Privacy policy

Last updated: 13 November 2026

We collect only what we need to take, deliver and support your order, and to run this website securely. We do not sell your data. We do not use analytics, advertising pixels or tracking cookies. You can ask to see, correct or delete your data at any time by emailing support@paruneli.com.

Who is responsible for your data

The controller of your personal data is LE TOURNEUR TRADING LTD, trading as PARUNELI, 14 Bramley Gardens, Herne Bay, CT6 7DS, United Kingdom. Email support@paruneli.com, phone +44 7907 841474. This policy applies under the UK General Data Protection Regulation and the Data Protection Act 2018 and, for customers in the European Economic Area, under the EU General Data Protection Regulation (GDPR).

What we collect

• Order details: your name, delivery and billing address, email address, phone number, the items you order and your order history.
• Account details, if you create an account: your email address and password, which is stored in encrypted form.
• Payment details: handled by our payment providers. We receive confirmation of payment, the payment method type and, for cards, the card brand, last four digits and expiry date. We never see or store your full card number.
• Messages: what you send us by email, phone or through our forms, including withdrawal and return requests.
• Technical data: your IP address, browser type and the pages you request, which our server records in standard logs for security.

How we show prices in your currency

We use your IP address to work out which country you are in, so that we can show prices in your local currency. This lookup happens on our own server using a country database from DB-IP that is stored on that server. Your IP address is not sent to any other company for this purpose. The result, a region code such as “GB” or “EU”, is stored in your shopping session and in the pr_zone cookie described in our Cookie Policy. It is used only to show prices and delivery charges in the right currency.

Why we use your data and our legal basis

Purpose	Legal basis
Taking, paying for, delivering and supporting your order, including cancellations, returns and refunds	Performance of our contract with you
Running your customer account	Performance of a contract
Keeping order and accounting records	Legal obligation
Preventing fraud and keeping the website secure	Our legitimate interests in protecting our customers and our business
Showing prices and delivery charges in your local currency	Our legitimate interests in showing you relevant prices
Answering your questions and complaints	Our legitimate interests, or performance of a contract
Sending marketing emails, only if you have asked to receive them	Your consent, which you can withdraw at any time
Handling product safety reports and contacting customers about a safety issue	Legal obligation, and our legitimate interests in keeping customers safe

You need to give us your name, address and email address to place an order. Without them we cannot deliver it. We send you marketing emails only if you have asked to receive them, and you can stop them at any time using the unsubscribe link or by emailing us. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our payment providers screen payments automatically for fraud. If a payment is declined, you can contact us.

Who we share it with

• Hostinger, our hosting provider, which hosts our website and its database.
• Stripe, which processes card payments, including Apple Pay and Google Pay, and screens them for fraud.
• PayPal, when you choose to pay with PayPal. PayPal also acts as an independent controller for your PayPal account.
• Our email service provider, which sends and stores our emails, including order confirmations.
• Delivery carriers and the partners who pack and send our orders, who receive your name, address, phone number and order contents so they can deliver your parcel. Outside the UK, carriers also use this data for customs clearance.
• Professional advisers and authorities, such as our accountants, HMRC, product safety authorities or a court, where this is needed for our legal obligations or to protect our rights.

Our service providers act on our instructions and must keep your data secure. We do not sell your personal data, and we do not share it for advertising.

International transfers

Some of our providers, and carriers delivering outside the UK, process data in other countries, including the United States. Where data leaves the UK or the European Economic Area, we rely on adequacy regulations or decisions (for example the UK–US Data Bridge and the EU–US Data Privacy Framework for certified companies), or on standard contractual clauses with the UK International Data Transfer Addendum. You can ask us for more information about these safeguards.

How long we keep it

• Order, payment and refund records: 6 years after the end of the financial year in which the order was placed, to meet tax and accounting rules.
• Customer accounts: until you close your account. The account is then deleted or anonymised, except for the order records above.
• Emails, withdrawal and return requests and safety reports: up to 3 years after the matter is closed.
• Server logs: up to 90 days.
• Basket and session data: up to 2 days, or 7 days if you are logged in.

Your rights

You have the right to access your personal data and to have it corrected or erased. You can also ask us to restrict how we use it, object to processing based on our legitimate interests, and receive it in a portable format. Email support@paruneli.com and we will reply within one month.

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to a data protection authority:

• United Kingdom: the Information Commissioner’s Office (ICO), ico.org.uk, telephone 0303 123 1113.
• European Economic Area: the supervisory authority in the country where you live or work. In Germany this is the data protection authority of your federal state. In Denmark it is Datatilsynet, datatilsynet.dk. In Sweden it is Integritetsskyddsmyndigheten (IMY), imy.se.

Customers in the United States and Canada

We do not sell personal information and do not share it for cross-context behavioural advertising. Depending on where you live, you may have the right to know what personal information we hold about you, to correct it and to have it deleted. You can make a request by emailing support@paruneli.com. We will not treat you differently for using these rights.

Cookies

We use only the cookies needed for the shop to work, such as your basket, your currency and checkout. Our Cookie Policy lists them.

Children

Our shop is not aimed at children, and we do not knowingly collect data from anyone under 16.

Security

Our website uses an encrypted connection (HTTPS). Access to customer data is limited to the people who need it to handle your order.

Changes

We will update this policy if the way we use personal data changes, and show the date of the latest version at the top of this page.