ROSAVELI
Privacy Policy
What personal data we collect, why we use it, who we share it with and your rights.
Last updated: 27 September 2026
This policy explains how FAIRFAX AND FAVOR LTD, trading as ROSAVELI (“we”, “us”), uses personal data when you visit rosaveli.com, buy from us or contact us. We are the controller of your personal data under the UK General Data Protection Regulation, the EU General Data Protection Regulation and related laws.
Contact
FAIRFAX AND FAVOR LTD, Narford Hall, Narford, King’s Lynn, Norfolk, England, PE32 1JA · support@rosaveli.com · +44 7230 011568. We have not appointed a data protection officer; please send any privacy question to the email address above.
The data we collect
- Order and contact data — name, billing and delivery address, email address, optional phone number, the items you buy, order value and currency, and your order history.
- Payment data — payments are handled directly by our payment providers (Stripe, PayPal). We receive only limited information such as the payment status, the card brand and the last four digits; we never receive or store your full card number.
- Account data — if you create an account: your login details and saved addresses.
- Messages — what you write to us by email, phone or our contact form.
- Technical data — IP address, browser and device type, and the pages you request, recorded in server logs for security and troubleshooting.
- Preferences — your chosen language and delivery country.
We do not use analytics, advertising or social media tracking tools on this website, and we do not sell personal data.
Why we use it and our legal bases
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order, handling returns, refunds and withdrawals | Performance of a contract |
| Answering your questions and complaints | Performance of a contract or our legitimate interest in helping our customers |
| Preventing fraud and keeping the website secure | Our legitimate interests |
| Keeping accounting and tax records | Legal obligation |
| Managing your customer account | Performance of a contract |
| Handling chargebacks and legal claims | Our legitimate interests |
We do not send marketing emails. If we introduce a newsletter in future, we will only send it with your consent.
Who we share it with
- Hosting — our website is hosted by Hostinger, which stores website and order data on our behalf.
- Payments — Stripe and PayPal process payments and carry out fraud checks. They act as independent controllers for some of this processing under their own privacy policies.
- Delivery — carriers and fulfilment partners receive your name, delivery address and, where needed, your phone number or email to deliver your parcel and send tracking updates.
- Professional advisers and authorities — accountants, lawyers, and public authorities where we are legally required.
International transfers
Some of our service providers process data outside the UK and the European Economic Area, for example in the United States. Where this happens, we rely on adequacy decisions (including the EU–US Data Privacy Framework and the UK extension to it) or on standard contractual clauses approved by the European Commission and the UK authorities.
How long we keep it
- Order and invoice records: six years after the end of the financial year of the order, as required by UK tax law.
- Customer accounts: until you delete your account or ask us to, unless we need to keep order records as above.
- Messages to customer care: 24 months after the conversation ends.
- Server logs: up to 30 days.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its use, to data portability, and to withdraw any consent you have given. To use these rights, email support@rosaveli.com. We will reply within one month.
You can also complain to a data protection authority: in the UK the Information Commissioner’s Office (ico.org.uk); in the EU the authority in the country where you live or work.
Cookies
We only use cookies and similar storage that are strictly necessary to run the shop. See our Cookie Policy.
Children
Our shop is not intended for children under 16 and we do not knowingly collect their data.
Changes
We may update this policy. The date at the top of this page shows when it was last changed.