Privacy Policy

Last updated: 24 September 2026  ·  Version 2.0

This Privacy Policy explains how AZEKA collects, uses, stores and shares your personal data, what legal bases we rely on, how long we keep your information, and the rights you have under the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Who we are and how to contact us

AZEKA (“AZEKA”, “we”, “us”, “our”) is the data controller responsible for the personal data described in this policy. Our details are:

Data controller	AZEKA
Registered office	12F-4-A16, Linye Building, No. 31 Binhai Avenue, Longhua District, Haikou City, China, 570125
Privacy contact	[email protected]
Telephone	+86 185 8889 7001 (Monday to Friday, 09:00–17:00 CET)
Website	https://azeka.cc

If you have any question about this policy, or about how we handle your personal data, please contact us at [email protected]. We aim to respond to all privacy enquiries within 30 days.

2. Scope of this policy

This policy applies to personal data we collect through:

• our website at https://azeka.cc and any subdomains or localised versions of it;
• orders placed through our online shop;
• our customer service channels, including email and telephone;
• our newsletter, promotions and marketing activities; and
• any other interactions with us through which you provide personal data.

This policy does not apply to third-party websites or services that we link to, or that you reach from our site. We encourage you to read the privacy policies of any third-party service you use.

3. The personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

3.1 Identity and contact data

• first name and surname;
• billing address and delivery address;
• email address;
• telephone number (where you provide it for delivery or contact purposes).

3.2 Account data

• login credentials (email address and an encrypted password);
• order history and saved addresses;
• preferences you save in your account.

3.3 Order and transaction data

• products ordered, sizes, colours and quantities;
• order value, currency, discounts applied and payment status;
• delivery method, carrier and tracking information;
• returns, refunds and warranty claims.

3.4 Payment data

We do not store full payment card numbers on our servers. Card payments are processed by our third-party payment providers, who receive the card data you enter directly. We receive only limited information such as the payment result, the payment method used, a masked card reference and the transaction identifier. Where you choose cash on delivery, we process only the order data needed to collect payment.

3.5 Communication data

• emails, messages and notes relating to your enquiries, orders or complaints;
• records of telephone calls to customer service where a note is required to handle your request.

3.6 Technical and usage data

• IP address and approximate location derived from it (typically country or city level);
• browser type and version, device type, operating system and screen size;
• pages viewed, products viewed, referring pages and time spent;
• cookie identifiers and similar technical identifiers.

3.7 Marketing data

• your preferences for receiving marketing from us;
• whether you have opened or clicked our emails, where you have consented to tracking.

3.8 Special category data

4. How we collect your data

• Directly from you — when you create an account, place an order, contact customer service, subscribe to our newsletter, leave a review or take part in a promotion.
• Automatically — when you browse our site, we and our service providers collect technical and usage data using cookies and similar technologies.
• From third parties — such as payment providers (payment confirmation and fraud signals), delivery carriers (delivery status), review platforms (reviews you submit), and analytics providers.

5. Why we use your data and our legal bases

We use your personal data for the purposes set out below. Under the GDPR we must have a legal basis for each purpose, and those bases are set out alongside each purpose.

Purpose	Data used	Legal basis
Creating and managing your account	Identity, contact, account data	Performance of a contract
Processing and delivering your order	Identity, contact, order, payment, delivery data	Performance of a contract
Handling returns, refunds and warranty claims	Identity, order, payment, communication data	Performance of a contract; legal obligation
Providing customer service and answering enquiries	Identity, contact, order, communication data	Performance of a contract; legitimate interests
Keeping accounting, tax and sales records	Identity, order, payment data	Legal obligation
Preventing and detecting fraud and abuse	Identity, order, payment, technical data	Legitimate interests; legal obligation
Running, securing and improving our website	Technical and usage data	Legitimate interests
Analysing how our shop is used so we can improve it	Technical and usage data	Consent (for non-essential cookies); legitimate interests
Sending you marketing emails and offers	Identity, contact, marketing data	Consent, or soft opt-in where permitted
Measuring the performance of our marketing	Marketing and technical data	Consent
Complying with legal requests and enforcing our Terms	Any relevant data	Legal obligation; legitimate interests

Where we rely on legitimate interests, we have carried out a balancing exercise to confirm that our interests do not override your rights and freedoms. You can ask us for more information about that assessment at any time. Where we rely on consent, you may withdraw that consent at any time — this will not affect the lawfulness of processing carried out before you withdrew it.

