Privacy policy

Effective date: October 5, 2026

1. Who we are and what this policy covers

aZengear is a trading name and registered trademark of Artdriver Ltd, whose registered address is:

27 Old Gloucester Street
London, WC1N 3AX
United Kingdom

Artdriver Ltd is the controller responsible for the personal information covered by this Privacy Policy, unless we identify another responsible entity when collecting your information.

Privacy contact: ask@azengear.com

This policy explains how we collect, use, disclose and retain personal information when you visit azengear.com, purchase our products, contact us, subscribe to communications, submit reviews, or otherwise interact with us.

It also covers information we receive from marketplaces and retail partners where we are responsible for processing that information. Marketplaces, payment providers and other organisations may separately process information under their own privacy notices.

“Personal information” means information relating to an identified or identifiable individual, as defined by applicable law.

This policy provides information about our practices. Acceptance of our Terms of Service, use of our website or placement of an order does not, by itself, constitute consent to marketing or other processing requiring consent.

2. Personal information we collect

Depending on your interaction with us, we collect the following categories.

Contact and account information

Your name, email address, telephone number, billing and delivery addresses, account details, language preferences and communication preferences.

Order and transaction information

Products purchased, quantities, order dates, order identifiers, amounts paid, discounts, payment status, delivery information, returns, refunds and related correspondence.

Payments are processed through payment providers. The payment information available to us depends on the provider and payment method. 

Customer-service information

Information you provide in enquiries, complaints, warranty requests or support communications, including photographs and other attachments.

Please provide only information relevant to your request. Do not send payment-card details, identity documents or sensitive medical information unless we specifically request information through an appropriate secure process.

Reviews and other submitted content

Ratings, reviews, photographs, videos, display names and other content you submit, together with information needed to administer or verify the submission.

Where you submit content for public publication, the content and the display information presented at submission may be publicly visible. Private customer-service correspondence is not treated as a public review merely because you send it to us.

Device and website information

IP address, browser and device characteristics, approximate location derived from your IP address, pages and products viewed, referral sources, interactions with the website, and cookie or similar identifiers.

Collection through non-essential technologies is subject to applicable consent and opt-out requirements.

Marketing and preference records

Subscription status, consent records, the wording presented when permission was obtained, relevant dates and sources, objections, unsubscribe requests and information necessary to determine whether marketing is permitted.

Where enabled and legally permitted, we may also collect information about interactions with our emails, such as link clicks or opens. Email-tracking technologies are subject to any separately applicable consent requirements.

3. Where information comes from

We collect personal information:

  • Directly from you when you purchase, register, subscribe, contact us or submit content.
  • Automatically through the website and permitted technologies.
  • From marketplaces, retail partners and integrations that transmit orders to us.
  • From payment, delivery, fulfilment, fraud-prevention and other service providers where necessary for the purposes described here.

Marketplace information may include contact details, delivery addresses, purchased products and order status. Its availability and permitted use depend on the marketplace, your choices and applicable law.

Providing another person’s details, such as a gift recipient’s address, should be limited to information necessary for the transaction. Please ensure you are entitled to provide those details.

4. How we use personal information

We use personal information as necessary to:

  • Process payments, fulfil orders and manage delivery.
  • Administer accounts, returns, refunds and customer support.
  • Provide relevant product instructions and respond to enquiries.
  • Communicate about orders, service issues, product safety and recalls.
  • Request and administer reviews where permitted.
  • Send marketing where we have established the required permission or other lawful basis.
  • Personalise permitted communications using relevant purchase history and preferences.
  • Operate, maintain, troubleshoot and improve our website and services.
  • Analyse performance using information collected lawfully.
  • Detect, investigate and prevent fraud, misuse, security incidents and unlawful activity.
  • Maintain accounting, tax and other legally required records.
  • Establish, exercise or defend legal claims and resolve disputes.
  • Comply with legal obligations and lawful requests.

We do not use this policy to authorise purposes incompatible with those for which information was collected. Where a new purpose requires additional information or consent, we provide it or obtain consent as required.

5. Lawful bases under UK and EU data protection law

Where UK or EU data protection law applies, our lawful bases depend on the purpose:

Contract: processing necessary to accept and fulfil orders and provide requested services.

Legal obligation: processing necessary for tax, accounting, product-safety and other applicable legal requirements.

Legitimate interests: necessary and proportionate processing for interests such as security, fraud prevention, dispute management, service improvement and legally permitted marketing, where those interests are not overridden by your rights and interests.

