Privacy Policy
Last updated: 10 September 2026
Who is responsible for your information
KZL Agency OÜ, trading as The Sofa Cover Crafter, is responsible for how the personal information in this policy is used. In data-protection law, we are the “data controller”. Our company contact address is Keemia tn 4, Tallinn, 10616 Harjumaa, Estonia. Contact us at [email protected] or WhatsApp.
This policy covers thesofacovercrafter.co.uk and our related shopping and customer-service activities for UK and Irish customers. It explains what we do with your information. Visiting the website alone does not mean you agree to optional marketing or tracking.
What we collect and where it comes from
- Information you provide: name, email, phone number, billing and delivery addresses, order and return details, customer-service messages, preferences and any review or photograph you choose to submit.
- Information generated when you shop: order history, payment status and transaction references, account activity, shopping-cart contents and consent records. Payment providers handle your payment details; do not send card details to customer support.
- Device and usage information: IP address, browser and device details, page visits, shopping interactions, referring links and advertising identifiers, as permitted by your choices and applicable law.
- Information from service providers: payment confirmations, delivery updates, fraud indicators, campaign information and technical logs.
Why we use your information
Data-protection law requires a legal basis for each use of your information. Here are the reasons we rely on.
| Purpose | Legal basis |
|---|---|
| Accept and deliver orders, take payment, provide order support, cancellations and returns | Carrying out our contract with you, and meeting legal requirements |
| Keep transaction and tax records, respond to lawful requests and resolve product problems and refunds required by consumer law | Legal obligations |
| Protect the store, detect fraud, maintain systems and handle complaints or claims | Our legitimate interests: keeping the business secure and reliable and resolving disputes. We balance these needs against your rights |
| Send marketing messages | Your consent, or the existing-customer exception when all its legal conditions are met. You can opt out |
| Optional analytics, advertising cookies and personalised advertising | Your consent when required. For other uses, we check the legal requirements and respect your privacy choices |
We need order and delivery details to complete your purchase. Without them, we may be unable to process it. You do not have to agree to marketing to buy from us.
Who we share information with
We share the information needed for the service with our ecommerce platform Shopify; payment providers; our logistics partner in China and delivery carriers; customer-support providers; email and marketing providers; review services; hosting and security providers; analytics and advertising partners. We may also share information with authorities, professional advisers or a new business owner when this is legally required or necessary, with appropriate protection for your information.
Advertising and measurement can involve matching shopping activity and contact identifiers, including hashed identifiers, to accounts on advertising platforms. This must follow the law and your privacy choices. Hashing converts identifiers into coded values; it does not make your information anonymous.
Shopify
Our store is hosted on Shopify. Shopify processes personal information to provide the commerce platform and may act independently for certain services described in its own notices. Read Shopify’s Privacy Policy to learn how it uses information and how to exercise your rights. We use Shopify enhanced features that combine information from interactions with this store, other merchants and Shopify to protect, grow and improve our business and support personalised advertising. Shopify is responsible for certain processing for these features, as described in its Consumer Privacy Policy. You can make privacy-rights requests through the Shopify Privacy Portal.
Cookies, measurement and advertising
Essential cookies support functions such as the shopping basket, checkout, security and saving privacy choices. Optional cookies and similar technologies can help us measure visits and advertising, personalise content and show relevant adverts. We ask for your consent before using these optional technologies when the law requires it. You can change your choices through the store’s cookie controls and use browser settings to manage cookies.
To ask about cookies or change a marketing or advertising preference, contact us at the email address above. Blocking cookies in your browser may affect shopping functions. If you opt out of marketing, we still use the information needed to complete your order.
You can unsubscribe from marketing emails using the link in each message, or ask us to stop by email. If you have opted into SMS marketing, use the opt-out method in the message or contact us. Entering a phone number to place an order is not by itself consent to SMS marketing. We still send essential order updates if you opt out of marketing.
Using your information in other countries
Our company is based in Estonia. We work with providers in other countries, including our logistics partner in China, so your information may be used outside the UK or European Economic Area (EEA). When extra protection is required for a transfer, we will use recognised approvals of the destination’s data protection (“adequacy decisions”) or approved contractual safeguards. These can include EU standard contractual clauses and the relevant UK transfer safeguards. Contact us to ask about these protections or request a copy.
How long we keep information
We keep information for as long as it is needed for orders, returns, accounting requirements, disputes and security, taking your privacy choices into account. We keep marketing information while we have a valid reason to contact you. If you opt out, we may keep a limited record so we know not to contact you again. How long technical information is kept depends on the service’s settings. We delete information we no longer need or make it anonymous.
Your rights
Depending on how we use your information, you can ask to see it, correct it, delete it, limit its use or receive a portable copy. You can withdraw your consent at any time; this does not change whether earlier use was lawful. You can also object to uses based on legitimate interests. You can object to direct marketing at any time.
Email us to make a request. We may ask for the information reasonably needed to confirm your identity. We normally respond within one month. If the law allows more time and we need it, we will explain why within that first month. Requests are normally free. If we cannot fully meet a request, we will explain the legal reason.
You may complain to the UK Information Commissioner’s Office, Ireland’s Data Protection Commission, or the data-protection authority for your area. You do not have to complain to us first.
Automated decisions, security and children
If an automated decision affects your order, contact us to ask how it was made and request a review by a person. For decisions made entirely by automated systems that qualify for legal safeguards, you can explain your view and challenge the decision.
We use security measures appropriate to the information and the risks involved. No system is completely risk-free. Our store is intended for adult shoppers; contact us if you believe a child has supplied information that should be removed.
Changes
We will update this policy when our practices change and notify you separately when required. Changing this policy does not mean you have consented to a new use of your information.
