Privacy policy
Last updated: 3 December 2025
Who we are
Controller: Prime Cart UK Ltd (trading as “Spierb”)
Registered office (UK):
Prime Cart UK Ltd
2 Frederick Street
London WC1X 0ND
United Kingdom
EU correspondence address (for customers and regulators in the European Union):
Prime Cart UK Ltd
PMB 9032, Paxlaan 10
Hoofddorp, Noord Holland
2131 PZ
Netherlands
Canada correspondence address (for customers and regulators in Canada):
Prime Cart UK Ltd
145 1/2 Church Street
Office 202, Unit 5
Toronto, ON M5B 1Y4
Canada
Contact email: care@spierb.com
We are registered for VAT in the United Kingdom and in selected EU member states. VAT registration details are included on relevant invoices and are available on request.
Scope of this Policy
This Privacy Policy applies to our websites and online stores, including spierb.co.uk, spierb.com, spierb.ca, and any related subdomains or locale paths (for example, /en-eu/ or other market-specific paths) that link to this Policy (collectively, the “Sites”).
This Policy does not apply to third-party marketplaces (e.g. Amazon, eBay) or social media platforms; those operate under their own privacy policies.
Information we collect
We collect and process the following categories of personal information when you use the Sites or interact with us:
- Contact & order details – name, billing/shipping address, email address, phone number, items purchased, order value, order history, returns/refunds.
- Account details (optional) – if you create an account: your email address, password (stored in hashed form), and any preferences you choose to save.
- Device & usage data – IP address, browser and device type, operating system, pages viewed, time spent, clicks and interactions, referring URLs, and similar data collected via cookies, pixels and similar technologies (see “Cookies & similar technologies” below).
- Communications – messages you send us (for example, customer support enquiries, feedback, or marketing preferences).
- Payment-related information – we use Shopify Payments and its payment processors to handle transactions. We do not receive or store full payment card numbers or card security codes; these are processed securely by Shopify and its processors on our behalf.
How and why we use your information (lawful bases)
We process personal information only where we have a lawful basis under applicable data protection law (for example, the UK GDPR and EU GDPR).
We use your information for:
-
Providing the Sites and fulfilling your orders (contract):
- To process and fulfil orders, arrange shipping, handle returns and refunds, provide order updates, and manage your account.
-
Security and fraud prevention (legitimate interests / legal obligation):
- To protect the Sites, users and our business from fraud, abuse or security threats, and to comply with legal obligations (for example, tax and accounting rules).
-
Customer support and service communications (contract / legitimate interests):
- To respond to your enquiries, handle complaints, and send important service messages about your orders (for example, order confirmation, shipping updates, and policy changes).
-
Improvement and analytics (legitimate interests):
- To troubleshoot issues, analyse performance, understand how the Sites are used, and improve our products, content and user experience.
-
Marketing (consent / legitimate interests):
- If you opt in, we may send you emails about new products, offers or content. You can unsubscribe at any time using the link in our emails.
- In some regions, we may rely on our legitimate interests for certain direct marketing to existing customers, where permitted by law, and always with an easy opt-out option.
Sharing your information
We share personal information only with service providers and partners that need it to operate the Sites and fulfil your orders, subject to appropriate safeguards and data protection agreements:
- Shopify – for store hosting, checkout, payments and basic analytics.
- Fulfilment, warehousing and shipping partners – including Amazon Multi-Channel Fulfilment (MCF), Veeqo and local carriers, to pick, pack and deliver your orders and handle returns.
- IT, analytics, customer support and marketing tools – for example, providers that host our emails, analytics services, or customer support software, where relevant and under contract.
- Authorities and third parties – where required by law, to respond to legal requests, to protect our rights (for example, to defend against legal claims), or in connection with a corporate transaction (such as a merger or acquisition).
Shopify may also process certain data as an independent controller for its own services. For details, please refer to Shopify’s consumer privacy materials available from Shopify.
We do not sell your personal information.
International transfers
Our service providers (including Shopify, fulfilment partners and certain tools) may process data in countries outside your country of residence and outside the UK/EEA.
Where this involves a transfer of personal data from the UK or EEA to a country that does not have an adequacy decision, we rely on appropriate safeguards such as the UK/EU Standard Contractual Clauses or another lawful transfer mechanism under applicable data protection law.
Cookies & similar technologies
We use cookies and similar technologies (such as pixels and local storage) to:
- Run and secure the Sites (for example, to enable cart and checkout functionality);
- Remember your preferences (such as language and region);
- Understand performance and usage, so we can improve; and
- Where you consent, personalise and measure marketing.
Categories we use include:
- Strictly necessary – required for the Sites to function (cart, checkout, account, security).
- Functional – remember your settings and choices (for example, language/region).
- Analytics – help us measure and improve performance and user experience.
- Marketing – help us show relevant ads and measure their effectiveness.
Your choices:
In the UK/EEA and other regions where required, we set non-essential cookies only with your consent. You can change or withdraw consent at any time using the “Cookie Preferences” link in the footer (where available) or through your browser settings. Where required by law, we honour the Global Privacy Control (GPC) signal.
Data retention
We keep personal information only as long as necessary to:
- Operate the Sites and fulfil your orders;
- Provide customer support;
- Meet legal, tax and accounting requirements;
- Resolve disputes; and
- Enforce our agreements.
Retention periods vary depending on the type of data and our legal obligations. For example:
- Order and invoicing records may be retained for several years to comply with tax and accounting rules.
- Customer service communications are usually kept for as long as needed to handle your request and for a reasonable period afterwards.
- Marketing preferences are kept until you unsubscribe or we no longer need the data.
Where we no longer need personal information, we will delete or anonymise it.
Your rights
Depending on your location (for example, if you are in the UK or EEA), you may have the right to:
- Access the personal information we hold about you;
- Rectify inaccurate or incomplete information;
- Erase your information, in certain circumstances;
- Restrict or object to certain processing;
- Port your information to another provider, where technically feasible; and
- Withdraw consent where processing is based on consent (this does not affect processing carried out before you withdrew consent).
To exercise your rights, contact us at care@spierb.com. We may need to verify your identity before responding.
You can unsubscribe from marketing emails at any time using the link at the bottom of any email.
If you are not satisfied with our response, you can lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office (ICO).
Children
Our Sites and products are not intended for children, and we do not knowingly collect personal information from individuals under the age of majority in their jurisdiction. If you believe that a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.
Security
We use administrative, technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse or disclosure.
However, no method of transmission over the Internet or method of electronic storage is completely secure. You should use caution when sharing information online.
Changes to this Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update this page and amend the “Last updated” date above.
Your continued use of the Sites after changes take effect signifies acceptance of the updated Policy.
How to contact us
If you have questions about this Policy, your data, or your rights, you can contact us at:
Prime Cart UK Ltd (Spierb)
Registered office (UK):
Prime Cart UK Ltd
2 Frederick Street
London WC1X 0ND
United Kingdom
EU correspondence address:
Prime Cart UK Ltd
PMB 9032, Paxlaan 10
Hoofddorp, Noord Holland
2131 PZ
Netherlands
Canada correspondence address:
Prime Cart UK Ltd
145 1/2 Church Street
Office 202, Unit 5
Toronto, ON M5B 1Y4
Canada
Email: care@spierb.com
