Privacy Policy

Last updated 29th July, 2025.

At Karmer, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit or make a purchase from our website www.karmer.co.uk, hosted on Wix.com. This policy complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable laws.

1. Who We Are

Data Controller: Nicky Alan Ltd, is the data controller responsible for your personal data.
Contact Us: If you have any questions about this Privacy Policy or our data practices. nicky@nickyalan.co.uk

2. Information We Collect:

We may collect and process the following types of personal data.

Information You Provide:
When you make a purchase, create an account, or contact us: name, email, address, phone number, billing address, and payment details.
When you fill out forms or surveys on our website: preferences, feedback, or other information you provide.
Automatically Collected Indformation:
Usage Data: Information about your interaction with our website, such as IP address, browser type, device information, pages visited, and time spent on the site.
Cookies and Tracking Technologies: We use cookies and similar technologies (e.g., web beacons) to enhance your experience, analyse site performance, and deliver personalised content. See our Cookie Policy for details.
Third-Party Data:
Information we receive from third-party services (e.g., Wix analytics, payment processors like Paypal or Stripe, or social media platforms) when you interact with out website or services.

3. How We Use Your Information:

We use your personal data for the following purposes, based on the legal grounds outlined in the UK GDPR:

To Provide Our Services (Contract): Process and fulfil orders, manage your account, deliver products or services, and provide customer support.
To Improve Our Website (Legitimate Interests): Analyse usage data to enhance site functionality, user experience, and content.
To communicate With You (Consent or Legitimate Interests): Send order confirmations, respond to inquiries, or provide updates about our products or services.
To Market Our Products (Consent): Send promotional emails, newsletters, or targeted ads, where you have opted in to receive such communications. You can unsubscribe at any time.
To Comply With Legal Obligations (Legal Obligation): Meet requirements under UK law, such as tax reporting or fraud prevention.
To Protect Our Business (Legitimate Interests): Prevent fraud, secure our website, and enforce our terms and conditions.

4. How We Share Your Information:

We may share your personal data with:

Service Providers: Third parties that provide services on our behalf, such as Wix (for hosting and analytics), payment processors (e.g., Paypal, Stripe), shipping companies, or marketing platforms. These providers are contractually obligated to protect your data.
Business Partners: If you interact with third-party services integrated into our website (e.g., social media platforms or Google Analytics), your data may be shared subject to their privacy policies.
Legal Authorities: When required by law, such as to comply with a court order, prevent fraud, or protect our legal rights.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, with your consent where required.

We do not sell your personal data to third parties.

5. Cookies and Tracking Technologies:

Our website uses cookies and similar technologies to enhance your experience and analyse site performance. You can manage your cookie preferences through our Cookie Policy or your browser settings. Types of cookies we use include:

Essential Cookies: Necessary for the website to function (e.g., maintaining your session or cart).
Analytics Cookies: Track site usage to improve performance (e.g., Wix Analytics, Google Analytics).
Marketing Cookies: Deliver personalised ads or content (e.g., social media integrations).

You can opt out of non-essential cookies at any time via our cookie consent tool or browser settings.

6. Your Data Protection Rights:

Under the UK GDPR, you have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Rectification: Ask us to correct inaccurate or incomplete data.
Erasure: Request deletion of your data, subject to legal exceptions.
Restriction: Ask us to limit how we process your data.
Portability: Request your data in a machine-readable format to transfer to another provider.
Objection: Object to processing based on legitimate interests, including marketing.
Withdraw Consent: Withdraw consent for data processing (e.g., marketing emails) at any time.
Automated Decision-Making: We do not use automated decision-making that produces legal or significant effects.

To exercise your rights, contact us at nicky@nickyalan.co.uk. We will respond within one month, as required by law. You may also lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

7. Data Retention:

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or to comply with legal obligations.

Order Data: Retained for 7 years to comply with tax and accounting laws.
Account Data: Retained until you request deletion or your account is inactive for 2 years.
Analytics Data: Retained for 26 months per Wix settings.

When data is no longer needed, we securely delete or anonymise it.

8. Data Security:

We implement appropriate technical and organisational measures to protect your personal data, including encryption, secure servers, and access controls. Wix, our hosting provider, also employs robust security measures. However, no online system is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers:

As our website is hosted on Wix's servers, your data may be transferred outside of the UK (e.g., to the US or other regions where Wix or its partners operate). We ensure such transfers comply with UK GDPR through appropriate safeguards, such as Standard Contractual Clauses or adequacy agreements.

10. Third-Party Links:

Our website may contain links to third-party sites (e.g., social media or payment processors). We are not responsible for their privacy practices. Please review their privacy policies before providing personal data.

11. Children's Privacy:

Our website is not intended for individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact is at nicky@nickyalan.co.uk to request deletion.

12. Changes To This Privacy Policy:

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a new effective date. Please check this page periodically.

13. Contact Us:

For questions, concerns, or to exercise your data protection rights, please contact us:

nicky@nickyalan.co.uk

We aim to respond to all enquiries with 48 hours excluding weekends.

Privacy Policy

Nicky Alan Psychic Medium