Privacy Policy

Common Plazaex Change (“we”, “us”, “our”) is committed to protecting your privacy. This Policy explains what personal data we collect, how we use it, the choices you have, and your rights under applicable laws including the UK GDPR, the Data Protection Act 2018, and the ePrivacy rules on cookies.

1) Who we are (Data Controller)

Common Plazaex Change Ltd • Company No. 64530311
Address: Studio 21w Jacob Ways, East Ross, IP16 4UL, UK
Email: [email protected] • Tel: +44 7528 431530

2) What data we collect

Data you provide to us

• Contact details and messages via forms (name, email, phone, subject, message)
• Booking and purchase details (service type, order info, billing and delivery details)
• Preferences (style goals, communication choices)

Data collected automatically

• Usage and device data (IP address, browser type, pages viewed, timestamps)
• Cookies and similar technologies for analytics and experience improvements (see Cookies below)

Data from third parties

• Analytics and advertising partners (e.g., Google Analytics, Facebook Pixel)
• Payment and commerce platforms (only limited details necessary for order processing; we do not store full card numbers)

3) Why we process your data and legal bases

• To operate the site, respond to enquiries, and provide services you request — Contract and/or Legitimate Interests
• To process payments, orders, and customer support — Contract and Legal Obligation
• To personalise and improve the site (e.g., remembering preferences) — Consent and/or Legitimate Interests
• To measure performance and understand audience engagement (analytics) — Consent (via cookie banner)
• To send marketing with your permission — Consent (you can withdraw anytime)
• To enforce Terms, prevent fraud, and comply with law — Legitimate Interests and Legal Obligation

4) Cookies and similar technologies

We use cookies to run the site, understand performance, and improve your experience.

• Necessary: required for core functionality and security. Always on.
• Analytics: help us understand traffic and usage patterns.
• Experience improvements: enhance features and personalisation.

How to choose: use the cookie banner controls (“Accept all”, “Decline”, “Customize”) or open “Cookie preferences” to adjust Analytics and Experience toggles. You can also manage cookies in your browser settings. Declining non-essential cookies may affect certain features.

Third‑party tools set cookies when enabled: Google Analytics (gtag.js) and Facebook Pixel. See their policies for details and opt-outs: Google Privacy, GA Opt-out, Meta Privacy.

5) How we share information

• Service providers acting on our instructions (hosting, analytics, payments, communications)
• Legal and compliance where required (law enforcement requests, regulatory obligations)
• Business transfers (e.g., merger or acquisition). We will notify you of material changes.

We require processors to protect your data and use it only per our instructions.

6) International transfers

Where data is transferred outside the UK/EEA, we use recognised safeguards such as Standard Contractual Clauses or rely on adequacy regulations, and require appropriate technical and organisational measures.

7) Data retention

• Enquiries and correspondence: up to 24 months after last interaction
• Order and invoicing records: 6 years to meet legal obligations
• Analytics data: typically 14–26 months (subject to tool configuration)

We keep data only as long as necessary for the purposes described or as required by law.

8) Your rights

Subject to applicable law, you may have the right to access, rectify, erase, restrict or object to processing, and to data portability. Where processing is based on consent, you can withdraw consent at any time. You also have the right to lodge a complaint with the ICO (ico.org.uk).

To exercise rights, contact [email protected]. We may need to verify your identity before actioning requests.

9) Children’s privacy

Our site is not directed to children under 16. If you believe a child has provided us data, contact us to remove it.

10) Security

We use reasonable administrative, technical, and physical safeguards to protect personal data. No method of transmission or storage is fully secure; risks remain on the internet.

11) Changes to this Policy

We may update this Policy from time to time. Material changes will be posted on this page with an updated effective date.

12) Contact

Email: [email protected] • Tel: +44 7528 431530
Postal: Common Plazaex Change Ltd, Studio 21w Jacob Ways, East Ross, IP16 4UL, UK