Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Alida.co.uk, operated by Thorvec Limited ("we", "us", "our"), collects, uses, and protects your personal information when you visit or make a purchase from alida.co.uk.

We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Data Controller: Thorvec Limited
Trading as: Alida.co.uk
Address: TSSC, 2 Park Lane, Hemel Hempstead, Herts, HP2 4YJ, England
Email: contact@alida.co.uk

2. What Personal Information We Collect

We collect the following types of personal information:

Information you provide to us:

Name, billing and delivery address
Email address and phone number
Payment information (processed securely — we do not store full card details)
Order history and communications with us

Information collected automatically:

IP address and browser/device information
Pages visited, time spent on site, and referring URLs
Cookie and tracking data (see Section 7)

3. How We Use Your Information

We use your personal information for the following purposes and on the following legal bases under UK GDPR:

To fulfil your order (Lawful basis: Contract)
Processing payments, arranging delivery, and managing returns.

To communicate with you about your order (Lawful basis: Contract)
Order confirmations, dispatch notifications, and customer service.

To send marketing emails (Lawful basis: Consent or Legitimate Interests)
With your permission, we may send you emails about new products, promotions, and updates. You can unsubscribe at any time using the link in any email.

To improve our website and services (Lawful basis: Legitimate Interests)
Analysing how our site is used to improve performance and customer experience.

To comply with legal obligations (Lawful basis: Legal Obligation)
Retaining financial records and complying with HMRC and other regulatory requirements.

4. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of access — request a copy of the personal data we hold about you
Right to rectification — ask us to correct inaccurate or incomplete data
Right to erasure — request deletion of your data where there is no legitimate reason to retain it
Right to restrict processing — ask us to limit how we use your data
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at contact@alida.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

5. How We Share Your Information

We do not sell your personal data. We share it only with trusted third parties who help us operate our business, including:

Shopify Inc. — our e-commerce platform provider. Your data is stored on Shopify's secure servers. Shopify is PCI-DSS compliant. See Shopify's Privacy Policy.

Payment processors — including Shopify Payments (powered by Stripe), PayPal, and other payment gateways. These providers handle payment data securely and are PCI-DSS compliant.

Delivery partners — Royal Mail and Evri/Hermes receive your name and delivery address to fulfil your order.

Veeqo (an Amazon company) — used for order management and dispatch processing.

Shopify Email — used to send transactional and marketing emails.

Judge.me — used to collect and display product reviews. See Judge.me's Privacy Policy.

Google Analytics — used to analyse website traffic. Data is anonymised where possible.

All third-party providers are required to handle your data in accordance with applicable data protection law.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy:

Order and financial records — retained for 7 years in accordance with HMRC requirements
Marketing consent records — retained until you withdraw consent
Website analytics data — retained in anonymised form

7. Cookies

We use cookies and similar technologies to improve your browsing experience, analyse site traffic, and personalise content. Cookies we use include:

Essential cookies — required for the site to function (e.g. shopping cart, session management)
Analytics cookies — help us understand how visitors use our site (e.g. Google Analytics)
Marketing cookies — used to show relevant ads and track campaign performance

You can manage your cookie preferences via our cookie consent banner or through your browser settings. Disabling certain cookies may affect site functionality.

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our store uses SSL/TLS encryption and Shopify's secure infrastructure. Payment data is encrypted to PCI-DSS standards.

No method of transmission over the internet is 100% secure, but we continually review and update our security practices.

9. International Transfers

Some of our third-party service providers (including Shopify Inc., based in Canada) may process your data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions recognised under UK law.

10. Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically.