Privacy Policy

Fractal Activity Ltd
Effective date: 03/03/2026

1. Controller Identity

Fractal Activity Ltd (“Fractal Activity”, “we”, “our”, “us”) is the data controller responsible for the processing of personal data collected through this website.
Registered address: 38 Crawley Rd N22 6AG LONDON U.K
Contact email: HELLO@FRACTALACTIVITY.COM
This Privacy Policy explains how personal data is collected, used, stored, and protected in accordance with:
The UK General Data Protection Regulation (UK GDPR)
The EU General Data Protection Regulation (EU GDPR)
The Data Protection Act 2018
We process personal data lawfully, fairly, and transparently.

2. Scope

This policy applies to:
Visitors to our website
Individuals who place orders
Individuals who contact us
Individuals who subscribe to communications
Individuals who request appointments

3. Categories of Personal Data

We may collect and process the following categories of personal data:

3.1 Identity Data

Name
Title (if provided)

3.2 Contact Data

Email address
Billing address
Shipping address
Telephone number (if provided)

3.3 Transaction Data

Details of products purchased
Payment confirmation status
Order history
We do not store full payment card details. Payment processing is conducted by secure third-party payment providers.

3.4 Technical Data

IP address
Browser type and version
Device type
Operating system
Referring URLs
Site interaction data

3.5 Communication Data

Messages submitted via contact or appointment forms
Email correspondence
We do not knowingly collect special category data.

4. Legal Basis for Processing

Under UK GDPR and EU GDPR, we rely on the following lawful bases:

4.1 Contractual Necessity (Article 6(1)(b))

To process and fulfil orders, manage payments, and arrange delivery.

4.2 Legal Obligation (Article 6(1)(c))

To comply with tax, accounting, and regulatory requirements.

4.3 Legitimate Interests (Article 6(1)(f))

For:
Website security and fraud prevention
System administration
Limited service improvement
Where we rely on legitimate interests, we ensure that such interests do not override fundamental rights and freedoms.

4.4 Consent (Article 6(1)(a))

For:
Newsletter subscriptions
Non-essential cookies
Consent may be withdrawn at any time.

5. Purpose of Processing

Personal data is processed solely for:
Order administration and fulfilment
Payment verification
Shipping coordination
Customer communication
Appointment scheduling
Legal and accounting compliance
Website integrity and security
We do not engage in automated decision-making that produces legal or similarly significant effects.
We do not use personal data for profiling or behavioural advertising.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined above.
Retention periods may include:
Order and invoice records: retained in accordance with tax and accounting obligations
Correspondence: retained only as long as operationally necessary
Marketing consent records: retained until withdrawal of consent
Data is not retained indefinitely without lawful purpose.

7. Data Sharing

We may share personal data with:
Payment service providers
Shipping and logistics providers
Hosting providers
IT and system maintenance providers
Professional advisers (legal, accounting)
Regulatory authorities where legally required
All third-party processors are subject to contractual obligations to process data securely and lawfully.
We do not sell personal data.

8. International Transfers

Where personal data is transferred outside the UK or European Economic Area (EEA), we ensure that appropriate safeguards are implemented, including:
Adequacy decisions
Standard Contractual Clauses (SCCs)
UK International Data Transfer Agreement (IDTA), where applicable

9. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:
Secure hosting environments
Encrypted payment processing
Access controls
Regular software updates
While no system can guarantee absolute security, we maintain industry-standard protections.

10. Cookies

This website uses cookies for essential functionality, including:
Cart operation
Checkout processing
Security and session management
Non-essential cookies (such as analytics) are deployed only with consent where required.
Users may manage cookie preferences via browser settings.

11. Data Subject Rights

Under UK GDPR and EU GDPR, individuals may have the right to:
Request access to personal data (Article 15)
Request rectification (Article 16)
Request erasure (“right to be forgotten”) (Article 17)
Request restriction of processing (Article 18)
Request data portability (Article 20)
Object to processing (Article 21)
Requests may be submitted to:ACCOUNTING@FRACTALACTIVITY.COM
We may request verification of identity before fulfilling requests.

12. Complaints

If you are located in the United Kingdom, you may lodge a complaint with:
Information Commissioner’s Office (ICO)www.ico.org.uk
If located within the European Union, you may contact your local supervisory authority.
We encourage contacting us first to resolve concerns.

13. Children’s Data

This website is not directed to individuals under the age of 16.We do not knowingly collect data from minors.

14. Changes to This Policy

This Privacy Policy may be updated periodically.
The current version will always be available on this page, with the effective date indicated above.

15. Contact

Fractal Activity Ltd
38 CRAWLEY RD N22 6AG LONDON
UNITED KINGDON
Email: HELLO@FRACTALACTIVITY.COM