6. Cookies and similar technologies

We use cookies and similar technologies to make our shop work, to remember your preferences, to keep your basket and session secure, and — where you consent — to understand how the site is used and to measure our marketing.

6.1 Categories of cookies we use

Category	Purpose	Consent required?
Strictly necessary	Basket and checkout, login sessions, security, load balancing, remembering your cookie choices	No — these are essential to operate the shop
Functional	Remembering preferences such as currency, language and recently viewed items	Yes
Analytics	Understanding how visitors use the site so we can improve it	Yes
Marketing	Measuring and targeting advertising and remarketing	Yes

6.2 Managing cookies

You can accept or reject non-essential cookies using our cookie banner, and you can change your choices at any time. You can also control cookies through your browser settings — most browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies may prevent parts of the shop, including the basket and checkout, from working properly.

Where we use analytics or marketing tools that rely on cookies, those tools are only activated after you have given consent, and consent is requested before any non-essential cookie is set.

7. Marketing and newsletters

We will only send you marketing emails where you have given us your consent, or where we are permitted to rely on the “soft opt-in” because you previously bought from us and you were given a clear opportunity to opt out at the time and in every message since. Marketing messages always include an unsubscribe link.

You can unsubscribe at any time by:

• clicking the unsubscribe link at the bottom of any marketing email; or
• contacting us at [email protected].

Unsubscribing from marketing will not stop transactional messages that are necessary to fulfil your order, such as order confirmations, dispatch notices and delivery updates.

8. Who we share your data with

We do not sell your personal data. We share it only where necessary, and only with parties who are bound to protect it. The categories of recipients are:

• Payment providers — to process your payment securely and to detect fraud. Card data is handled directly by the provider.
• Delivery carriers and logistics partners — to deliver your order and provide tracking. We share the recipient name, delivery address, contact details and order contents.
• Hosting and infrastructure providers — who host our website and store our databases.
• Email and communication service providers — who deliver our transactional and marketing emails.
• Analytics providers — who help us understand how the site is used, where you have consented.
• Review platforms — where you submit a product review.
• Professional advisers — such as accountants, auditors, insurers and legal advisers, where necessary.
• Authorities — where we are required by law to disclose information, or where disclosure is necessary to protect our rights or the safety of others.

Where a service provider processes personal data on our behalf, we put a written data processing agreement in place requiring them to protect your data and to act only on our instructions.

9. International transfers of data

We are established outside the EU, and some of our service providers may be located outside the EU/EEA, including in countries that have not received an adequacy decision from the European Commission. Where we transfer personal data outside the EU/EEA, we ensure that an appropriate safeguard is in place, such as:

• the European Commission’s Standard Contractual Clauses;
• a transfer to a country covered by an adequacy decision; or
• another lawful transfer mechanism permitted under the GDPR.

You can request more information about the safeguards we use by contacting us at [email protected].

10. How long we keep your data

We keep personal data only for as long as necessary for the purposes described in this policy, and to comply with our legal obligations.

Type of data	Retention period
Account data	For as long as your account is active, plus 24 months of inactivity, after which the account is deleted
Order and transaction records	10 years from the end of the financial year in which the order was placed, to meet tax and accounting obligations
Invoices and payment records	10 years, as required by tax law
Returns, refunds and warranty records	Duration of the warranty period plus 24 months, to handle claims
Customer service communications	36 months from the date the enquiry is closed
Marketing consents and preferences	Until you withdraw consent, plus 24 months as evidence of your choice
Analytics and technical data	Up to 26 months, in line with our analytics configuration
Cookie consent records	12 months, or until you change your preferences

When we no longer need personal data, we delete it securely or irreversibly anonymise it so that it can no longer be linked to you.

