Privacy Policy

Privacy and Cookie Policy

At Fizzywhiz, we are committed to respecting and protecting your privacy. This Privacy and Cookie Policy explains how we collect, use, and safeguard your personal information, as well as how we use cookies and similar technologies when you visit our website www.fizzywhiz.com. By using our site, you agree to the practices described in this policy. This policy complies with the General Data Protection Regulation (GDPR), the Data Protection Act, and other applicable laws, including the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

When you interact with us, we may collect different types of personal data. You may provide us with information when filling in forms, placing an order, or contacting us directly. This information may include your name, address, email address, and telephone number. We may also automatically collect information when you visit our site, such as your IP address, browser type and version, time zone, operating system, and platform. We may record details about your visit, including the pages you view, the products you search for, the time it takes for pages to load, how you interact with the site, and your navigation paths. At present, we do not collect personal information from third parties. If this changes, we will update this policy.

We also operate a secure online Assessment Portal and customer account system. When you create an account, subscribe to a service, or access purchased assessments, we may collect and store your account login details, email address, and purchase history to manage your access and fulfil your subscription. These accounts are hosted securely on our own systems and protected by encrypted login credentials.

We use your information to process and deliver your orders, respond to enquiries, and communicate with you about purchases. With your consent, we may send you marketing updates and product information. We may also use your data to notify you of service or policy changes, to improve our website and services, to ensure security, to prevent fraud, and to provide advertising and marketing based on non-identifiable data.

Marketing emails, newsletters, and product updates are sent only with your consent or where you are an existing customer and we have a legitimate interest in keeping you informed about similar products or services. You can opt out at any time using the unsubscribe link in our emails or by contacting us directly.

We will only process your personal information when there is a lawful basis for doing so. This may include the need to fulfil a contract, for example processing your order and arranging delivery. It may also include your consent, such as when you sign up for newsletters. In some cases, we are required by law to process information. We may also process data where it is in our legitimate interests, such as improving our services or preventing fraud, provided that your rights are not overridden.

Your information may be shared with employees or contractors working on behalf of Fizzywhiz, but only where necessary and under strict confidentiality. We may also share data with analytics and search providers to help us improve our website, and with delivery and payment partners in order to fulfil your orders. We may be required to disclose information by law or where it is necessary to protect the rights, property, or safety of Fizzywhiz, our customers, or others. In the event of a sale or transfer of the business, your information may also be transferred to the new owner. We will never sell your identifiable personal data to advertisers.

We may use trusted third-party providers, such as hosting companies, email delivery services, or analytics providers, to help us operate our business. These providers only have access to the information required to perform their tasks and are required to keep it confidential.
Our key data processors include our website host (Shopify), our email service provider, and courier partners who deliver your orders. Each acts as a data processor under contract with Fizzywhiz and must comply with UK GDPR and maintain the same level of protection that we do.

When you contact us through a form, email, or social media message, we collect the information you provide so we can respond to your enquiry. We may retain this correspondence for our records or to improve our customer service.

All information you provide is stored on secure servers. Payment transactions are encrypted using SSL technology. If you create an account with us, you are responsible for keeping your password secure. While we take strong precautions, no method of transmitting information over the internet is completely secure.

We only keep your personal data for as long as necessary to provide the goods or services you requested, to comply with legal, tax, and accounting requirements, and to resolve disputes or enforce agreements. When the information is no longer required, it will be securely deleted or anonymised.
We retain assessment, subscription, and purchase data for up to seven years to meet regulatory, tax, and safety requirements. This includes compliance-related information linked to cosmetic product assessments.
If you request deletion of your data, we may retain limited information, such as order records or compliance-related documents, where required by law or to maintain assessment validity.

In some cases, your data may be processed outside the UK or the European Economic Area. Where this occurs, we rely on adequacy regulations issued under the UK Data Protection Act 2018 and the UK–EU adequacy decision to ensure equivalent protection for personal data transferred internationally. Where we use service providers outside the UK or EEA, we ensure they follow approved safeguards such as Standard Contractual Clauses.

If you sign up for newsletters or promotional updates, we will use your email address to keep you informed about our products and services. You can unsubscribe at any time by clicking the link in our emails or by contacting us at info@fizzywhiz.com. We will not send marketing communications without your consent. Marketing emails may be delivered through trusted providers such as Shopify Email or Klaviyo, who act as data processors on our behalf and maintain strict privacy and security controls.

Our website is not intended for children under the age of 13. By using our website, you confirm that you are at least 13 years old or have the consent of a parent or guardian. We do not knowingly collect personal information from children. If we become aware that we have done so, we will delete it promptly.

We do not use your personal data for automated decision-making that has legal or significant effects on you. If profiling is introduced in the future, such as tailoring product recommendations, this will be explained and you will have the right to object.

