Privacy Policy Notice

The policy: This privacy policy notice is for this website; and served by Rebekah EJ Farmer T/A Pengraff UK PO Box 338, Ely, Cambridgeshire CB7 9GQ and governs the privacy of those who use it. The purpose of this policy is to explain to you how we control, process, handle and protect your personal information while browsing or using this website, including your rights under current laws and regulations. You must be 18 years of age or over to use this website.

If you do not agree to the following policy, you must cease viewing / using this website.

Policy key definitions:

  • “I”, “our”, “us”, or “we” refer to the business, Rebekah EJ Farmer T/A Pengraff UK.
  • “you”, “the user” refer to the person(s) using this website.
  • GDPR means General Data Protection Act.
  • PECR means Privacy & Electronic Communications Regulation.
  • ICO means Information Commissioner’s Office.
  • Cookies mean small files stored on a user’s computer or device.

Processing of your Personal Data

Under the GDPR (General Data Protection Regulation) we control and / or process any personal information about you electronically using the following lawful bases.

  • We are exempt from registration in the ICO Data Protection Register because we are only processing personal data for the core business purposes.
  • Lawful basis: Contract
    The reason we use this basis: To fulfil our contractual obligations to you to complete the purchase of products and services from Pengraff UK via our website or through direct sales.

    We process your information in the following ways: Upon placing an order through our website or directly, we will gain personal data relating to your data, namely – name, address, telephone number, email address, (in the event of website sales – IP address). We will use this for the sole purpose of fulfilling any contract for products or services purchased from us. We shall use this information to ship products and may contact you regarding your order.

    If you have subscribed to our newsletter / email updates, this information will also be used for this purpose by Pengraff UK.

    Data retention period: We shall continue to process your information until the contract between us ends or is terminated under any contract terms. If you have consented to be added to our mailing list, data will be retained indefinitely until such time as you choose to ‘opt out’ of this service.

    Sharing your information: We do not share your information with third parties for marketing purposes; We use PayPal to process payments from our customers and as such, you should refer to their privacy policy for separate terms:

    Special offers and updates: Our customers and users will occasionally receive newsletters or e-mails with information on products, services, or special offers. Out of respect for the privacy of our users, Pengraff UK gives them the opportunity to opt-out from receiving these types of communications.

    Maintenance of information: While Pengraff UK uses industry-standard measures to protect your information, it should be noted that no security measures are foolproof, and it is impossible to guarantee complete security of data sent or maintained via the internet.

    Your responsibilities: Should you choose to create a customer account with Pengraff UK through our website, you are responsible to ensure the security of your Customer ID and password. You should always ensure these are kept safe and are not shared with anyone. Always log out after your website session ends, and ensure these precautions are taken when using both your personal computer and public computers such as in libraries or internet cafes. Pengraff UK accepts no liability for lost ID or Passwords or the resulting misuse of such credentials via our website.

    Third Party websites: From time to time, our website may contain links to other sites. Please be aware that Pengraff UK is not responsible for the privacy practices of such other sites or of its customers. We encourage you to read the Privacy Statements of every website that collects personal data. The Pengraff UK Privacy Policy as described herein only applies to information collected by Pengraff UK.

    Statistical data: Pengraff UK may disclose aggregate, anonymous data based on information collected from users to investors or potential partners, or for social media advertising (i.e. “Over 10,00 products in customers’ homes & businesses”). In such cases, only statistical information will be disclosed, and personally identifiable data will be kept strictly confidential. In case Pengraff UK is sold, the information collected from users may be transferred to the new owners. 

    We may from time to time engage third parties, including affiliated companies, to preserve, analyse or otherwise store or manipulate data received by Pengraff UK from its customers. In all cases, third party service providers will be required to treat all data with the same level of care as Pengraff UK, and they will be prohibited from disclosing your data to any other person or party, except as otherwise provided for in this Privacy Policy.

If, as determined by us, the lawful basis upon which we process your personal information changes, we will notify you about the change and any new lawful basis to be used if required. We shall stop processing your personal information if the lawful basis used is no longer relevant.

Your Individual Rights

Under the GDPR your rights are as follows. You can read more about your rights in detail here;

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • Rights in relation to automated decision making and profiling

You also have the right to complain to the ICO if you feel there is a problem with the way we are handling your data.

Internet Cookies

We use cookies on this website to provide you with a better user experience. We do this by placing a small text file on your device / computer hard drive to track how you use the website, to record or log whether you have seen particular messages that we display, to keep you logged into the website where applicable, to display relevant adverts or content, refer you to a third party website.

Some cookies are required to enjoy and use the full functionality of this website.

We use a cookie control system which allows you to accept the use of cookies, and control which cookies are saved to your device / computer. Some cookies will be saved for specific time periods, where others may last indefinitely. Your web browser should provide you with the controls to manage and delete cookies from your device, please see your web browser options.

Cookies that we use are;

  • Session Cookie – required and used on all websites
  • catAccCookies – required for our online shop
  • – used and required by PayPal to process online payments


Data Security and Protection

We ensure the security of any personal information we hold by using secure data storage technologies and precise procedures in how we store, access and manage that information. Our methods meet the GDPR compliance requirement.

Transparent Privacy Explanations

We have provided some further explanations about user privacy and the way we use this website to help promote a transparent and honest user privacy methodology.

Email Marketing Messages & Subscription

Under the GDPR we use the consent lawful basis for anyone subscribing to our newsletter or marketing mailing list. We only collect certain data about you, as detailed in the “Processing of your personal data” above. Any email marketing messages we send may be done directly or through an EMS, email marketing service provider. An EMS is a third-party service provider of software / applications that allows marketers to send out email marketing campaigns to a list of users.

Email marketing messages that we send may contain tracking beacons / tracked clickable links or similar server technologies to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of data such as; times, dates, I.P addresses, opens, clicks, forwards, geographic and demographic data. Such data, within its limitations will show the activity each subscriber made for that email campaign.

Any email marketing messages we send are in accordance with the GDPR and we provide you with an easy method to withdraw your consent (unsubscribe) or manage your preferences / the information we hold about you at any time. See any marketing messages for instructions on how to unsubscribe or manage your preferences, otherwise contact the EMS provider.

We hate spam as much as anyone else, and so promise to only send you promotions that we feel are relevant. We will not fill up your in-box with countless emails!

Resources & Further Information