Privacy Policy

Last updated: August 5, 2026

Data controller: Homeax
Contact address: 15 Folkestone Road, London, E6 6BX, United Kingdom
Email: support@homeax.shop

This Privacy Policy explains how Homeax ("HOMEAX", "we", "us", or "our") collects and uses personal data when you visit homeax.shop, contact us, create an account, or buy our products (together, the "Services"). HOMEAX is the controller of the personal data described in this policy. This policy does not replace any additional notice we may provide for a specific activity.

1. Personal Data We Collect

Depending on how you use the Services, we may collect:

• Identity and contact data: name, billing and delivery address, email address, and telephone number.
• Account data: account identifiers, login credentials in protected form, saved preferences, and account history.
• Order and transaction data: products ordered, order value, currency, discounts, delivery status, returns, refunds, and related communications.
• Payment data: payment status, payment method, billing details, and transaction identifiers. Card details are processed by authorised payment providers; HOMEAX does not ordinarily receive or store complete card numbers or security codes.
• Customer-service data: messages, requests, complaints, photographs or videos supplied to support a claim, and our responses.
• Shopping and content data: basket contents, wish lists, product reviews, survey responses, and other content you choose to submit.
• Device and usage data: IP address, device and browser type, operating system, identifiers, pages viewed, referral source, approximate location derived from IP, and interaction data.
• Marketing and preference data: subscriptions, consent records, advertising preferences, and responses to communications.
• Security data: information used to detect fraud, abuse, security incidents, or violations of our terms.

Please provide only personal data that is necessary for your request. If you provide personal data about another person, you must be authorised to do so and should make this policy available to them.

Some information is required to enter into or perform a purchase contract, including your name, contact details, delivery address, and payment information. If you do not provide required information, we may be unable to create an account, process an order, deliver a product, or respond to the relevant request. Optional fields are identified where practical.

2. How We Collect Personal Data

We collect personal data:

• directly from you, including at checkout, through your account, when you contact us, or when you submit a review;
• automatically through our website, cookies, pixels, logs, and similar technologies; and
• from service providers and other parties, including Shopify, payment providers, fraud-prevention providers, delivery and fulfilment partners, analytics providers, advertising partners where you have consented, and publicly available sources where lawful.

3. How and Why We Use Personal Data

Purpose	Types of data	Legal basis in the UK and EEA
Process orders, payments, delivery, returns, exchanges, and refunds	Identity, contact, order, transaction, and payment data	Performance of our contract with you; steps taken at your request before entering a contract
Create and manage accounts, wish lists, and saved preferences	Identity, contact, account, shopping, and preference data	Contract; our legitimate interest in providing and improving account features
Answer questions, provide support, and resolve complaints	Identity, contact, order, transaction, and customer-service data	Contract; our legitimate interests in customer service and dispute resolution
Keep financial, tax, product-safety, and compliance records	Identity, contact, order, transaction, and communications data	Legal obligation
Protect customers, prevent fraud, secure the Services, and establish or defend legal claims	Identity, contact, payment, device, usage, security, and transaction data	Our legitimate interests in security, fraud prevention, and protecting legal rights; legal obligation where applicable
Operate, diagnose, and improve the website and measure performance	Device, usage, shopping, and preference data	Our legitimate interests for strictly necessary operations; consent for non-essential analytics or similar technologies where required
Send marketing and personalise advertising	Identity, contact, shopping, device, usage, and marketing data	Consent, or another lawful direct-marketing basis where expressly permitted; consent for non-essential advertising technologies where required
Publish and moderate product reviews or other content you submit	Identity or display name, content, shopping, and order data	Our legitimate interests in presenting genuine customer feedback and moderating unlawful or misleading content

Where we rely on legitimate interests, we consider whether the use is necessary and balance our interests against your rights and reasonable expectations. You may ask us for further information about this assessment.

4. Cookies and Similar Technologies

We use cookies and similar technologies to operate the website, remember choices, understand performance, and, where you choose, support personalised advertising. These technologies may be set by HOMEAX, Shopify, or approved service providers.

• Strictly necessary: required for core functions such as security, network management, basket, checkout, and remembering privacy choices. These cannot generally be switched off through our consent tool.
• Preferences: remember optional settings and provide enhanced features.
• Analytics: help us understand visits, performance, and how the Services are used.
• Advertising: help measure campaigns and show advertising that may be more relevant to you.

Where UK or EEA law requires consent, optional cookies and similar technologies are disabled unless and until you choose to allow them. You can accept, reject, or change optional choices through the cookie controls available on the website. Withdrawing consent does not affect processing that occurred before withdrawal. Browser controls may also block or delete cookies, but doing so may affect some functions.

Cookie names, providers, purposes, and durations may change as our services develop. Shopify's current merchant-storefront cookie information is available in its Cookie Policy.

