Privacy policy
Last updated: 24 August 2026
1. Who we are and what this policy covers
This policy explains how Pansr processes personal data when you visit https://www.pansr.com, create an account, place an order, contact us, subscribe to marketing, use the contact form, or interact with our advertising and analytics features. Controller: Pansr, 77 Sparken Hill, Worksop, S80 1AL, United Kingdom. Privacy contact: hello@pansr.com.
2. Personal data we collect
- Identity and contact details: name, email, phone, billing address, shipping address, and delivery postcode.
- Order and account details: products, size or variant, order history, payment status, returns, refunds, preferences, and account credentials.
- Support data: messages, form fields, attachments, complaint records, and information needed to resolve a delivery or product issue.
- Technical data: IP address, browser, device, operating system, time zone, referral source, pages viewed, clicks, cart events, and cookie choices.
- Marketing data: newsletter subscription, campaign interaction, preference and opt-out records.
Configured fields and categories: .
3. Where information comes from
We receive information from you, Shopify and our store systems, payment providers, carriers, fulfilment partners, fraud-prevention providers, analytics and advertising platforms where enabled, and publicly available sources where lawful.
4. Why we use information and lawful bases
- To provide the website, cart, checkout, account, order confirmation, fulfilment, tracking, support, returns, and refunds — contract or steps before contract.
- To keep records, calculate or evidence tax, prevent fraud, protect security, handle complaints, and comply with legal obligations — legal obligation or legitimate interests.
- To improve performance, diagnose errors, understand campaigns, and protect the service — legitimate interests, balanced against your rights.
- To send optional marketing or use non-essential analytics/advertising cookies — consent where required by UK GDPR or PECR.
Our purpose-to-basis schedule is .
5. Shopify, payment, delivery, and other processors
We share the minimum information needed with Shopify, payment processors, carriers, fulfilment partners, customer-service tools, hosting, fraud-prevention providers, professional advisers, and regulators where lawful. The configured provider list and purposes are .
6. Analytics, advertising, and cookies
Essential cookies support cart, checkout, security, account, language, currency, and preferences. If enabled, Google Analytics, Google Ads, Pinterest, or similar tools may use analytics or advertising cookies to measure traffic, campaign performance, or relevant advertising. The live cookie list, providers, purposes, retention, and consent mechanism are .
We do not treat continued browsing as consent where consent is legally required. You may change optional-cookie choices through .
7. Marketing messages
We send email or other electronic marketing only where permitted by PECR and other applicable law. Every marketing message includes an unsubscribe or preference link. Opt-out records are retained so we can respect your request.
8. International transfers
Shopify and other providers may process data in the United States or other countries. Transfer locations, UK GDPR transfer mechanism, and supplementary safeguards are .
9. Retention and security
We keep information for as long as needed for the stated purpose, contract, tax/accounting records, legal claims, fraud prevention, and complaint handling. Retention schedule: . We use access controls, secure providers, encryption in transit, and proportionate organisational measures; no online system is completely risk-free.
10. Your rights
Subject to legal limits, you may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent where consent is the basis. Contact hello@pansr.com or https://www.pansr.com. We may verify identity and will respond within the period required by law. You may complain to the Information Commissioner’s Office.
11. Children
The store is not directed to children under . We do not knowingly process children’s data contrary to law. Contact us if you believe a child has submitted information.
12. Changes
We may update this policy for operational, technical, or legal changes. The date above identifies the current version. Material changes will be highlighted where appropriate.
13. Definitions
“Personal data” means information relating to an identified or identifiable person. “Process” includes collecting, using, storing, disclosing, deleting, or otherwise handling data. “Processor” means a service provider that processes data on our instructions; a separate controller may process data under its own notice.
14. Processing detail
| Activity | Typical data | Purpose and basis |
|---|---|---|
| Checkout and order | Name, address, contact, items, payment status | Contract, legal obligation, fraud prevention |
| Delivery and returns | Address, tracking, order, photographs, messages | Contract, legal obligation, legitimate interests |
| Support and complaints | Correspondence, identity checks, issue details | Contract, legitimate interests, legal claims |
| Analytics and advertising, if enabled | Cookie identifiers, device and event data | Consent where required; otherwise documented legitimate interest |
| Marketing | Email, preferences, unsubscribe record | Consent or PECR lawful permission |
The actual systems and field list must be maintained at .
15. Shopify and independent providers
Shopify provides the store, checkout, account, hosting, and order-management infrastructure. Payment providers receive the payment data needed to authorise or refund a transaction. Carriers and fulfilment partners receive delivery information. Providers such as Google Analytics, Google Ads, Pinterest, email platforms, review tools, fraud services, and support tools are used only if enabled and recorded in the processor list. Current contracts and provider notices: .
16. Cookie categories
| Category | Examples | Choice |
|---|---|---|
| Strictly necessary | Cart, checkout, security, account, currency and consent preference | Required for the service |
| Analytics | Page views, performance, errors, campaign attribution | Optional where consent is required |
| Advertising | Campaign measurement, audience and advertising identifiers | Optional where consent is required |
Cookie retention, vendor names, purposes, consent logs, and withdrawal method are . Browser controls may not replace a consent-management choice where the law requires a site-level choice.
17. Data-subject request procedure
Send a request to hello@pansr.com or https://www.pansr.com. Tell us the right you wish to exercise, the account or order involved, and a safe way to contact you. We may request proportionate verification and will tell you if an exemption, manifestly unfounded request, or third-party rights affect the response. We will not ask for a full payment-card number.
18. Retention schedule
Order, payment, tax, and accounting records: . Support and complaint records: . Marketing consent and unsubscribe records: . Cookie consent records: . Security and fraud records: . Where a legal claim or investigation is open, data may be retained until it is resolved.
19. Automated decisions and profiling
Payment, fraud, delivery, analytics, or advertising providers may use automated checks under their own notices. We do not make a solely automated decision with legal or similarly significant effect without a lawful basis and appropriate safeguards. Questions about a material decision may be sent to hello@pansr.com.
20. Security incident and complaints
If we identify a personal-data incident, we will assess it, contain it, document it, notify the ICO where required, and communicate with affected people where required. Privacy complaints may be sent to or the Information Commissioner’s Office.