Romantika is committed to protecting your rights and privacy as our valued customer.

This policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR), the UK GDPR, and the Data Protection Act 2018.

​

1. Data Controller

​

Romantika
53B Endsleigh Gardens
Ilford IG1 3EQ
United Kingdom

​

2. What Personal Data We Collect

​

We may collect and process the following categories of personal data:

• Identity Data: Name, email, address, phone number

• Transaction Data: Purchases, order details, payment records (excluding card details)

• Technical Data: IP address, browser type and version, device information, session data

• Usage Data: Website interactions, preferences, cookie data

• Marketing and Communications Data: Preferences for receiving marketing

​

3. How We Collect Your Data

​

• You provide data directly (e.g., by registering, placing orders, submitting forms or correspondence, responding to surveys)

• Automated data collection (e.g., website cookies, analytics tools)

• Indirect sources (e.g., transaction partners)

​

4. Purpose and Legal Basis for Processing

​

We process your data for the following purposes and on these lawful bases:

• To perform a contract (fulfilling orders, customer support)

• With your explicit consent (marketing communications, surveys)

• To comply with legal obligations

• For legitimate interests (site security, service improvement)

We will not use your data for any purpose incompatible with those disclosed.

​

5. Cookies and Tracking

​

We use cookies and analytics tools:

• To deliver, personalise, and optimise our website

• To analyse usage patterns and improve performance

• For marketing, where you have consented

You can manage cookies via your browser settings; restricting cookies may impact website functionality.

​

6. Data Sharing and Transfers

​

We do NOT sell personal data.
We may share personal data with:

• Our group companies (subsidiaries or parent, as defined by law)

• Service providers (IT, payment processors, delivery companies) under contract

• Regulatory and law enforcement bodies if required by law

Data may be transferred internationally where providers are based outside the UK/EU, but only where adequate protection is ensured (privacy shields, approved contracts).

​

7. Data Security

​

• We use up-to-date security technologies (encryption, firewalls, secure servers)

• Access to data is restricted to authorised personnel only

• All payment transactions are encrypted using SSL technology

Transmission of data over the internet is not 100% secure; transmissions are at your own risk.

​

8. Data Retention

​

We keep personal data only as long as necessary for the purposes stated or as required by law. Data is securely deleted once no longer needed.

​

9. Your Rights

​

You have rights under UK GDPR:

• Access your data (Subject Access Request)

• Rectification of incorrect data

• Erasure (“Right to be Forgotten”)

• Restriction or objection to processing

• Data portability

• Withdraw consent at any time (for consent-based processing)

• Not to be subject to solely automated decision-making

You may exercise your rights by contacting us at info@romantika.co.uk. We aim to respond within one month.

 

10. Data Breach

​

If a data breach occurs likely to affect your rights and freedoms, we will notify you and the Information Commissioner’s Office (ICO) within 72 hours.

 

11. Third-Party Links

​

Our website may link to external sites; their privacy practices are outside our control. Please review their policies before submitting personal data.

​

12. Changes to this Policy

​

We review and update this policy regularly. Significant changes will be notified on our website.

​

13. Contact Us

​

If you have questions, wish to exercise your rights, or have a complaint, please contact:

Email: info@romantika.co.uk
Tel: +44 7877 749 750