Privacy Policy

1) Introduction

This Privacy Policy explains how PRESTLEY LIMITED, trading as Accessora (“we”, “us”, “our”), collects, uses, stores and protects personal data when you visit accessora.co.uk, create an account, place an order, contact us, make a payment, or otherwise use our website and services.

We are committed to protecting your privacy and processing your personal data lawfully, fairly and transparently in accordance with applicable data protection laws, including the UK General Data Protection Regulation, the Data Protection Act 2018 and, where applicable, relevant privacy and electronic communications rules.

2) Data Controller

For the purposes of data protection law, the data controller responsible for your personal data is:

3) Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity data: your name, account username and customer reference details.
• Contact data: email address, phone number, billing address and shipping address.
• Order data: products ordered, order number, order value, selected delivery method, returns, refunds and customer service history.
• Payment data: payment status, transaction reference, payment method type, currency, limited card/payment metadata and fraud-screening results. We do not receive or store your full card number or CVV.
• Account data: login details, encrypted password, saved preferences and order history, where an account is created.
• Communication data: messages you send to us by email, contact forms, support requests, reviews or other communication channels.
• Technical data: IP address, browser type, device type, operating system, time zone, referral source, website logs and similar technical information.
• Usage data: pages viewed, products viewed, basket activity, session activity, clicks, browsing behaviour and website interaction data.
• Marketing data: your marketing preferences, newsletter subscription status and communication preferences.
• Cookie data: information collected through cookies and similar technologies. Please see our Cookie Policy for more information.

We do not intentionally collect special category personal data, such as health information, religious beliefs, political opinions or biometric data. Please do not submit this type of information to us.

4) How We Collect Personal Data

We collect personal data in the following ways:

• Directly from you when you place an order, create an account, contact us, subscribe to marketing, submit a form or request support.
• Automatically when you use the Website, through cookies, server logs, analytics tools and similar technologies.
• From third parties such as payment service providers, fraud prevention providers, delivery partners, analytics providers and technical service providers.

5) How We Use Your Personal Data

We use your personal data for the following purposes:

• To process and fulfil orders: including order confirmation, payment status, packaging, delivery, returns, refunds and customer support.
• To process payments: including secure payment authorisation, payment confirmation, fraud checks, refunds, chargeback handling and payment dispute management.
• To provide customer service: including responding to enquiries, complaints, order issues and support requests.
• To manage your account: including registration, login, account security, saved details and order history.
• To deliver products: including sharing delivery details with shipping, logistics and fulfilment providers.
• To protect the Website and prevent fraud: including security monitoring, fraud screening, abuse prevention, dispute handling and investigation of suspicious activity.
• To comply with legal obligations: including tax, accounting, consumer protection, regulatory, law enforcement and payment-related obligations.
• To improve the Website: including analytics, troubleshooting, testing, performance monitoring and user experience improvements.
• To send marketing communications: where you have consented or where permitted by law. You can opt out at any time.

6) Lawful Bases for Processing

We rely on the following lawful bases when processing your personal data:

• Contract: to process and fulfil your order, provide customer support and manage your account.
• Legal obligation: to comply with tax, accounting, consumer protection, regulatory and legal requirements.
• Legitimate interests: to operate, secure and improve our Website, prevent fraud, handle disputes, manage business records and communicate with customers.
• Consent: for certain marketing activities, optional cookies or other processing where consent is required by law.

7) Payment Processing

Payments made through the Website are processed through a secure third-party payment gateway or payment service provider. When you proceed to payment, you may be redirected to a secure external payment page operated by the payment service provider.

We do not receive or store your full payment card number, CVV or sensitive card authentication data. The payment provider may collect and process payment card data directly in order to authorise and complete the transaction.

For payment, fraud prevention, chargeback and dispute purposes, we may receive and share limited transaction information, including order details, transaction reference, payment status, payment method type, currency, billing details, delivery details and fraud-screening information with payment providers, acquiring banks, card schemes, issuing banks, fraud prevention providers and relevant service providers.

8) Fraud Prevention, Security Checks & Chargebacks

We may process personal data to detect, prevent and investigate fraud, unauthorised transactions, abuse of the Website, payment disputes, chargebacks and other security incidents.

