At Pakkett Ferh, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains what information we collect when you visit www.pakkettferh.com, place an order, create an account, contact us or use one of our personalised product services, and how we use and protect that information.

For the purposes of the General Data Protection Regulation (GDPR), the data controller is:

Jonathan Lloyd

Pakkett Ferh
c/o Volume Components
4, Triq Dun Karm Sant, Tarxien, Malta, TXN1538
Email: hello@pakkettferh.com

Information we collect

Depending on how you use our website, we may collect information such as your name, billing and delivery address, email address, telephone number, order details, account details, personalised product information, correspondence with us and payment transaction information.

When you visit our website, certain technical information may also be collected automatically, including your IP address, browser type, device information, pages visited and cookie information.

Where you order a personalised product, we may also process information you provide for the personalisation, such as a person’s name, wording, theme, title, design choices or other instructions.

Please only provide personal information that is necessary for the product you are ordering.

How we use your information

We process personal information where it is necessary to:

• process and fulfil your order;
• create personalised products you have requested;
• take and confirm payment;
• arrange delivery or collection;
• communicate with you about your order;
• provide customer service;
• operate customer accounts;
• deal with returns, refunds and complaints;
• prevent fraud and protect the security of our website;
• maintain business and accounting records;
• comply with our legal obligations; and
• improve and operate our website and services.

Under the GDPR, our main legal bases for processing are performance of a contract, compliance with legal obligations, our legitimate business interests, and, where required, your consent. These are recognised legal grounds under EU data-protection law. European Commission

Orders and WooCommerce

Our online shop is operated using WordPress and WooCommerce.

When you place an order, we collect the information necessary to process it, which may include your name, email address, telephone number, billing address, delivery address, products ordered, personalisation details and payment status.

We use this information to fulfil our contract with you and to maintain appropriate order and accounting records.

If you create a customer account, we also store the account information you provide so that you can manage your account and future orders.

WooCommerce provides facilities for stores to export, erase and anonymise customer information and to apply retention periods to order data. WooCommerce

Personalised products

Many Pakkett Ferh products are made specifically for the customer.

Information you enter for personalisation — for example a name, short message, title, theme or selected design — may therefore be stored as part of your order so that we can manufacture the correct product, resolve any queries and maintain an appropriate record of what was ordered.

If you enter another person’s information, including a child’s name, you are responsible for ensuring that you have the right to provide that information to us.

We recommend that you do not provide unnecessary information about a child such as their full date of birth, address, school or other sensitive information.

AI-generated personalised designs

Some Pakkett Ferh products allow customers to create a design using artificial intelligence, including our Create Your Own Paint Plaque service.

When you use this feature, we may process your chosen theme, custom theme instructions, name, title and the generated artwork in order to provide the service.

Our current plaque system generates the illustration separately and adds the customer’s personalised name/title through our website. Only the information required to generate the artwork is sent to the AI generation service.

We currently use the OpenAI API as part of this image-generation process. Limited information required to generate the requested artwork may therefore be processed by OpenAI.

OpenAI states that data submitted through its API is not used to train its models by default unless the account holder explicitly opts in. OpenAI may retain API information for limited periods for security and abuse monitoring, subject to its applicable data controls and policies. OpenAI

Generated designs that are not required will be removed in accordance with our technical retention procedures. A design selected for an order may be retained with the order for as long as reasonably necessary to fulfil and administer that order.

Payments

Payments are processed through third-party payment providers.

Your payment provider may receive information such as your name, billing details, order amount and transaction information in order to process the payment.

Pakkett Ferh does not normally receive or store your complete debit or credit card details. Those details are handled by the relevant payment provider.

We currently use services including Stripe where selected by the customer.

The payment provider’s own privacy policy also applies to the information it processes.

Delivery

Where an order needs to be delivered, we may provide the information necessary for delivery to the courier, postal service or delivery provider.

This will normally include details such as the recipient’s name, delivery address and, where necessary, telephone number.

We only provide information necessary to complete the delivery.

Emails and customer communications

We use your email address to send transactional messages relating to your order, such as:

• order confirmations;
• payment or order-status information;
• questions regarding personalisation;
• collection or delivery information;
• refund information; and
• customer-service replies.

These communications are necessary to administer your order and are not marketing emails.

If you contact us by email, contact form, social media or another communication channel, we may retain your correspondence for as long as reasonably necessary to deal with your enquiry and maintain appropriate business records.

