Privacy Policy
Last updated: 7 November 2026
1. Introduction
Your privacy is important to us. This Privacy Policy explains how FAKIFY LLC, trading as The Warmzy (“The Warmzy”, “we”, “our” or “us”), the operator of thewarmzy.com, collects, uses and discloses your personal data when you visit or use our website, buy from us or contact us (together, the “Services”). We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
For the purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected under this Privacy Policy.
Please read this Privacy Policy carefully. For the purposes of data protection law, FAKIFY LLC is the data controller of your personal data unless we state otherwise.
FAKIFY LLC (trading as The Warmzy)
1200 N Federal Highway, Office 348
Boca Raton, FL 33432
United States
Limited liability company registered in the State of Wyoming, USA
Email: support@thewarmzy.com
2. What information do we collect and how?
We collect personal data when you access or use our Services. The types of personal data we obtain depend on how you interact with our website and use our Services. By “personal data” we mean information that identifies, relates to, describes or can be associated with you.
2.1 Information you provide
We collect information that you submit to us directly through our Services or when you contact us, including:
- Contact details, including your name, address, phone number and email address.
- Order information, including your name, billing address, shipping address, payment confirmation, email address and phone number.
- Account information, including the email address you use to sign in and any information used for account security.
- Customer support information, including the information you choose to include in messages to us (for example through our contact form or return requests).
- Fit information you choose to give us, such as your usual size or measurements when you ask for fit advice.
Some features of the Services require you to provide certain information. You may choose not to provide it, but you may then be unable to use those features.
2.2 Information collected automatically
We automatically record certain information from your device when you use our Services (“Usage Data”), using cookies, pixels and similar technologies. Usage Data may include:
- Device and browser information, including IP address, operating system and browser type.
- Network connection information and internet service provider.
- Pages visited, features used and navigation patterns on our website.
- Date and time stamps of your visits.
- Approximate location (country and city area) derived from your IP address.
2.3 Cookies
Our Services use cookies — small text files stored on your device — to make the website work, remember your preferences, compile usage statistics and personalise content and advertising. Under PECR we only use cookies that are not strictly necessary (analytics, marketing and preference cookies) with your consent, which you can give or withdraw at any time. Please see the “Cookies” section of this policy for details and to change your choices.
You can also set your browser to remove or reject cookies. Blocking cookies may affect your experience and some features of the Services may not work correctly. Our website does not currently respond to “Do Not Track” browser signals.
2.4 Information from third parties
We may obtain information about you from third parties, including vendors and service providers who collect information on our behalf, such as:
- Companies that support our website and Services, such as Shopify (our e-commerce platform).
- Payment processors, who collect payment information (e.g. card details and billing address) to process payments and fulfil orders. We do not store your full card details.
- Delivery and order-tracking providers.
- Analytics and advertising providers, where installed on our website and where you have consented.
Any information we obtain from third parties is treated in accordance with this Privacy Policy.
3. Why we use your personal data and our lawful bases
Under the UK GDPR, we must have a lawful basis for each purpose for which we use your personal data:
- Providing products and services: to process payments, fulfil orders, manage your account, arrange delivery, and handle returns, exchanges and cancellations. Lawful basis: performance of a contract.
- Marketing and advertising: to send promotional communications by email or SMS, and to show you tailored advertising on our website and other websites. Lawful basis: consent (for email and SMS marketing and for marketing cookies); legitimate interests (for other advertising, where permitted). You can opt out at any time.
- Security and fraud prevention: to detect, investigate and act on possible fraudulent, illegal or malicious activity. Lawful basis: legitimate interests.
- Customer support and service improvement: to answer your questions and improve our Services. Lawful basis: legitimate interests.
- Legal compliance: to comply with legal obligations (for example tax and accounting records and consumer law) and to enforce our Terms of Service. Lawful basis: legal obligation; legitimate interests.
4. How we store and protect your information
4.1 Security
Your personal data is transferred over an encrypted (SSL/TLS) connection and stored on secure, access-controlled servers. We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or disclosure. No security measures are perfect, so we cannot guarantee absolute security. Please do not send us sensitive information through insecure channels.