We take steps to keep your personal information accurate and up to date. If your details change, please let us know so we can amend our records.

If you tag Fizzywhiz or share content featuring our products, we may request your permission to repost or feature it on our website or social media pages. We will always seek consent before using identifiable customer content for marketing or promotional purposes.

We do not store your full payment card details on our servers. Payments are handled securely by providers such as PayPal or Stripe, who process financial information in line with strict security standards.

In the event of a data breach that may compromise your personal information, we will notify you and the relevant supervisory authority in line with GDPR requirements.

Only authorised staff and contractors with a business need are permitted to access personal data. All staff handling customer information are trained in data protection responsibilities.

We maintain internal records of data processing activities and only collect the minimum personal data necessary for the purpose stated.

If you create an account, we may store your order history and preferences to simplify future purchases. You may request deletion of your account at any time. We may also retain records of correspondence, such as emails or live chat messages, to resolve queries and improve our services.

We may anonymise customer information for research or analysis. Once anonymised, the data is no longer personal and cannot identify you. Even if you request deletion, we may retain limited information where required to meet legal or regulatory obligations.

We do not actively seek to collect special category data, such as health information or political views. If you choose to provide it voluntarily, you consent to its processing in line with GDPR.

If you provide a review or testimonial, we may publish it using only your first name and general location unless you agree otherwise. If we operate physical premises, we may use CCTV for security, and signs will indicate where this is in use.

If you provide us with a postal address or phone number, we may use these details to contact you regarding orders or essential service updates. We will not use them for marketing without your consent.

We may disclose personal data to public authorities when legally required, including for national security or law enforcement purposes. As a cosmetics business, Fizzywhiz also complies with industry-specific regulations that may involve the retention of limited personal information for safety and compliance purposes.

While we make every effort to protect your data, Fizzywhiz cannot be held responsible for events outside our reasonable control, such as sophisticated cyber-attacks that exceed industry-standard safeguards.

You have the right to request access to the personal data we hold about you, to ask for corrections, or to request deletion where legally possible. You may object to or restrict the processing of your data, and you may request a copy in a structured, machine-readable format to transfer to another provider. You can also withdraw consent for marketing communications at any time. To exercise these rights, contact us at info@fizzywhiz.com with the subject line “Subject Access Request”. We will respond within one month.
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Cookies

Fizzywhiz uses cookies and similar technologies to enhance your browsing experience. Cookies are small text files stored on your device when you visit our website. They may be first-party cookies set by us or third-party cookies set by trusted providers. Some are session cookies, which are deleted when you close your browser, while others are persistent cookies that remain until they expire or you delete them.

We use essential cookies to operate the website, including checkout, shopping baskets, and login functions. Performance cookies help us understand how the site is used, such as which pages are most popular, so that we can improve user experience. Functionality cookies remember your preferences and choices, while targeting and advertising cookies record visits, pages viewed, and links followed in order to deliver advertising more relevant to your interests.

Third parties may set cookies on our website. For example, we use Google Analytics 4, Meta Pixel, and TikTok Pixel to collect anonymous statistics, measure advertising performance, and improve campaign targeting. These companies may use cookies across different websites, and we encourage you to read their own policies for more details.

Our cookie banner complies with ICO guidance and requests active consent for non-essential cookies such as analytics or advertising. Essential cookies remain active to enable core functions such as checkout and login.

When you first visit our site, you will see a cookie banner allowing you to accept or reject non-essential cookies. You may change your preferences or withdraw consent at any time. Essential cookies cannot be disabled as they are required for the website to function. Consent can also be managed via your browser settings, and instructions are available from major browser providers such as Google, Mozilla, Apple, and Microsoft.

Our site is not aimed at children under the age of 13, and children should seek parental consent before accepting non-essential cookies. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn. While some browsers provide a “Do Not Track” setting, most websites, including ours, do not currently respond to it.

The legal basis for our use of cookies depends on the type. Essential cookies are processed under legitimate interests and contract fulfilment, while non-essential cookies are used only with your consent. While we carefully select third-party providers, Fizzywhiz is not responsible for how those providers use cookies once set.

Our use of cookies complies with the UK GDPR and PECR for users in the United Kingdom, and with the GDPR and the ePrivacy Directive for users in the European Union. If you are accessing the site from outside these regions, cookie use may also be subject to the laws of your country.

By clicking “Accept” on our cookie banner or continuing to use our site with cookies enabled, you consent to the use of cookies as described in this policy.

We may update this Privacy and Cookie Policy from time to time. Updates will be published on this page, and significant changes will be communicated by email where appropriate.

This Privacy and Cookie Policy, and any disputes relating to it, are governed by the laws of England and Wales.

 

Contact Details

Fizzywhiz
Email: info@fizzywhiz.com
Website: www.fizzywhiz.com

Last updated: 1 November 2025