5. Marketing Communications

We send electronic marketing only where permitted by law. You can unsubscribe at any time by using the link in a marketing message or by emailing support@homeax.shop. We may keep a minimal suppression record so that we honour your choice. Unsubscribing from marketing does not stop service messages about an order, account, return, or legal notice.

6. When We Share Personal Data

We share personal data only as reasonably necessary for the purposes described above, including with:

• Shopify: which hosts and supports our online store;
• payment and fraud-prevention providers: to authorise transactions and protect customers and HOMEAX;
• fulfilment, warehouse, and delivery partners: to prepare, route, deliver, trace, and return orders;
• technology, hosting, security, customer-support, and communications providers: to operate and protect the Services;
• analytics and advertising providers: only to the extent lawful and, where required, according to your consent choices;
• professional advisers, insurers, auditors, authorities, regulators, courts, and law-enforcement bodies: where necessary to obtain advice, protect rights, or comply with law; and
• a buyer, investor, or successor: in connection with a proposed or completed corporate transaction, subject to appropriate confidentiality and legal safeguards.

We do not sell personal data for money. Some advertising disclosures may be treated as a "sale", "sharing", or targeted advertising under certain local privacy laws. Where those laws apply, we provide the choices and notices they require.

7. International Data Transfers

HOMEAX is based in the United Kingdom, and our providers may process personal data in the United Kingdom, European Economic Area, United States, Canada, or other countries. Those countries may have different data-protection laws.

Where a restricted international transfer requires safeguards, we use an applicable adequacy decision, approved standard contractual clauses, the UK International Data Transfer Agreement or UK Addendum, or another legally recognised mechanism. We also consider whether supplementary safeguards are appropriate. Contact us if you would like more information about the safeguard relevant to your data.

8. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the relevant purpose, including legal, tax, accounting, fraud-prevention, product-safety, and dispute requirements. Our normal retention periods are:

• order, payment, refund, and tax records: up to 6 years after the relevant transaction, or longer where legally required;
• account data: while the account is active and normally up to 2 years after closure or last activity;
• customer-service, return, and complaint records: normally up to 3 years after the matter closes, or longer if needed for a legal claim;
• marketing contact data: until you unsubscribe, withdraw consent, or after up to 24 months of inactivity, with a minimal suppression record retained as necessary;
• security and fraud-prevention logs: normally up to 12 months, and longer where an incident or investigation requires it; and
• reviews and other published content: while published or until removal is appropriate, with related evidence retained as required to demonstrate authenticity or resolve a dispute.

When data is no longer needed, we delete or anonymise it. Backup copies may remain for a limited period until securely overwritten.

9. Your Privacy Rights

Depending on where you live and subject to applicable conditions and exceptions, you may have the right to:

• ask for access to your personal data and information about its use;
• correct inaccurate or incomplete personal data;
• request deletion of personal data;
• restrict how personal data is used;
• receive certain personal data in a portable format and transmit it to another organisation;
• object to processing based on legitimate interests;
• withdraw consent at any time where processing relies on consent; and
• complain to a data-protection authority.

You have an absolute right to object at any time to the use of your personal data for direct marketing, including related profiling.

To exercise a right, email support@homeax.shop. Please describe your request and the email address or order concerned. We may ask for proportionate information to verify identity and authority. We normally respond within one month where UK or EEA data-protection law applies, although the law permits an extension for complex or multiple requests. Exercising a right is normally free, but a reasonable fee or refusal may be permitted for a manifestly unfounded or excessive request.

10. Automated Decision-Making

We and our providers may use automated signals to identify potentially fraudulent or high-risk transactions. We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects without providing the safeguards required by law. If you believe an order was incorrectly affected, contact us to request human review.

11. Security

We use appropriate technical and organisational safeguards designed to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep account credentials confidential and contact us promptly if you believe your account or personal data has been compromised.

12. Children's Privacy

The Services are intended for adults and are not directed to children under 16. We do not knowingly collect personal data directly from children under 16. If you believe a child has provided personal data to us, contact us so we can investigate and take appropriate action.

13. Third-Party Websites

The Services may link to websites or services controlled by others. Their privacy practices are governed by their own notices, and HOMEAX is not responsible for those practices. Review the relevant privacy notice before providing personal data.

14. Complaints

Please contact us first so that we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office (ICO). If you are in the European Economic Area, you may complain to the data-protection authority in the country where you live, work, or believe an infringement occurred.

15. Changes to This Policy

We may update this policy to reflect changes to our practices, services, or legal obligations. We will post the revised policy here and change the "Last updated" date. Where a change materially affects how we use personal data, we will provide any additional notice or obtain consent required by law.

16. Contact Us

For privacy questions, requests, or complaints, contact:

Homeax
15 Folkestone Road
London, E6 6BX
United Kingdom
Email: support@homeax.shop