Privacy policy

Last updated: 2 September 2026

This Privacy Policy explains how PRFRM 1 Ltd collects, uses, stores and shares personal information when you visit prfrm1.co.uk, create an account, join a waitlist, place an order, use our customer-support or chat services, submit a review, contact us or otherwise interact with PRFRM 1.

1. Who We Are

PRFRM 1 is a trading name of PRFRM 1 Ltd, a company registered in England and Wales under company number 17433625.

Data controller: PRFRM 1 Ltd
Registered office and correspondence address: 34 Anyards Road, Cobham, Surrey, England, KT11 2LA
Email: support@prfrm1.co.uk
Website: prfrm1.co.uk

PRFRM 1 Ltd is the controller of the personal information described in this policy, except where another organisation acts as an independent controller and provides its own privacy notice.

2. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

  • Identity and contact information: name, email address, telephone number, billing address, delivery address and account details.
  • Order and transaction information: products ordered, order number, payment status, discounts, delivery details, returns, refunds and warranty information.
  • Payment information: payment method, billing details and payment confirmation. We do not receive or store your complete payment-card number; payment providers process full card details.
  • Account and preference information: account settings, marketing preferences, waitlist registrations and saved information.
  • Communications: customer-support enquiries, emails, contact-form submissions, chat messages, complaints and other correspondence.
  • Reviews and feedback: product reviews, ratings, photographs, videos, survey responses and other content you choose to submit.
  • Technical and usage information: IP address, browser, device, operating system, cookie identifiers, approximate location, pages viewed, referral source, products viewed, cart activity and interactions with our website and marketing.
  • Fraud and security information: information and risk indicators used to protect accounts, payments, customers and our business.

3. How We Collect Personal Information

We collect personal information:

  • directly from you when you place an order, open an account, subscribe, contact us, use chat, enter a promotion or submit a review;
  • automatically through cookies, pixels, local storage and similar technologies when you use our website;
  • from Shopify and the payment, delivery, analytics, advertising, review and customer-support services used to operate our store; and
  • from fraud-prevention, identity-verification and publicly available sources where lawful and necessary.

You are not legally required to provide personal information to browse our website. However, certain information is necessary to create an account, process payment, fulfil an order, arrange delivery, handle a return or provide support. If you do not provide that information, we may be unable to provide the relevant service or complete the contract.

4. How We Use Personal Information and Our Lawful Bases

Contract

We process personal information where necessary to take steps at your request or perform our contract with you, including to:

  • process and confirm orders and payments;
  • arrange dispatch, delivery and tracking;
  • provide accounts, order information and service messages;
  • manage cancellations, returns, refunds and warranty claims; and
  • respond to product and customer-service enquiries connected with your purchase.

Legal obligation

We process information where necessary to comply with legal and regulatory obligations, including accounting and tax requirements, consumer-protection law, product-safety obligations, fraud prevention, responding to lawful requests and establishing records of transactions and consent.

Legitimate interests

We process information where necessary for our legitimate interests or those of another organisation, provided those interests are not overridden by your rights. These interests include:

  • operating, securing and improving our website, products and customer experience;
  • understanding website performance and customer journeys;
  • preventing fraud, misuse, chargebacks and security incidents;
  • responding to general enquiries and managing our business;
  • maintaining appropriate business, support and warranty records;
  • protecting and enforcing our legal rights; and
  • using aggregated or de-identified information for analysis and planning.

Consent

Where required, we rely on your consent to:

  • send marketing emails and promotional communications;
  • use non-essential analytics, advertising and personalisation cookies or pixels; and
  • use submitted content for an additional purpose where we have specifically asked for permission.

You may withdraw consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

5. Marketing Communications

If you choose to subscribe, we may send product launches, early-access invitations, recovery content, company news and promotional offers. You can unsubscribe at any time by selecting the unsubscribe link in a marketing email or contacting support@prfrm1.co.uk.

Unsubscribing from marketing will not stop essential messages about an order, delivery, return, warranty claim, account or customer-support request.

6. Cookies, Pixels and Similar Technologies

We use cookies and similar technologies for:

  • Essential functions: cart, checkout, account access, security, fraud prevention and remembering privacy choices.
  • Analytics: understanding visits, website performance and how customers interact with our products.
  • Marketing and measurement: measuring campaigns and, where enabled and consented to, providing more relevant advertising.
  • Functionality: customer chat, preferences, reviews and other store features.

Our current storefront uses Shopify technologies and may use Shopify Analytics, Shopify pixels or custom pixels, and Google services for analytics, advertising measurement and merchant features. Non-essential technologies should not be activated for UK visitors until the required consent has been obtained.

You can accept, reject or change non-essential cookie choices using the cookie banner or privacy-preferences control available on our website. You can also control cookies through your browser, although blocking essential cookies may prevent parts of the store from working correctly.