11. How we protect your data

We have put in place appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

• encryption of data in transit using TLS/SSL;
• hashing and salting of account passwords;
• restricting access to personal data to staff and providers who need it to perform their role;
• role-based access controls and audit logging on our systems;
• regular software updates and security patching;
• automated backups and a documented recovery procedure.

No method of transmission over the internet, or method of electronic storage, is completely secure. While we take protection of your data seriously, we cannot guarantee absolute security. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where the breach is likely to result in a high risk to you, we will inform you directly.

12. Your rights under the GDPR

Subject to certain conditions and exceptions, you have the following rights in relation to your personal data:

1. Right of access — you can request confirmation of whether we process your personal data and obtain a copy of it.
2. Right to rectification — you can ask us to correct inaccurate or incomplete personal data.
3. Right to erasure — you can ask us to delete your personal data where there is no longer a lawful reason for us to keep it.
4. Right to restriction of processing — you can ask us to limit how we use your data, for example while a dispute about accuracy is resolved.
5. Right to data portability — you can receive the personal data you provided to us in a structured, commonly used and machine-readable format, and ask us to transmit it to another controller where technically feasible.
6. Right to object — you can object to processing based on our legitimate interests, and you have an absolute right to object to processing for direct marketing.
7. Right to withdraw consent — where processing is based on consent, you can withdraw it at any time.
8. Right not to be subject to automated decision-making — you have the right not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you, unless an exception applies.

These rights are not absolute. For example, we may need to keep certain order and invoice data to comply with tax law even if you ask us to delete it, and the right to erasure does not apply where we have a legal obligation to retain the data.

13. How to exercise your rights

To exercise any of your rights, please contact us at [email protected] and describe your request. To protect your data, we may ask you to confirm your identity before we act — for example, by verifying the email address associated with your account or order. This is a security measure, not an attempt to obstruct your request.

We will respond to your request without undue delay and in any event within one month of receiving it. If your request is particularly complex or you have made several requests, we may extend this period by a further two months, and we will inform you if we do.

Exercising your rights is free of charge. However, where a request is manifestly unfounded or excessive — for example, if it is repetitive — we may charge a reasonable fee or refuse to act, and we will explain our reasons.

14. Children’s privacy

Our shop is intended for adults. We do not knowingly collect personal data from children under the age of 16 without the consent of a holder of parental responsibility. If you believe that a child has provided us with personal data without appropriate consent, please contact us at [email protected] and we will take steps to delete that information.

15. Automated decision-making and profiling

We do not use your personal data to make decisions based solely on automated processing that produce legal effects concerning you or that similarly significantly affect you. Where our payment providers use automated fraud detection, those checks are carried out on the basis of our legitimate interest in preventing fraud, and you can contact us to request human intervention or to object to the decision.

16. Third-party links

Our site may contain links to third-party websites, plug-ins and applications, for example social media platforms, payment providers or review services. Clicking on those links may allow third parties to collect or share data about you. We do not control those third-party sites and are not responsible for their privacy practices. When you leave our site, we encourage you to read the privacy policy of every website you visit.

17. Complaints and supervisory authorities

We would appreciate the chance to deal with your concerns before you approach a supervisory authority, so please contact us in the first instance at [email protected]. We will acknowledge your complaint within two business days and aim to give you a substantive response within 14 days.

If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority. If you are resident in the EU/EEA, you may lodge a complaint with the supervisory authority of the country where you live, work or where the alleged infringement occurred. A list of national supervisory authorities is published by the European Data Protection Board. If you are resident in the UK, you may contact the Information Commissioner’s Office (ICO).

18. Changes to this Privacy Policy

We may update this policy from time to time to reflect changes in our practices, technology, legal requirements or regulatory guidance. The “last updated” date at the top of this page shows when the policy was last revised. Where we make material changes, we will provide a clear notice on our website, and where required by law we will ask for your consent again.

We recommend that you review this page periodically to stay informed about how we protect your data.