Privacy policy

1. Introduction and data controller

1.1 Welcome

Thank you for visiting our shop. Below we explain how we handle your personal data when you use ceefuhome.com. Personal data means any information that can be used to identify you.

1.2 Data controller

The data controller under the UK GDPR is:

 support@ceefuhome.com

The controller is the person or company that decides why and how personal data is processed.

1.3 Encryption

We use TLS encryption to protect your data in transit. You can recognise an encrypted connection by the https:// prefix and the padlock symbol in your browser's address bar.

2. Data collected when you visit

If you only browse, without ordering or contacting us, we collect what your browser automatically sends to our servers:

• Pages visited
• Date and time of access
• Amount of data transferred
• The source you arrived from
• Browser and operating system
• IP address

Our lawful basis is legitimate interests — keeping the site stable, secure and working properly. We do not use this data for anything else, though we may examine server logs if we have concrete evidence of misuse.

3. Cookies

Cookies are small text files stored on your device. Session cookies are deleted when you close your browser; persistent cookies remain so your browser can be recognised on your next visit.

• Strictly necessary cookies run without consent — they make the basket and checkout work.
• Analytics and advertising cookies run only if you consent through our cookie banner.

You can change your choice at any time through the cookie settings link in our footer, or block cookies in your browser. Blocking them may limit how the site works.

4. Contacting us

When you email us, we collect your address and whatever you include in your message, and use it only to handle your enquiry.

Our lawful basis is legitimate interests in providing customer support, or performance of a contract if your enquiry relates to an order.

We delete this correspondence two years after the matter is closed, unless we are legally required to keep it longer.

5. Orders and accounts

We process your name, delivery and billing address, email, phone number and order details to fulfil your order. The lawful basis is performance of a contract.

After the contract is complete, we retain order records for six years to meet UK tax and accounting obligations, then delete them.

Payment card details go directly to our payment providers. We never see or store your full card number.

6. Marketing

6.1 Newsletter

If you subscribe, we send you information about our products. We only need your email address.

Sign-up uses double opt-in: you receive a confirmation email and must click the link to activate the subscription. The lawful basis is consent.

You can unsubscribe at any time using the link in any email, or by writing to us.

6.2 Existing customers

If you have bought from us, we may email you about similar products, on the basis of legitimate interests in direct marketing. You can object at any time, and we will stop.

7. Who we share your data with

To fulfil orders we share data with:

• Shopify — our shop and checkout platform
• Shipping carriers, including DHL, to deliver your order
• Payment providers, to take payment and detect fraud
• Our email provider, to send order updates and newsletters

The lawful basis is performance of a contract. We do not sell your personal data.

8. Analytics and advertising

Where you have consented, we use analytics and advertising tools to understand how the site is used and to show relevant ads. These may include Google Ads and Meta advertising tools, which set cookies and may build audiences from your activity.

The lawful basis is consent, which you can withdraw at any time through our cookie settings.

9. International transfers

We are based in the United States, and some of our providers operate outside the UK. Where we transfer your data abroad, we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or a UK adequacy decision — whichever applies to that provider.

Ask us and we will tell you which safeguard applies to a specific transfer.

10. Your rights

Under the UK GDPR you have the right to:

• Access — get a copy of the data we hold about you
• Rectification — have inaccurate data corrected
• Erasure — have your data deleted, where no legal obligation requires us to keep it
• Restriction — limit how we process your data
• Portability — receive your data in a portable format
• Object — object to processing based on legitimate interests. For direct marketing this right is absolute and we must comply

Email support@ceefuhome.com to exercise any of these. We respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

11. Retention

12. Children

Our shop is not intended for anyone under 16 and we do not knowingly collect their data.

13. Changes

If we update this policy, we change the date below. Significant changes will be flagged on the site.

---

Last updated: 10 September 2026