment providers;

  • security and fraud monitoring;

  • data minimisation;

  • staff confidentiality requirements; and

  • incident-management procedures.

Complete payment credentials are normally submitted directly through secure payment-provider interfaces.

No method of internet transmission or electronic storage can be guaranteed to be completely secure.

Keep passwords, devices and account-access methods secure and contact us promptly if you suspect unauthorised access.

24. Automated processing and profiling

Payment, authentication, fraud-prevention, Shopify Network Intelligence and advertising providers may use automated systems to:

  • assess transactions;

  • generate security or risk indicators;

  • personalise services;

  • measure advertising;

  • create audiences;

  • make recommendations; or

  • detect suspected misuse.

Anyora may use automated indicators to assist with review and decision-making.

Where Anyora makes a solely automated decision that produces a legal or similarly significant effect, we will apply the information, lawful basis and safeguards required by applicable law.

Depending on the circumstances, those safeguards may include:

  • information about the decision;

  • an opportunity to provide additional information;

  • human intervention;

  • an opportunity to make representations; and

  • an opportunity to challenge the decision.

A bank, payment provider, Shopify, Pinterest or another separate controller may independently use automated processing under its own privacy notice.

25. Your data-protection rights

Depending on the processing and lawful basis, you may have the right to:

  • request access to your personal information;

  • request correction of inaccurate or incomplete information;

  • request deletion;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • object to direct marketing at any time;

  • request portability of certain information;

  • withdraw consent where processing is based on consent;

  • exercise rights concerning certain automated decisions; and

  • complain to the Information Commissioner’s Office.

These rights are not absolute.

An exception may apply where information must be retained or processed for:

  • a legal obligation;

  • fraud prevention;

  • contractual or legal claims;

  • the rights of another person; or

  • another lawful purpose.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

26. Your right to object to direct marketing

You have the right to object at any time to our use of your personal information for direct marketing, including associated direct-marketing profiling.

When you object, we will stop using your information for that purpose.

You may:

  • select the unsubscribe option in a marketing message;

  • change an available preference setting; or

  • contact support@anyora.uk.

An objection to marketing does not prevent us from sending necessary:

  • order messages;

  • payment updates;

  • delivery communications;

  • security notices;

  • return or refund communications; or

  • product-safety notices.

27. Exercising your rights

You may make a privacy request verbally or in writing.

You may:

You may use the subject “Privacy Request”, but this is not required.

Please provide enough information for us to understand the request and identify the relevant records.

Where reasonably necessary, we may request proportionate evidence of:

  • your identity; or

  • your authority to act for another person.

We normally respond without undue delay and no later than one calendar month after receiving a valid request and any reasonably required identity information.

Where a request is complex or you make several requests, the law may permit an extension of up to two additional months.

Where an extension applies, we will notify you within the initial one-month period and explain why additional time is required.

Requests are normally handled free of charge.

The law may permit a reasonable fee or refusal where a request is manifestly unfounded or excessive.

28. Data-protection complaints

You may complain to Anyora if you believe that we have handled personal information incorrectly or failed to respect a data-protection right.

You may submit a complaint:

You may use the subject “Data Protection Complaint”, but this is not required.

We will:

  • provide a clear way for you to make a complaint;

  • acknowledge receipt within 30 days;

  • take appropriate steps to investigate without undue delay;

  • make reasonable enquiries;

  • keep you appropriately informed; and

  • communicate the outcome without undue delay.

You may complain to the Information Commissioner’s Office at any time.

You do not have to wait for Anyora to complete its investigation before contacting the Information Commissioner’s Office.

29. Children’s information

Customers must be at least 18 years old to place an order independently or independently create a customer account.

A parent or legal guardian may place an order for a product intended for or used by a child.

We do not knowingly invite children to subscribe independently to marketing.

We do not knowingly use children’s personal information for behavioural advertising.

Contact support@anyora.uk if you believe that a child has provided personal information inappropriately.

30. Third-party links and services

Our website may link to websites or services controlled by other organisations.

Those organisations are responsible for their own privacy practices.

Review their privacy information before providing personal information.

This policy does not govern an independent third-party service merely because it is linked from Anyora or made available during checkout.

31. Changes to this policy

We may update this policy when our:

  • services;

  • providers;

  • technologies;

  • pixels;

  • marketing practices;

  • legal obligations; or

  • processing activities

change.

The revised policy will be published with an updated “Last updated” date.

We will regularly review this policy to ensure that it continues to reflect our actual practices.

Where a material change affects how we use information already collected, we will provide further notice or obtain consent where required before beginning the new use.

Before adding another advertising or analytics pixel, we will review and update our disclosures and consent settings where necessary.

32. Contact us

For privacy questions, rights requests or data-protection complaints, contact:

Anyora Limited, trading as Anyora
Company number: 16938766
Registered in England and Wales

72 Ambergate Road
Bilston
WV14 0SR
United Kingdom

Email: support@anyora.uk
Telephone: +44 1902 382162
Contact page: Contact Anyora

Customer-support hours are Monday to Friday, 9:00am to 5:00pm UK local time, excluding public holidays.