PRIVACY POLICY

Last updated: 08/08/2026

Who We Are

Backotter AA Ltd is the data controller responsible for the processing of personal data described in this policy. Registered in England and Wales. Trading as Savarind.

Company Registration Number: 16788172

Registered business address: 18 Holly Avenue, Leeds, West Yorkshire, LS16 6PN

Our website address is https://savarind.com.

What Personal Data We Collect

When You Place an Order

When you make a purchase through the Savarind Emporium, we collect:

Name
Billing and shipping address
Email address
Phone number (if provided)
Order details (products purchased, price paid, order date)
Payment confirmation (we do not store your full card details — see “Payment Processing” below)

When You Contact Us

If you get in touch via the Connect page contact form, we collect the name, email address, and message content you provide, in order to respond to your enquiry.

Website Security

We may process limited technical information, including IP addresses and server logs, for the purposes of security, fraud prevention, and website maintenance. Legal basis: legitimate interests.

When You Browse Our Site

We use analytics tools to understand how visitors use the site (see “Analytics” below), and cookies to support core site functionality and, where applicable, marketing (see “Cookies” below).

Children’s Data

Our products and services are intended for adults. We do not knowingly collect personal information from children under the age of 18. If we become aware that we have collected such information, we will take appropriate steps to delete it.

How We Use Your Data

We use your personal data to:

Process and fulfil your order, including arranging shipping
Communicate with you about your order (confirmations, dispatch updates, any issues)
Respond to enquiries made via the Connect page
Meet our legal and accounting obligations (e.g. maintaining records for tax purposes)
Improve our website and product range, using aggregated, anonymised analytics data
With your consent, send you occasional updates about new products or studio news (see “Marketing Communications” below)

Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

Contract: processing your order, arranging delivery, and handling related communication is necessary to fulfil our contract with you as a customer.
Legal obligation: retaining certain order and payment records to meet UK tax and accounting requirements.
Consent: for marketing communications and non-essential cookies, where you have actively opted in.
Legitimate interests: for basic site analytics that help us understand and improve the site, balanced against your right to privacy.

Payment Processing

Payments made through the Savarind Emporium are processed by Stripe, a third-party payment processor. Savarind does not see or store your full card details at any point — these are handled directly and securely by Stripe in line with their own security standards (Stripe is PCI-DSS compliant).

You can read Stripe’s own privacy policy at: https://stripe.com/gb/privacy

Who We Share Your Data With

We share your data with the following third parties, only as necessary to provide our service:

Stripe — to process payment for your order.
Shipping couriers — your name, delivery address, and contact details are shared with our shipping providers, selected on a sale-by-sale basis, solely to deliver your order.
Google Merchant Center — product information (not customer personal data) is shared with Google to enable our products to appear in Google Shopping search results. If you interact with a Savarind listing via Google, Google’s own privacy policy governs that interaction.
Google Analytics (via the MonsterInsights plugin) — to understand website traffic and usage in aggregate. This data is anonymised where possible.
Email service providers — if you sign up to receive updates from us, your email address is held with our email marketing platform for that purpose only.
Our website hosting and technical service providers — including our hosting provider and website backup service, who process data solely to keep the site running and secure.

We do not sell your personal data to third parties, and we do not share it for any purpose beyond running and improving our business as described in this policy.

Cookies

Our site uses a cookie consent management system to give you control over which cookies are set, in line with UK data protection law. You can review and change your cookie preferences at any time via the cookie settings link in our site footer.

For full details on the specific cookies used and their purposes, please see our separate Cookie Policy.

Analytics

We use Google Analytics (via MonsterInsights) to understand how visitors interact with our site — including pages visited, approximate location, device type, and interactions with the website. We use this information to understand and improve our website and services. We do not use Google Analytics to identify individual visitors.

Marketing Communication

If you choose to sign up for updates from Savarind, we will use your email address to send you occasional news about new products, studio updates, or launches. You can unsubscribe at any time using the link included in every marketing email we send, or by contacting us via the Connect page.

We will never sell your email address, or use it for any purpose beyond the updates you’ve signed up for. We maintain records of marketing consent where required by law.

How Long We Keep Your Data

Order data: retained for as long as necessary to fulfil the order, handle any returns or warranty matters, and meet our legal obligations for tax and accounting records (currently a minimum of 6 years under UK requirements).
Contact form enquiries: retained only as long as necessary to resolve your enquiry, and then deleted or anonymised.
Marketing email addresses: retained until you unsubscribe or request deletion.
Analytics data: retained in line with Google Analytics’ standard retention settings, primarily in aggregated/anonymised form.
Warranty and customer service records: may be retained for the duration of any applicable product warranty period, and for a reasonable period afterwards.

Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct any inaccurate data
Request deletion of your data, where we are not legally required to retain it
Object to or restrict certain processing, including marketing
Data portability — request a copy of your data in a portable format
Withdraw consent at any time, where processing is based on consent (e.g. marketing, non-essential cookies)

To exercise any of these rights, please contact us via the Connect page. We will respond within the timeframes required by UK law.

If you are unhappy with how we have handled your data, we would appreciate the opportunity to address your concerns directly and encourage you to contact us first. You also have the right to lodge a complaint with the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at https://ico.org.uk.

Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will act in accordance with applicable UK data protection law, including notifying the Information Commissioner’s Office and affected individuals where required.

International Data Transfers

Some of our third-party service providers (such as Stripe and Google) may process data outside the UK. Where this happens, we rely on those providers’ own compliance with UK GDPR adequacy requirements, including standard contractual clauses where applicable.

Changes to This Policy

We may update this privacy policy from time to time, for example if we introduce a new service or change how we process data. The “last updated” date at the top of this page will reflect the most recent revision.

YOUR SELECTION