Privacy policy

Who we are

Fonology is the controller of your personal information. Our shop is at 61c Main Street, Thornliebank, Glasgow, G46 7RX. You can contact us about your data at info@fonology.co.uk.

What we collect and why

• Orders: your name, email, phone number and delivery address, what you bought and what you paid, so we can fulfil, deliver and support the order.
• Repairs and trade-ins: your contact details, the device and its fault or condition, the IMEI or serial number, and the quote and payment records, so we can carry out the work and keep our records.
• Accounts (optional): your email and a password, or your Google account’s email and name if you sign in with Google. You never need an account to buy, book a repair or sell a device.
• Identity documents: for certain products we may ask you to upload a document such as a driving licence or V5C so a member of staff can check it before the order is released. These are stored privately, seen only by authorised staff, and deleted after 30 days.
• In the shop: sales and refund records, and for trade-ins the details we are required to keep.
• Messages and reviews: anything you send us or post as a product review.

Our legal bases are: performing the contract with you; our legal obligations (for example accounting records); our legitimate interests in running the shop, preventing fraud and keeping the site secure; and your consent where we ask for it.

Who we share it with

We do not sell your data. We share it only with service providers who help us run the shop:

• Stripe, which processes card payments. We never see or store your full card number.
• Our delivery carriers, who receive your name, address and phone number.
• Our email provider, which sends order, repair and account emails on our behalf.
• Google, only if you choose to sign in with Google.
• Our hosting and backup providers, who store our systems and data.

We may also disclose information where the law requires it, for example to the police or HMRC.

How long we keep it

Order, repair, trade-in and payment records are kept for six years for tax and warranty purposes. Identity documents are deleted as set out above. Accounts are kept until you ask us to close them. Sign-in sessions expire after 30 days of not using the site.

Your rights

You can ask us for a copy of your data, to correct it, to delete it (where we do not need to keep it), to restrict or object to how we use it, and to receive it in a portable format. To use any of these, contact us using the details above. We will answer within one month.

If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies and security

See our cookie policy. We protect your data with encrypted connections, access limited to authorised staff, and hashed passwords.

Changes

If we change this policy we will update the date at the top of this page.