Privacy policy

 

Privacy Policy & Cookies Policy

This Privacy Policy explains how Flaming Phoenix Enterprises Ltd ("we", "us", or "our") collects, uses, stores, and protects personal data when you visit our website, purchase our products, or otherwise interact with us.

This policy applies to all users of flaming-phoenix.co.uk and related services.

Who We Are

Flaming Phoenix Enterprises Ltd
Company number: 13395523
Registered in the United Kingdom

Address: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF United Kingdom
Email: jfrost@flaming-phoenix.co.uk

For the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018, Flaming Phoenix Enterprises Ltd is the data controller.

Personal Data We Collect

The personal data we collect depends on how you interact with us.

Information You Provide Directly

This may include:

  • Name

  • Billing and delivery address

  • Email address

  • Telephone number

  • Order and payment confirmation details

  • Account login details if you create an account

  • Communications you send to us, including emails and customer support enquiries

  • Reviews, feedback, or referrals you submit

Providing this information is voluntary, but may be necessary to place orders or access certain services.

Information Collected Automatically

When you visit our website, we may automatically collect:

  • IP address

  • Device and browser information

  • Pages viewed and time spent on the site

  • Referring website or source

  • Interaction with emails or website features

This data is collected using cookies and similar technologies.

Information from Third Parties

We may receive personal data from trusted third parties, including:

  • Shopify, which powers our online store

  • Shopify Email, used for marketing communications

  • HubSpot, used for customer relationship management and marketing records

  • Payment providers, who process payments securely on our behalf

  • Delivery and fulfilment partners

  • Analytics and security providers

All third parties are required to process personal data in accordance with UK GDPR.

How We Use Personal Data

Providing Products and Services

We use personal data to:

  • Process orders and payments

  • Deliver products

  • Manage customer accounts

  • Handle returns, refunds, and customer enquiries

Lawful basis: performance of a contract.

Legal and Regulatory Obligations

We use and retain personal data to:

  • Maintain accounting and transaction records

  • Comply with HMRC, food safety, and Trading Standards requirements

  • Handle disputes, refunds, and chargebacks

Lawful basis: legal obligation.

Customer Support and Service Improvement

We use personal data to:

  • Respond to enquiries and complaints

  • Improve our website, products, and services

Lawful basis: legitimate interests.

Marketing Communications

We send marketing communications only where you have actively opted in, including via:

  • Checkout tick boxes

  • Newsletter sign-up forms

Consent records are stored in Shopify and HubSpot.
You may withdraw consent at any time using the unsubscribe link or by contacting us.

Lawful basis: consent.

Security and Fraud Prevention

We use personal data to:

  • Protect our website, customers, and business

  • Detect and prevent fraudulent or unauthorised activity

Lawful basis: legitimate interests.

Cookies

We use cookies to:

  • Ensure our website functions correctly

  • Remember user preferences

  • Analyse website performance

Our store is powered by Shopify.
Cookie consent is managed via a website cookie banner, allowing users to accept or reject non-essential cookies.

You can also manage cookies through your browser settings. Disabling cookies may affect website functionality.

How We Share Personal Data

We share personal data only where necessary, including with:

  • Shopify and associated service providers

  • Shopify Email and HubSpot

  • Payment processors

  • Delivery and fulfilment partners

  • IT, analytics, and security providers

  • Professional advisers where legally required

We do not sell personal data.

Data Retention

We retain personal data only for as long as necessary:

  • Order and transaction records are retained for a minimum of six years to meet HMRC and accounting requirements

  • Customer accounts remain active until closed or deleted

  • Marketing data is retained until consent is withdrawn

  • Customer support records are retained as needed to resolve issues and demonstrate compliance

Your Rights Under UK GDPR

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of data where legally permitted

  • Restrict or object to processing in certain circumstances

  • Withdraw consent for marketing at any time

  • Request a copy of your data in a portable format

We will respond to valid requests within one month.

Requests can be made by contacting us using the details above.

Complaints

If you are unhappy with how we handle your personal data, please contact us first.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office:

Information Commissioner’s Office
https://ico.org.uk

Data Security

We take appropriate technical and organisational measures to protect personal data. While no system can guarantee absolute security, we work to safeguard your information at all times.

International Data Transfers

Some service providers may process personal data outside the UK. Where this occurs, we rely on approved safeguards such as Standard Contractual Clauses or the UK International Data Transfer Addendum.

Children’s Data

Our products and services are not directed at children, and we do not knowingly collect personal data from children.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes. The latest version will always be published on our website.

 

Flaming Phoenix Cookie Policy

Last Updated: December 23, 2025

At Flaming Phoenix (“we”, “our”, “us”), we use cookies on our website flaming‑phoenix.co.uk to improve your experience, analyse site usage, and deliver personalised marketing. This Cookie Policy explains what cookies are, the types we use, and your choices.

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help the site function correctly, remember your preferences, and allow us to analyse traffic and performance.

Types of Cookies We Use

Cookie Type Purpose Examples
Strictly Necessary Required for the website to function (shopping cart, login, secure checkout) Shopify session cookies
Functional / Performance Remember your preferences and improve website performance Analytics cookies like _ga for Google Analytics
Marketing / Targeting Track visitors for advertising purposes Facebook Pixel, Google Ads conversion tracking

How We Use Cookies

  • To operate and maintain the website

  • To analyse site performance and user behaviour

  • To provide targeted marketing and promotions

  • To remember your preferences and cart contents

Third-Party Cookies

Some cookies are set by third parties such as Shopify, Google, and Facebook. These cookies are subject to the third parties’ own privacy policies.

Your Choices

  • You can accept or reject non-essential cookies using the cookie banner when you first visit our site.

  • You can manage or delete cookies through your browser settings at any time.

  • Strictly necessary cookies cannot be disabled as they are essential for website functionality.