7. Who We Share Personal Information With

We share personal information only where necessary for the purposes described in this policy. Recipients may include:

  • Shopify: ecommerce hosting, checkout, accounts, analytics, store operations, Shopify Payments, Shop Pay and customer-support or chat features. You can read Shopify's consumer privacy policy.
  • Payment and wallet providers: Shopify Payments and other payment options selected at checkout, such as PayPal or digital-wallet providers where available.
  • Delivery and fulfilment providers: couriers, warehouses and delivery partners that process the information required to fulfil and track orders.
  • Google: analytics, advertising measurement, merchant and related services where enabled, subject to applicable consent requirements.
  • Customer-support and chat providers: including Shopify customer-support and AI-assisted chat services used on our storefront.
  • Review and reputation services: including Trustpilot where reviews, invitations or review displays are used.
  • Store applications: providers supporting email communications, forms, fraud prevention, security and other store functions.
  • Professional advisers and authorities: accountants, insurers, legal advisers, banks, regulators, courts, law-enforcement bodies and tax authorities where necessary or legally required.
  • Business transaction recipients: prospective buyers, investors or advisers in connection with a merger, financing, restructuring or sale, subject to appropriate confidentiality protections.

Some providers, such as payment services, may act as independent controllers for their own processing. Their own privacy notices explain that processing.

We do not sell personal information for money.

8. International Data Transfers

Some providers may process personal information outside the United Kingdom. Where UK data-protection law requires safeguards, we use an approved transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another legally permitted safeguard.

You may contact us for more information about the safeguards relevant to your personal information.

9. How Long We Keep Personal Information

We retain personal information only for as long as necessary for the purpose for which it was collected, including legal, accounting, tax, warranty, fraud-prevention and dispute-resolution requirements.

  • Orders and financial records: normally retained for at least six years after the end of the relevant financial period, or longer where legally required.
  • Returns, complaints and warranty records: retained for the time needed to resolve the matter and for an appropriate period afterwards to establish or defend legal claims.
  • Customer accounts: retained while the account remains active. Transaction and legal records may be retained separately after an account is closed.
  • Customer-support and chat records: retained for as long as necessary to respond, maintain service history, manage warranties and protect legal rights.
  • Marketing records: retained until you unsubscribe, withdraw consent or we determine that the information is no longer required. We may retain a minimal suppression record to ensure we respect an opt-out.
  • Cookie and analytics information: retained according to the duration shown in our privacy controls and the settings of the relevant provider. Aggregated or de-identified information may be retained for longer where it no longer identifies you.

When information is no longer required, we delete it, anonymise it or securely restrict its use.

10. Your Data-Protection Rights

Depending on the circumstances, UK data-protection law may give you the right to:

  • request access to your personal information;
  • request correction of inaccurate or incomplete information;
  • request deletion of personal information;
  • request restriction of processing;
  • object to processing based on legitimate interests or for direct marketing;
  • request transfer of information you provided in a structured, commonly used and machine-readable format;
  • withdraw consent at any time; and
  • request safeguards relating to a decision based solely on automated processing that produces legal or similarly significant effects.

These rights are not absolute and legal exceptions may apply. To make a request, email support@prfrm1.co.uk. We may need to verify your identity. We do not normally charge a fee, but the law permits a reasonable fee or refusal in limited circumstances.

11. Automated Processing and Fraud Prevention

Shopify, payment providers and fraud-prevention providers may use automated systems to assess transactions and identify possible fraud or security risks. We may use those indicators when deciding whether an order requires review, verification or cancellation.

PRFRM 1 Ltd does not currently make decisions based solely on automated processing that produce legal or similarly significant effects without appropriate safeguards or human involvement. If this changes, we will update this policy and provide the information required by law.

12. Security

We use reasonable technical and organisational measures designed to protect personal information. These include trusted ecommerce and payment providers, access controls, secure connections and measures intended to prevent unauthorised access, loss, misuse or alteration.

No online system can be guaranteed completely secure. You are responsible for keeping account credentials confidential and should contact us if you suspect unauthorised account activity.

13. Children's Privacy

Our website and products are not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us so that we can investigate and take appropriate action.

14. Third-Party Links

Our website may link to third-party websites or services. Those organisations control their own privacy and security practices. We encourage you to read their privacy notices before providing personal information.

15. Complaints

If you have concerns about our use of personal information, please contact us first at support@prfrm1.co.uk so that we can investigate.

You also have the right to complain to the UK Information Commissioner's Office:

Information Commissioner's Office
Website: ico.org.uk
Telephone: 0303 123 1113

16. Changes to This Privacy Policy

We may update this policy to reflect changes to our business, technology, service providers or legal obligations. We will publish the latest version on this page and update the date above. Where a change materially affects how we use personal information, we will take reasonable steps to bring it to your attention.

17. Contact Us

For questions or requests concerning this policy or your personal information, contact:

PRFRM 1 Ltd, trading as PRFRM 1
Company number: 17433625
Registered in England and Wales
Registered office and correspondence address: 34 Anyards Road, Cobham, Surrey, England, KT11 2LA
Email: support@prfrm1.co.uk