Marketing

If we send promotional or marketing emails, we will do so where we have an appropriate lawful basis, including consent where required.

You may unsubscribe from marketing communications at any time using the unsubscribe facility in the message or by contacting us.

Unsubscribing from marketing does not prevent us from sending messages that are necessary to administer an order you have placed.

Cookies

Our website uses cookies and similar technologies.

Some cookies are essential for the website and online shop to function. These may be used for features such as:

• maintaining your shopping basket;
• checkout;
• customer login;
• remembering certain preferences;
• website security; and
• payment processing.

We may also use non-essential analytics and advertising cookies where permitted and, where legally required, after obtaining your consent.

You can manage non-essential cookies through the cookie-consent controls provided on our website.

Advertising, analytics and tracking

We may use analytics or advertising services to understand how visitors use our website and to measure the effectiveness of advertising.

Our website currently uses technologies associated with services including Reddit and Snapchat for advertising or conversion measurement.

Depending on your cookie choices, these services may receive information such as your browser or device information, IP address, pages viewed and information about interactions with our website.

Where consent is legally required for these technologies, they should only be activated after the appropriate consent has been given.

Who we share information with

We only disclose personal information where reasonably necessary to operate our business, fulfil an order or comply with the law.

Recipients may include:

• our website and hosting providers;
• WordPress/WooCommerce service providers;
• payment processors such as PayPal;
• delivery and courier providers;
• email service providers;
• IT and website-support providers;
• OpenAI when an AI design-generation feature is used;
• analytics and advertising providers where permitted;
• accountants or professional advisers; and
• government, regulatory, tax or law-enforcement authorities where disclosure is legally required.

We do not sell your personal information.

International transfers

Some of the service providers we use may process information outside Malta or outside the European Economic Area.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is permitted under applicable data-protection law, for example through an adequacy decision, contractual safeguards or another lawful transfer mechanism where required.

How long we keep your information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

Order, invoice and transaction records may be retained for the period necessary to meet Maltese tax, accounting and other legal requirements.

Personalisation information and selected artwork may be retained together with the relevant order where necessary to demonstrate and administer what was ordered.

Unused temporary design files may be deleted considerably sooner.

Customer-service correspondence is retained only for as long as reasonably necessary to deal with the matter and any related business or legal requirements.

WooCommerce also allows personal information within old orders to be anonymised or removed according to configured retention periods. WooCommerce

Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss or destruction.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Children’s information

Pakkett Ferh sells products that may be intended for children, but our online store is intended to be used by adults purchasing those products.

We do not knowingly ask children to create accounts or provide personal information directly to us.

An adult purchasing a personalised product may provide a child’s first name or other limited information necessary to personalise that product.

We ask customers not to provide unnecessary information about children.

If you believe information relating to a child has been provided to us inappropriately, please contact us.

Your data-protection rights

Under the GDPR, depending on the circumstances, you may have the right to:

• be informed about how your information is processed;
• obtain a copy of personal information we hold about you;
• correct inaccurate or incomplete information;
• request deletion of information;
• restrict certain processing;
• receive certain information in a portable format;
• object to certain processing, including direct marketing;
• withdraw consent where processing is based on consent; and
• have appropriate protections in relation to certain automated decision-making.

These rights are subject to the conditions and exemptions provided by law. IDPC

To exercise your rights, contact:

[your privacy email address]

We may need to verify your identity before acting on a request.

Complaints

If you believe we have not handled your personal information correctly, please contact us first so that we have an opportunity to resolve the matter.

You also have the right to lodge a complaint with Malta’s supervisory authority:

Office of the Information and Data Protection Commissioner (IDPC), Malta

The Malta IDPC confirms that individuals may lodge a complaint where they believe processing of their personal data infringes the GDPR. IDPC

Links to other websites

Our website may contain links to other websites or services.

Once you leave pakkettferh.com, the privacy practices of those third parties are governed by their own privacy policies. Pakkett Ferh is not responsible for the privacy practices of independent third-party websites.

Changes to this Privacy Policy

We may update this Privacy Policy when our website, services, suppliers or legal obligations change.

The most recent version will always be published on this page together with its last-updated date.

Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact:

Jonathan Lloyd

Pakkett Ferh
c/o Volume Components
4, Triq Dun Karm Sant, Tarxien, Malta, TXN1538
Email: hello@pakkettferh.com