This policy explains how AIIFORGE handles personal information collected through aiiforge.shop. It applies to shoppers, customers and anyone who emails us. Last updated September 2026.
What we collect
| Information | When we get it | Why |
|---|---|---|
| Name, delivery address, billing address | When you place an order | To fulfil and deliver your order |
| Email address | At checkout, or when you email us | To confirm the order, send dispatch and tracking updates, and answer your messages |
| Phone number (optional) | At checkout | Passed to the carrier for delivery notifications |
| Order contents and order history | When you order | To fulfil the order, handle returns, and meet our accounting obligations |
| Payment confirmation | From the payment provider | To confirm your order has been paid for |
| Technical data — IP address, browser type, pages viewed | Automatically, as you browse | To keep the site running, secure and free of fraudulent orders |
What we do not collect
We never see or store your full card number, expiry date or security code. Card details are entered on the payment provider’s own form and handled by them. We receive only a confirmation that a payment succeeded, and the last four digits for reconciliation.
Our legal basis
- Performance of a contract — processing and delivering the order you placed.
- Legal obligation — keeping transaction records for tax and accounting.
- Legitimate interests — preventing fraud, securing the site, and answering the messages you send us.
- Consent — any optional cookies, which you can withdraw at any time.
Who else sees your data
We share the minimum necessary with:
- Our sourcing and fulfilment partners — your name, delivery address and order contents, so the parcel can be packed and posted. This may involve a transfer outside the UK.
- Carriers — your name, address and, if you gave one, your phone number, so they can deliver and notify you.
- Our payment provider — the transaction amount and the details you enter on their form. They are an independent controller of that data under their own privacy policy.
- Our hosting and email providers — as processors, to keep the site and the inbox running.
We do not sell your personal data, and we do not share it with advertising networks or data brokers.
International transfers
Because our fulfilment partners operate outside the United Kingdom, your delivery details may be transferred abroad. Where that happens we rely on the safeguards permitted under UK data protection law, such as the International Data Transfer Agreement or an adequacy decision.
How long we keep it
| Data | Retention |
|---|---|
| Order and transaction records | 6 years from the end of the tax year, as UK law requires |
| Customer service emails | 2 years from the last message |
| Website technical logs | Up to 12 months |
| Abandoned cart data held in your browser | Cleared when the session ends or when you clear your browser |
Your rights
Under the UK GDPR you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is wrong;
- delete your data, where we are not required to keep it;
- restrict or object to how we use it;
- transfer it to another provider in a portable format;
- withdraw consent for anything you consented to.
Email support@aiiforge.shop and we will respond within 30 days. If you are not satisfied with our response you can complain to the Information Commissioner’s Office at ico.org.uk.
Security
The site is served over HTTPS. Access to order data is limited to the people who need it to fulfil orders and answer support email. No system is perfect, so if you believe your account or order has been compromised, email support@aiiforge.shop straight away.
Children
This shop is not intended for children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us their data, email support@aiiforge.shop and we will delete it.
Changes to this policy
If we change how we handle personal data we will update this page and change the date at the top. Material changes will also be noted on the home page for 30 days.