Consent: processing for which consent is required, including relevant marketing and non-essential technologies.

We assess legitimate interests where required. Legitimate interests do not override electronic-marketing consent rules or cookie requirements.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing undertaken before withdrawal.

6. Email marketing

We may send aZengear product information, practical guides, news and offers only where permitted by all applicable laws.

United Kingdom

We may rely on the products and services soft opt-in only where:

  • We obtained your email address directly from you during a purchase or negotiations for a purchase.
  • We provided a clear, simple opportunity to opt out when collecting it.
  • You did not opt out.
  • Our messages concern our own similar products or services.
  • Every marketing message provides an easy way to unsubscribe.

Where these conditions are not satisfied, we obtain consent or establish another legally permitted basis before sending marketing.

European Union

We obtain consent unless an existing-customer exception under the applicable national law permits the communication.

We rely on an exception only where its specific requirements are satisfied, including requirements concerning collection of contact details, the customer relationship, similar products or services, and opportunities to object.

We do not assume one country’s exception applies throughout the EU.

Australia

We send commercial electronic messages with express consent or where we can demonstrate qualifying inferred consent under applicable law.

A purchase or provision of an email address for delivery does not automatically authorise unrestricted marketing.

Canada

We send commercial electronic messages with express consent or qualifying implied consent under Canada’s Anti-Spam Legislation.

Where implied consent depends on an existing business relationship, we track the applicable period. This may generally extend for two years following a qualifying purchase or six months following a qualifying enquiry, subject to the statutory conditions.

We stop relying on that basis when it expires unless another valid basis applies.

United States

Our commercial emails comply with applicable requirements concerning sender identification, truthful subject lines, advertising identification where required, a valid postal address and an accessible unsubscribe mechanism.

We also comply with any additional laws applicable to the sender, recipient and processing.

Marketplace customers

Importing a marketplace order into Shopify does not itself establish marketing permission.

We use marketplace information for marketing only where we have verified a legally permitted basis and the marketplace’s applicable terms allow that use.

Unsubscribing

You may unsubscribe using the link in a marketing email or contact our privacy email address.

We process requests promptly and within applicable legal deadlines. We do not require payment or account login to unsubscribe.

We may retain limited suppression information to prevent future marketing to an address that has opted out.

Unsubscribing from marketing does not prevent necessary order, customer-service, legal, safety or recall communications. We do not use necessary service messages to bypass marketing restrictions.

7. Text messages

Providing a telephone number for delivery or customer service does not, by itself, constitute consent to promotional text messages.

If we offer SMS marketing, we obtain any consent required for the relevant country and messaging technology separately from purchase acceptance. Consent is not a condition of purchasing.

The signup process will identify the sender and explain relevant programme details, including frequency information and charges where required.

You may opt out through the method described in the message, including replying STOP where supported, or by contacting us. We also honour other reasonable withdrawal requests as required by law.

Message and data charges may apply according to your mobile provider. Delivery depends on the messaging provider and mobile network.

8. Cookies, analytics and advertising

We use cookies and similar technologies for functions such as checkout, account access, security, preference storage, analytics and advertising.

Where consent is required, non-essential technologies are used only after that consent is obtained. You may withdraw consent or change preferences.

Blocking necessary cookies may affect website functionality.

We use Shopify to operate the store. Where enabled, Google Analytics helps us understand website use. Advertising providers may receive identifiers and information about browsing, purchases or advertising interactions where legally permitted.

Some advertising disclosures may constitute “sale”, “sharing” or targeted advertising under applicable US privacy laws, even where no money changes hands.

Where required, you may opt out. We recognise legally required opt-out preference signals, including Global Privacy Control, where applicable.

A browser “Do Not Track” signal is different from Global Privacy Control.

Email unsubscribe preferences and website cookie preferences operate separately.

9. Who receives personal information

We disclose information where necessary and legally permitted to:

  • Shopify, for store operation, checkout and related services.
  • Email and automation providers supporting our communications, including Shopify Messaging and Shopify Flow.
  • Review providers.
  • Payment processors, delivery companies and fulfilment providers.
  • Technology, hosting, analytics and advertising providers.
  • Professional advisers, insurers and auditors.
  • Public authorities or other recipients where disclosure is legally required.
  • Relevant parties where necessary to investigate fraud, protect lawful interests or establish, exercise or defend legal claims.

