Privacy Policy

Introduction

Welcome to the privacy policy of Carpatic LTD.

Carpatic LTD values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your personal data whenever you visit or interact with our website, regardless of where you access it from. It also outlines your privacy rights and the legal protections available to you.

Purpose of This Privacy Policy

The purpose of this Privacy Policy is to clearly explain how Carpatic LTD collects and processes personal information through your use of our website, including any information you provide when:

• subscribing to newsletters or updates;
• purchasing products or services;
• entering competitions, raffles, or giveaways; or
• contacting us through the website.

Our website and services are not intended for children, and we do not knowingly collect personal information relating to individuals under the applicable legal age.

This Privacy Policy should be read together with any additional privacy notices or fair processing information we may provide on specific occasions when collecting or processing your data. These additional notices supplement this Privacy Policy and do not replace it.

Data Controller

Carpatic LTD is the data controller responsible for your personal information.

We have appointed a Data Privacy Manager to oversee matters relating to this Privacy Policy and data protection compliance.

Contact Information

If you have any questions regarding this Privacy Policy, your personal information, or your legal rights, please contact us using the details below:

Company Name: Carpatic LTD
Data Privacy Manager: Moraru Marius Razvan
Phone Number: +44 7554 117100
Website: Carpatic

Updates to This Privacy Policy

We may review and update this Privacy Policy from time to time to reflect changes in our business practices, legal obligations, or services. The latest version will always be available on our website.

This version was last updated on 20 January 2025.

It is important that the personal information we hold about you remains accurate and current. Please inform us promptly if your personal details change during your relationship with us.

Our website may contain links to external websites, applications, or plugins operated by third parties. We do not control these third-party services and are not responsible for their privacy practices. We encourage you to review the privacy policies of any external websites you visit.

Information We Collect About You

Personal data refers to any information capable of identifying an individual either directly or indirectly. It does not include anonymous or fully anonymized information.

We may collect, use, store, and transfer the following categories of personal information:

• Identity Information — such as your first name, last name, username, or date of birth;
• Contact Information — including billing address, email address, and telephone number;
• Transaction Information — including details relating to purchases, entries, and payments made through our services;
• Technical Information — including IP address, browser type, login data, device information, operating system, and related technical data;
• Profile Information — such as account credentials, order history, and competition activity;
• Usage Information — relating to how you interact with our website, products, and services;
• Marketing & Communication Preferences — including your preferences regarding marketing communications and contact methods.

We do not directly collect or store financial card details. Payment processing is handled securely by external payment providers including PayPal, Cashflows, Stripe and Paytriot which act as independent controllers of payment data.

We may also collect aggregated or statistical information for analytical purposes. This type of information does not directly identify individuals and may be used to improve our website, products, and services.

We do not intentionally collect sensitive personal information such as:

• racial or ethnic background
• religious or philosophical beliefs
• political opinions
• health-related information
• biometric or genetic data
• trade union membership
• criminal offence information

Where necessary for prize fulfilment or legal compliance, we may request additional identification or verification details from winners.

If you fail to provide information required by law or contract, we may be unable to provide services, process purchases, or allow participation in competitions.

Marketing Communications

We may use your Identity, Contact, Technical, Usage, and Profile Information to determine which products, services, competitions, or promotions may be relevant to you.

You may receive marketing communications from us if:

• you requested information from us;
• purchased products or services;
• entered a competition or giveaway; or
• did not opt out of receiving marketing materials.

We will only share your personal information with third parties for marketing purposes where you have provided clear consent.

You may unsubscribe from marketing communications at any time by:

• using the unsubscribe link included in our communications; or
• contacting us directly.

Please note that opting out of marketing does not affect service-related communications connected to purchases, entries, or account activity.

Cookies

Our website may use cookies and similar tracking technologies to improve website performance, functionality, analytics, and user experience.

You may configure your browser settings to reject some or all cookies or to alert you when cookies are being used. Disabling cookies may impact certain website features and functionality.

Use of Your Personal Information

We will only use your personal information for the purposes for which it was originally collected unless we reasonably believe another compatible purpose applies.

If we need to process your information for a purpose unrelated to the original reason for collection, we will inform you where legally required.

We may also process personal information without your consent where permitted or required by applicable law.

Sharing Your Personal Information

We may share your personal information with:

• trusted service providers and technology partners;
• payment processors;
• professional advisers including accountants, insurers, auditors, and legal advisers;
• regulators, authorities, and law enforcement bodies where legally required; and
• potential buyers or successors in the event of a merger, acquisition, or business transfer.

All third parties processing personal data on our behalf are required to maintain appropriate security measures and comply with applicable data protection laws.

International Data Transfers

Some third-party providers may operate outside the United Kingdom. Where personal information is transferred internationally, we take reasonable steps to ensure adequate levels of data protection are maintained.

This may include:

• transferring data only to approved jurisdictions; or
• using legally approved contractual safeguards.

Data Security

We implement appropriate technical and organisational security measures designed to protect your personal information from:

• unauthorised access;
• misuse;
• loss;
• disclosure;
• alteration; or
• destruction.

Access to personal information is limited to authorised personnel and service providers who require access for legitimate business purposes and who are subject to confidentiality obligations.

We also maintain procedures for managing suspected data breaches and will notify affected individuals and regulators where legally required.

Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including legal, regulatory, tax, accounting, and reporting obligations.

Retention periods may vary depending on:

• the type of information;
• legal requirements;
• dispute resolution needs; and
• legitimate business interests.

In some circumstances, we may anonymise personal information for research, analytical, or statistical purposes.

Your Legal Rights

Under applicable data protection laws, you may have the right to:

• request access to your personal information;
• request correction of inaccurate information;
• request deletion of your information;
• object to certain processing activities;
• request restriction of processing;
• request transfer of your data;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a supervisory authority.

Requests relating to your personal information may require identity verification before processing.

We aim to respond to valid requests within one month, although complex requests may require additional time.

Legal Basis for Processing

We may process your personal information based on one or more of the following lawful grounds:

• your consent;
• performance of a contract;
• compliance with legal obligations; or
• legitimate business interests.

Where processing is based on legitimate interests, we carefully consider and balance any potential impact on your rights and freedoms.

Third-Party Service Providers

We may use third-party providers for services including:

• website hosting and IT support;
• payment processing;
• marketing campaigns;
• analytics and optimisation;
• legal and financial services; and
• regulatory compliance.

Examples may include providers such as PayPal, Stripe, Mailchimp, Text Global Limited, and advertising or analytics partners operating in accordance with applicable privacy laws.

Your Rights Regarding Marketing

You may request that we stop sending marketing communications at any time. However, certain essential communications relating to transactions, competitions, or services may still be necessary.

Contacting Us About Privacy

If you have questions, concerns, or requests relating to your personal information or this Privacy Policy, please contact Carpatic LTD using the details provided above.