4.2 International transfers
Your personal data may be transferred to and processed in countries outside the UK, including by our service providers. Where we transfer personal data outside the UK, we make sure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, as approved under UK data protection law.
4.3 How long we keep your data
We keep personal data only for as long as necessary for the purposes described in this Policy — for example, to maintain your account, provide the Services, comply with legal obligations (such as keeping accounting records), resolve disputes and enforce our agreements.
5. Who we share your personal data with
5.1 Service providers
We share personal data with vendors who perform services on our behalf, including website hosting and e-commerce (Shopify), IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and delivery.
5.2 Business and marketing partners
Where you have consented, we may share personal data with marketing and advertising partners to show you relevant advertising. These partners use your information in accordance with their own privacy notices.
5.3 Corporate transactions
We may disclose personal data in connection with a business transaction such as a merger, sale of assets, reorganisation or acquisition of all or part of our business, or in the event of insolvency.
5.4 Legal requirements
We may disclose personal data to comply with legal obligations, including to respond to court orders and lawful requests from law enforcement or regulatory authorities.
5.5 With your consent
We share personal data when you ask us to or consent to it, for example to deliver your order or when you use social media features.
We do not sell your personal data, and we do not use special category data (such as health data) without your explicit consent.
6. Email and SMS marketing
If you sign up to our emails or, where offered, SMS messages, we will send you marketing messages only with your consent. Consent is not a condition of any purchase. For SMS, message and data rates may apply and message frequency varies. We process your data for this purpose on the basis of your consent (UK GDPR Article 6(1)(a)).
You can withdraw your consent at any time by clicking the unsubscribe link in any email, replying STOP to any text message, or contacting us at support@thewarmzy.com. Withdrawing consent does not affect processing carried out before you withdrew it.
Where you have opted in, we may use cookies and similar technologies to remember items left in your basket and send you a reminder. You can opt out of these reminders at any time.
We will not share your opt-in to a messaging programme with third parties for purposes unrelated to providing that programme. We may share it with providers that help us deliver messages, such as messaging platforms and mobile network operators.
7. Third-party websites and links
Our website may link to websites or platforms operated by third parties. We are not responsible for the privacy or security of those sites, and we encourage you to read their privacy notices. Including a link does not imply that we endorse the site or its operator.
8. Children’s data
Our Services are not intended for children under the age of 13, and we do not knowingly collect personal data from children. If you are the parent or guardian of a child who has provided us with personal data, please contact us so that we can delete it.
9. Your rights under the UK GDPR
Under the UK GDPR and the Data Protection Act 2018 you have the following rights in relation to your personal data. These rights are not absolute and may apply only in certain circumstances.
- Right of access: to request a copy of the personal data we hold about you.
- Right to rectification: to ask us to correct inaccurate or incomplete data.
- Right to erasure: to ask us to delete your personal data (“right to be forgotten”).
- Right to restrict processing: to ask us to limit how we use your data.
- Right to data portability: to receive your data in a structured, commonly used and machine-readable format.
- Right to object: to object to processing based on legitimate interests, and to object to direct marketing at any time.
- Rights related to automated decision-making: not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you.
- Right to withdraw consent: where we rely on consent, you can withdraw it at any time.
To exercise any of these rights, contact us at support@thewarmzy.com. We will respond within one month, which may be extended by up to two further months for complex or numerous requests (we will tell you if so). We may need to verify your identity before responding. You may also ask an authorised representative to make a request on your behalf. We will not treat you less favourably for exercising your rights.
10. Complaints
If you have concerns about how we use your personal data, please contact us first at support@thewarmzy.com so we can try to resolve them.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection:
- Website: ico.org.uk
- Telephone: 0303 123 1113
11. Changes to this policy
We may update this Privacy Policy from time to time, for example to reflect changes to our practices or for operational, legal or regulatory reasons. We will post the revised policy on this page and update the “Last updated” date.
12. Contact us
Requests to access or correct your personal data, complaints and other privacy questions should be sent to:
- Email: support@thewarmzy.com
- Contact form: thewarmzy.com/pages/contact