Providers may act as processors or independent controllers depending on their role. We apply contractual protections where required and limit disclosures to the relevant purpose.

If our business undergoes a merger, acquisition, restructuring or asset transfer, relevant information may be disclosed to advisers and prospective or actual counterparties, subject to applicable law and appropriate protections.

Shopify’s privacy information is available at Shopify Privacy Policy.

10. International transfers

Our providers may process information in the UK, EEA, United States, Canada and other countries.

Where international-transfer restrictions apply, we use the required safeguards. Depending on the transfer, these may include applicable adequacy decisions, approved contractual clauses, the UK International Data Transfer Agreement or UK Addendum, and supplementary measures where necessary.

You may contact us for information about safeguards relevant to your information, subject to lawful confidentiality restrictions.

11. Retention

We retain personal information only for as long as reasonably necessary for the relevant purpose and applicable obligations.

Retention depends on:

  • Order fulfilment, support, returns and warranty needs.
  • Tax, accounting and other statutory requirements.
  • Applicable limitation periods and the need to manage disputes.
  • Fraud-prevention and security needs.
  • Whether marketing permission remains valid.
  • The need to prove permissions and honour objections.

We may retain information subject to a legal hold while a relevant investigation, dispute or proceeding remains unresolved.

An erasure request does not require us to delete information that we are legally required or otherwise lawfully entitled to retain. We explain applicable exceptions when responding.

We retain limited suppression records where necessary to respect marketing opt-outs. When information is no longer needed, we delete or anonymise it using appropriate processes.

12. Security

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse or disclosure.

No transmission or storage method can be guaranteed completely secure. This statement does not exclude any duty or liability that cannot lawfully be excluded.

Please protect your account credentials and notify us promptly of suspected unauthorised use.

13. Profiling and automated decisions

We may use purchase history, preferences and permitted interaction information to select relevant communications or product recommendations.

Our systems and providers may also use automated tools to identify suspicious transactions and security risks.

Where applicable law gives you rights concerning automated decisions, you may exercise them using the contact details below.

14. Your privacy rights

Depending on applicable law, you may have rights to:

  • Access your personal information and obtain information about its use.
  • Correct inaccurate information.
  • Request deletion.
  • Restrict or object to particular processing.
  • Receive eligible information in a portable format.
  • Withdraw consent.
  • Object to direct marketing.
  • Challenge qualifying automated decisions.
  • Complain to an appropriate regulator.

These rights are subject to applicable conditions and exceptions.

UK and EEA

Where UK or EU data protection law applies, you may exercise the relevant rights above. You have the right to object to processing for direct marketing, including related profiling.

You may complain to the UK Information Commissioner’s Office or the appropriate EEA supervisory authority.

Australia and Canada

Where applicable privacy law provides access, correction, consent-withdrawal or complaint rights, you may contact us to exercise them.

We investigate privacy complaints and respond within applicable requirements. You may also contact the relevant privacy regulator.

United States

Where applicable state privacy law covers our processing, rights may include access, correction, deletion, portability and opting out of sale, sharing, targeted advertising or specified profiling.

California residents may also have applicable rights concerning certain uses of sensitive personal information and non-discrimination for exercising privacy rights.

You may use an authorised agent where permitted. Where applicable law provides an appeal right, contact us to appeal a decision on your request.

Making a request

Contact ask@azengear.com or write to the address in Section 1.

We may request proportionate information to verify identity or an agent’s authority. We do not request more information than reasonably necessary.

We respond within applicable deadlines and explain any lawful refusal, limitation or extension. Charges apply only where expressly permitted by law.

15. Children

Our website is intended for a general audience and is not directed to children under 16.

We do not knowingly collect personal information from children under 16 for marketing. If you believe a child has provided information inappropriately, contact us so we can investigate and take appropriate action.

16. Third-party services

Third-party websites and services linked from our website have their own privacy practices. This policy does not govern their independent processing.

This does not remove our responsibility for providers processing personal information on our behalf.

17. Changes to this policy

We may update this policy to reflect changes in our practices, services or legal requirements.

The effective date identifies the latest published version. We provide additional notice or obtain fresh consent where required.

A policy update does not retrospectively create marketing consent or remove an existing opt-out.

18. Contact and complaints

For privacy enquiries, requests or complaints:

Email: ask@azengear.com
Post: Privacy enquiries, Artdriver Ltd, 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom

Please explain your request and provide sufficient information for us to respond. You do not need to contact us before exercising any right to complain directly to a regulator.