This Privacy & Cookie Policy explains how Ebbor Limited ("Ebbor", "we", "us", "our") collects, uses, shares and protects personal data when you visit ebbor.com (the "Site"), create an account, purchase our products ("Products"), or otherwise interact with us.
We are committed to protecting your privacy and handling personal data fairly, lawfully and transparently.
1. Who We Are (Data Controller)
Ebbor Limited
Company number: 17169677
Registered office: Somerset
Trading address: Somerset
Email: privacy@ebbor.com (privacy queries) | hello@ebbor.com (customer support)
Website: ebbor.com
2. Scope of This Policy
This Policy covers personal data processed through ebbor.com and related customer service channels (email, chat).
3. The Data We Collect
Identity & Contact Information
- Name, email address, delivery/billing address, phone number (optional)
Account & Transaction Data
- Login credentials (hashed), order history, subscriptions, payment tokens, support history
Device & Usage Information
- IP address, browser/device type, cookie IDs, Site interactions
Preferences & Consents
- Marketing preferences, cookie choices
Payment Information
- Processed securely by PCI-compliant providers (we do not store full card numbers)
4. How We Use Your Data
| Purpose | Examples | Legal Basis |
|---|---|---|
| Provide Products & services | Orders, subscriptions, delivery, account management | Contract |
| Service communications | Order confirmations, subscription notices, safety information | Contract / Legal obligation |
| Fraud & security | Account protection, misuse prevention | Legitimate interests |
| Analytics & improvement | Site traffic analysis, feature performance | Consent (cookies) / Legitimate interests (aggregated) |
| Marketing | Newsletters, offers, updates | Consent (opt-in only) |
| Legal & compliance | Tax reporting, product recalls, safety reporting | Legal obligation |
We do not use automated decision-making that has legal or similarly significant effects.
5. Sharing Your Data
We only share data with:
Service Providers
- Payment processors and banks
- Logistics and fulfilment partners
- IT, hosting, analytics, and security providers
Legal Requirements
- Professional advisors and regulators where required by law
- Law enforcement when legally obligated
Business Transfers
- Successors in the event of merger, sale, or restructure (under equivalent privacy safeguards)
We do not sell your personal data.
6. International Transfers
If data is transferred outside the UK, we rely on:
- UK adequacy regulations (for EU/EEA transfers)
- Standard Contractual Clauses or International Data Transfer Addenda
- Supplementary safeguards (encryption, data minimisation)
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Accounts/orders | Life of account + 6 years (legal/tax requirements) |
| Customer support | 3 years |
| Marketing consents/logs | Active period + 2 years after opt-out |
| Cookies/analytics | Per consent settings and tool lifespan |
When retention periods expire, data is securely deleted or anonymised.
8. Data Security
We implement industry-standard security measures including:
- TLS encryption for data transmission
- Access controls and authentication
- Regular security monitoring and auditing
- Secure backup procedures
Please note: No system is completely secure. If a data breach occurs, we will notify you and relevant regulators where legally required.
9. Your Rights Under UK GDPR
You have the right to:
- Access — Request a copy of your personal data
- Rectify — Correct inaccurate or incomplete data
- Erase — Request deletion (subject to legal exceptions)
- Restrict — Limit how we process your data
- Object — Opt out of certain processing activities
- Portability — Receive your data in a portable format
- Withdraw consent — For consent-based processing (without affecting past lawful use)
- Complain — Lodge a complaint with the ICO
To exercise your rights: Contact privacy@ebbor.com. Response time: We will respond within one month.
10. Children's Privacy
Ebbor services are intended for adults aged 18 and over.
We do not knowingly collect personal data from children under 18. If you believe we have inadvertently collected such data, please contact us immediately.
11. Marketing Communications
Consent Required: We only send marketing communications with your explicit opt-in consent.
Unsubscribe: You can withdraw consent at any time by:
- Clicking unsubscribe links in emails
- Updating preferences in your account settings
- Contacting hello@ebbor.com
Service Communications: Essential service emails (order confirmations, safety notices) will continue to be sent regardless of marketing preferences.
12. Cookies and Online Tracking
What Are Cookies?
Small text files placed on your device that store information for browsing efficiency and analytics.
Types of Cookies We Use
Strictly Necessary Cookies (Always Active)
- Site security and fraud prevention
- Shopping cart and checkout functionality
- Essential account features
Performance/Analytics Cookies (Requires Consent)
- Google Analytics for traffic measurement
- Site performance monitoring
- User experience improvements
Functional Cookies (Requires Consent)
- Remember your preferences
- Personalised content delivery
- Enhanced site functionality
Advertising/Targeting Cookies (Requires Consent)
- Campaign effectiveness measurement
- Personalised advertising (if applicable)
- Social media integration
Third-Party Services
We may use:
- Google Analytics for website analytics
- Meta Pixel and Google Ads for advertising measurement (with consent)
- Other analytics and marketing platforms as disclosed
Managing Cookie Preferences
- Change Settings: Use our cookie banner or browser settings
- Learn More: Visit ico.org.uk or allaboutcookies.org for guidance
- Do Not Track: Our site does not currently respond to DNT browser signals
13. Social Media Features
Our Site may include social sharing buttons and widgets (e.g., Facebook "Like", Twitter "Share").
- Data Collection: These features may collect your IP address and browsing activity
- Third-Party Control: Interactions are governed by the respective platform's privacy policy
- Your Choice: You can avoid data collection by not interacting with these features
14. Changes to This Policy
Updates: We may update this Policy periodically to reflect legal, operational, or service changes.
Notification: Material changes will be communicated via:
- Email notification to registered users
- Prominent notice on our website
- Updated "Last Modified" date
Continued Use: Your continued use of our services after changes constitutes acceptance of the updated Policy.
15. Contact Us & Complaints
Privacy Enquiries
- Email: privacy@ebbor.com
- Post: Privacy Team, Ebbor Limited, Somerset
Regulatory Complaints
Information Commissioner's Office (ICO)
- Website: ico.org.uk
- Phone: +44 (0)303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Plain-English Summary
What We Do With Your Data: We use your information to run our website, process your orders and send you updates (if you agree to receive them).
Your Control: You have complete control over your data — access it, correct it, delete it, or withdraw consent at any time through your account or by contacting us.
Our Promise: We never sell your personal data to third parties. We only share it with trusted service providers who help us deliver our services to you.
Questions? Contact our privacy team at privacy@ebbor.com — we're here to help.