If you raise a payment dispute or chargeback, we may provide relevant order, delivery, communication and transaction information to our payment provider, acquiring bank, card scheme, issuing bank or dispute handling provider in order to respond to the case.

9) Who We Share Personal Data With

We only share personal data where necessary for the purposes described in this Privacy Policy. We may share your personal data with:

• Payment providers and payment processing partners.
• Banks, acquirers, card schemes and fraud prevention providers where needed for payment processing, security, fraud checks or disputes.
• Shipping, logistics and fulfilment providers to deliver your order.
• Website hosting, IT and security providers to operate and protect the Website.
• Email, communication and customer support providers to send order updates and respond to enquiries.
• Analytics and performance providers to understand and improve Website performance, where permitted by law.
• Professional advisers such as accountants, auditors, legal advisers and insurers.
• Authorities, regulators or law enforcement where required by law or where necessary to protect our legal rights.
• Business transfer parties in connection with a merger, acquisition, restructuring, sale of business assets or similar transaction.

We do not sell your personal data.

10) Cookies & Similar Technologies

We use cookies and similar technologies to operate the Website, remember preferences, improve performance, analyse usage and support marketing where permitted.

Some cookies are necessary for the Website to function, including basket, checkout, security and account-related cookies. Optional cookies, such as analytics or marketing cookies, may require your consent depending on applicable law.

You can manage cookies through your browser settings and, where available, through the on-site cookie preferences tool. For more details, please review our Cookie Policy.

11) International Transfers

Some of our service providers may process personal data outside the United Kingdom or the European Economic Area. Where this happens, we take appropriate steps to protect your personal data, such as relying on adequacy decisions, standard contractual clauses, international data transfer agreements or other safeguards required by applicable law.

12) Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures may include encryption in transit, access controls, secure hosting, monitoring, backups and internal data handling procedures.

However, no website, internet transmission or electronic storage system is completely secure. You are responsible for keeping your account login details confidential and for notifying us if you suspect unauthorised access to your account.

13) Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to fulfil orders, provide support, comply with legal obligations, resolve disputes, prevent fraud and enforce our terms.

• Order, invoice and accounting records: usually retained for up to 7 years where required for tax, accounting and legal purposes.
• Customer support records: usually retained for up to 3 years after the matter is resolved, unless a longer period is required.
• Account data: retained while your account remains active or as needed for legal, security or legitimate business purposes.
• Marketing preferences: retained until you unsubscribe or withdraw consent, and limited suppression records may be kept to respect your opt-out.
• Fraud prevention and dispute records: retained as necessary to protect our business, customers, payment systems and legal rights.

14) Your Data Protection Rights

Depending on your location and applicable law, you may have the following rights:

• Access: to request a copy of personal data we hold about you.
• Rectification: to request correction of inaccurate or incomplete personal data.
• Erasure: to request deletion of your personal data in certain circumstances.
• Restriction: to request restriction of processing in certain circumstances.
• Objection: to object to processing based on legitimate interests or direct marketing.
• Portability: to request transfer of certain personal data in a structured, commonly used and machine-readable format.
• Withdrawal of consent: to withdraw consent where processing is based on consent.
• Complaint: to lodge a complaint with a data protection authority.

To exercise your rights, contact us at info@accessora.co.uk. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law.

15) Marketing Communications

We may send marketing communications if you have opted in or where otherwise permitted by law. You can unsubscribe at any time by using the unsubscribe link in our emails or by contacting us at info@accessora.co.uk.

Even if you opt out of marketing, we may still send you service or transactional messages, such as order confirmations, delivery updates, account notices, payment updates or important legal notices.

16) Children’s Privacy

Our Website is not directed at children and we do not knowingly collect personal data from children under 13. If you believe that a child has provided personal data to us, please contact us so that we can take appropriate steps.

17) Third-Party Websites

The Website may contain links to third-party websites, payment pages, delivery tracking pages or other external services. We are not responsible for the privacy practices, content or security of third-party websites. Please review the privacy policies of those third parties before submitting personal data to them.

18) Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, Website, legal requirements, payment processes or data handling practices. The updated version will be posted on this page with a revised “Last updated” date.

19) Contact Us

If you have any questions about this Privacy Policy, how we process your personal data, or how to exercise your rights, please contact us:

You also have the right to contact the UK Information Commissioner’s Office if you are unhappy with how we handle your personal data: ico.org.uk.