2. PRIVACY POLICY

Effective from: 8 September 2026

1. Who we are

The controller responsible for personal data processed through everkeep.uk is:

MM Ecom Group Kft.
1052 Budapest, Váci utca 16., Hungary
Company registration number: 01-09-452004
Tax number: 32969294-2-41
EU VAT number: HU32969294
Email: info@everkeep.uk
Telephone: +36 30 155 6443

We process personal data in accordance with applicable data protection legislation, including where applicable the UK GDPR and the Data Protection Act 2018.

2. Personal data we may collect

Depending on how you use the Website, we may process:

• name;
• email address;
• telephone number;
• billing address;
• delivery address;
• Order information;
• Products purchased;
• Order value;
• payment method;
• delivery method;
• Order number;
• returns and complaints information;
• communications with customer service;
• IP address;
• browser and device data;
• online identifiers;
• cookie information;
• Website activity;
• marketing information.

3. Orders and contracts

We process personal data to:

• receive Orders;
• enter into sales contracts;
• fulfil Orders;
• process payments;
• deliver Products;
• communicate with Customers;
• handle returns;
• manage complaints.

The lawful basis will generally be that processing is necessary for the performance of a contract or to take steps at your request before entering into a contract.

4. Accounting and legal obligations

We may process data to:

• issue invoices;
• maintain accounting records;
• comply with tax requirements;
• comply with other legal obligations.

We currently use Billingo for invoicing.

5. Payments

Payments may be processed using:

• Shopify Payments;
• PayPal;
• Cash on Delivery.

Payment providers may process information required to complete transactions.

MM Ecom Group Kft. does not ordinarily receive or store complete card numbers.

6. Shopify

The Website is hosted and operated using Shopify.

The relevant Shopify entity for EMEA merchants is:

Shopify International Limited
The Sidings, 4th Floor
Grand Canal Quay
Dublin D02 E7K8
Ireland

Shopify may process information relating to:

• Customers;
• Orders;
• payments;
• delivery;
• devices;
• IP addresses;
• Website activity.

7. Fulfilment and delivery

We use Webshippy for fulfilment and logistics.

Information necessary to deliver an Order may be shared with relevant delivery providers.

This may include:

• name;
• delivery address;
• telephone number;
• email;
• parcel identifier;
• Cash on Delivery amount where applicable.

8. Customer support

If you contact us, we may process:

• your contact details;
• Order number;
• your message;
• communication history;
• information necessary to deal with your request.

9. Klaviyo and email marketing

We may use Klaviyo for email marketing and automated communications.

Depending on the functionality used, this may involve:

• name;
• email;
• telephone number;
• Order history;
• Products viewed;
• basket activity;
• interaction with marketing messages.

Electronic marketing is carried out only where we have an appropriate legal basis and comply with applicable direct marketing rules.

You can unsubscribe from marketing emails at any time.

10. Cookies and tracking technologies

We may use:

Strictly necessary cookies for core Website functions.

Functional cookies for enhanced functionality.

Analytics cookies, including Google Analytics.

Marketing cookies and tracking, including Meta Pixel, Google Ads and Klaviyo.

UK rules under PECR apply to cookies and similar technologies, alongside the UK GDPR. Many non-essential cookies and tracking technologies require valid consent.

11. Google Analytics

We may use Google Analytics to understand Website usage.

Depending on your consent settings, information may include:

• IP-related information;
• device type;
• browser;
• pages viewed;
• source of visit;
• purchase events;
• Website interactions.

12. Google Ads

We may use Google Ads for:

• conversion measurement;
• campaign analytics;
• remarketing;
• advertising optimisation.

Where consent is required, these functions are activated only in accordance with your consent preferences.

13. Meta Pixel

Meta Pixel may record events such as:

• Product views;
• adding to basket;
• beginning checkout;
• purchases.

The data may be used for measurement, remarketing and advertising optimisation where permitted.

14. Profiling

Where we have the appropriate legal basis, Website and purchase activity may be used to:

• personalise marketing;
• create advertising audiences;
• tailor email communications.

We do not ordinarily use this type of profiling to make solely automated decisions producing legal or similarly significant effects on individuals.

15. Who we share data with

Depending on the purpose, personal data may be shared with:

• Shopify;
• Shopify Payments;
• PayPal;
• Billingo;
• Webshippy;
• delivery providers;
• Klaviyo;
• Google;
• Meta;
• IT providers;
• accountants and professional advisers.

We do not sell personal data to advertisers.

16. International data transfers

Some of our providers may process information outside the UK.

Where required, appropriate safeguards are used under applicable data protection law.

These may include:

• adequacy regulations;
• recognised data transfer frameworks;
• standard contractual clauses or UK transfer mechanisms;
• other lawful safeguards.

17. How long we keep data

We retain personal data only for as long as reasonably necessary for the relevant purpose or as required by law.

For example:

Order data: for fulfilment of the Contract and subsequent legal or claims periods.

Accounting information: for the period required under applicable tax and accounting rules.

Complaint information: for as long as needed to manage the complaint and related legal claims.

Marketing data: until consent is withdrawn, marketing is objected to or another reason requires deletion.

18. Your rights

Depending on the circumstances, you may have rights including:

• access to your personal data;
• correction;
• deletion;
• restriction of processing;
• data portability;
• objection;
• withdrawal of consent.

19. Withdrawing consent

Where processing is based on consent, you may withdraw it at any time.

You may also update cookie choices through the Website’s cookie preference controls.

20. Direct marketing

You may object to direct marketing at any time.

Marketing emails will include an unsubscribe mechanism where required.

UK direct marketing rules are governed by both UK GDPR and PECR.

21. Security

We use appropriate technical and organisational measures intended to protect personal data against:

• unauthorised access;
• loss;
• alteration;
• unauthorised disclosure;
• misuse.

22. Contact

For privacy-related requests:

info@everkeep.uk

23. UK supervisory authority

Individuals in the UK may complain to the:

Information Commissioner’s Office, ICO

if they believe their data protection rights have been infringed.

You also have the right to seek other legal remedies where available.

24. Changes to this Privacy Policy

We may update this Privacy Policy due to changes in:

• legislation;
• technology;
• service providers;
• Website functionality;
• data processing practices.

Last updated: 8 September 2026