Privacy Policy

About this Privacy Policy

This Privacy Policy explains how personal information is collected, used, stored and protected when you visit the Favap website, contact us or submit a product enquiry.

Favap is an advertising and product-enquiry website operated by 407 SERVICES LTD.

We process personal information in accordance with applicable United Kingdom data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018.

Who is responsible for your information?

The organisation responsible for the processing of personal information collected through this website is:

Information we collect

We may collect personal information that you provide directly when you submit an enquiry or contact us.

This may include:

• your full name;
• your email address;
• your telephone number;
• your preferred product colour or option;
• the content of your enquiry or message;
• your communication preferences;
• records of correspondence with you.

We may also collect limited technical information required for the security and operation of the website, such as:

• your IP address;
• browser and device information;
• the date and time of a request;
• security and server log information;
• form validation and anti-spam information.

We do not intentionally collect special category information, such as information about your health, religion, ethnicity, political opinions or biometric data.

How we use your information

We may use your personal information to:

• receive and respond to your product enquiry;
• provide information about pricing and availability;
• contact you using the details you submitted;
• answer questions about the website or advertised product;
• manage and maintain records of enquiries;
• prevent spam, fraud and misuse of the website;
• maintain the security and technical operation of the website;
• comply with legal and regulatory obligations;
• establish, exercise or defend legal claims.

Submitting an enquiry does not create a purchase agreement, place an order or require you to purchase the advertised product.

Our lawful basis for processing

We only process personal information where we have a lawful basis to do so.

Depending on the circumstances, we may rely on:

• Legitimate interests: to operate the website, respond to enquiries, maintain security, prevent fraud and administer our communications.
• Steps taken at your request: where you ask for product information, current pricing or availability before deciding whether to enter into a purchase agreement with a relevant seller.
• Legal obligations: where processing is necessary to comply with applicable law, regulatory requirements or lawful requests from public authorities.
• Consent: where we specifically ask for your consent for a particular use of your personal information.

Where processing is based on consent, you may withdraw your consent at any time by contacting us. Withdrawal does not affect processing that took place before consent was withdrawn.

Who we may share your information with

We do not sell or rent your personal information.

We may share limited personal information with trusted organisations where this is necessary to operate the website or respond to your enquiry. These may include:

• website hosting and technical service providers;
• email and communications service providers;
• form-processing and anti-spam service providers;
• professional advisers, including legal and accounting advisers;
• law enforcement, regulators or public authorities where required by law.

Where necessary to respond to a product enquiry, your contact details and enquiry information may also be shared with an authorised product, supply or fulfilment partner that can provide information about the advertised product.

Any information shared with such a partner must only be used to respond to the enquiry you submitted. We do not authorise partners to use your information for unrelated marketing without a separate lawful basis.

Marketing communications

Submitting a product enquiry does not automatically subscribe you to marketing emails, text messages or telephone marketing.

We will not use the contact details submitted through the enquiry form to send unrelated promotional communications unless you have separately requested or consented to receive them.

Where you have consented to marketing, you may withdraw that consent at any time by contacting us or using the unsubscribe method provided in the relevant communication.

Cookies and similar technologies

This website uses only essential cookies and similar technologies that are necessary for the security and basic operation of the website.

We do not currently use analytics, behavioural advertising, retargeting, social media tracking or third-party marketing cookies.

Essential technologies may be used to support form validation, prevent fraudulent submissions, maintain website security and remember whether you have acknowledged the cookie notice.

More information is available in our Cookie Policy.

How long we keep your information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

Product-enquiry and correspondence records are normally retained for up to 12 months after the most recent communication, unless a longer period is necessary to:

• respond to an ongoing enquiry;
• resolve a complaint or dispute;
• comply with a legal obligation;
• establish, exercise or defend a legal claim;
• prevent fraud or misuse of the website.

Technical and security logs may be retained for shorter periods unless they are required to investigate a security incident.

When personal information is no longer required, it will be deleted, anonymised or securely disposed of.

International data transfers

Some technical or communications service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, appropriate legal and organisational safeguards will be used as required by applicable UK data protection law.

How we protect your information

We use reasonable technical and organisational measures designed to protect personal information against accidental loss, unauthorised access, alteration, disclosure or destruction.

These measures may include:

• encrypted HTTPS connections;
• restricted access to enquiry information;
• secure hosting and email services;
• form validation and anti-spam protections;
• periodic review and deletion of information no longer required.

No internet transmission or storage system can be guaranteed to be completely secure. You should avoid submitting unnecessary sensitive information through the enquiry form.

Your data protection rights

Depending on the circumstances, you may have the right to:

• request access to the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your personal information;
• request restriction of processing;
• object to processing based on legitimate interests;
• request the transfer of certain information to you or another organisation;
• withdraw consent where processing is based on consent;
• submit a complaint to the UK Information Commissioner’s Office.

These rights may be subject to legal conditions, limitations or exemptions.

To exercise a data protection right, contact: [email protected].

We may ask for information required to verify your identity before responding to a request.

Your right to object

You have the right to object to certain processing of your personal information where that processing is based on our legitimate interests.

You also have the right to object at any time to the use of your personal information for direct marketing.

To object, contact [email protected].

Automated decision-making

We do not use personal information submitted through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.

Children’s privacy

This website is intended for adults and is not designed to collect personal information from children.

If you believe that a child has submitted personal information through this website, please contact us so that the information can be reviewed and deleted where appropriate.

External websites

This website may contain links to external websites operated by other organisations. Those organisations are responsible for their own privacy practices and policies.

We recommend reviewing the privacy policy of an external website before providing personal information to it.

Complaints

If you have a concern about how your personal information has been handled, please contact us first so that we can investigate.

You also have the right to submit a complaint to the Information Commissioner’s Office, the United Kingdom supervisory authority for data protection.

Changes to this Privacy Policy

We may update this Privacy Policy when our website, data-processing practices or legal obligations change.

The latest revision date will be shown at the top of this page. Where appropriate, significant changes may also be communicated through a notice on the website.

Contact us

For questions about this Privacy Policy or the use of your personal information, contact: