Privacy notice
1. Who we are
Wexfur Retail Limited (a private company limited by shares), trading as Wexfur, is the data controller for personal data collected through wexfur.com. Our registered address isWexfur Retail, Unit 4 Clonard Business Park, Wexford, Y35 D881, Ireland. For any privacy question or request, contact privacy@wexfur.com.
Wexfur Retail Limited operates this storefront on the ZLVA storeHub platform (ZLVA Ltd), which acts as a processor on our instructions. The site runs on Cloudflare's edge network, which processes request data as a sub-processor.
2. What we collect, why, and on what lawful basis
| Data | Purpose | Lawful basis (GDPR Art. 6) |
|---|---|---|
Guest identifier (random UUID in the sh_guest cookie) | Keeping your bag and saved items attached to this browser | Legitimate interests (Art. 6(1)(f)), operating a working shop |
Account session (signed token in sh_session), not yet in service | Keeping you signed in once accounts are available | Contract (Art. 6(1)(b)) |
Cookie preference (sh_consent) | Recording and honouring your consent choice | Legal obligation (Art. 6(1)(c)) with ePrivacy Regulations 2011 |
| Bag and saved items (browser localStorage, not sent to us) | Remembering what you were shopping for | Legitimate interests (Art. 6(1)(f)) |
| Technical request data (IP address, user agent, country, timestamps) | Security, rate limiting against scrapers, and fault diagnosis | Legitimate interests (Art. 6(1)(f)) |
| Aggregate analytics, if you consent | Understanding which pages are used | Consent (Art. 6(1)(a)), withdrawable at any time |
| Email you send us | Answering your question | Legitimate interests, or contract where it concerns an order |
3. What we do not collect
This site does not take orders or payments. Ordering is not switched on, so no payment card details, delivery addresses or order records are collected or stored by this website. No profile is built about you, no automated decision-making or profiling with legal effect takes place, and your data is not sold.
4. Cookies and local storage
Only strictly necessary storage is set before you make a choice. Everything optional waits for your consent, and rejecting is exactly as easy as accepting. Your choice is recorded for 180 days and can be changed at any time from the cookie policy. The full table of names, purposes and lifetimes is on that page.
5. Who your data is shared with
- ZLVA Ltd, as platform processor, under a data processing agreement.
- Cloudflare, Inc., for hosting, edge delivery and denial-of-service protection.
- Nobody else, unless we are legally required to disclose it.
Where a processor operates outside the EEA, transfers rely on the European Commission's Standard Contractual Clauses together with supplementary measures.
6. How long we keep it
- Guest identifier: 12 months from your last visit.
- Account session: 7 days, then it expires.
- Cookie preference: 180 days, then we ask again.
- Bag and saved items: until you clear them or clear your browser storage.
- Technical logs: retained by our hosting provider on a short rolling window.
- Email correspondence: kept while it is needed to resolve your query.
7. Your rights
Under the GDPR and the Data Protection Act 2018 you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing before withdrawal.
Email privacy@wexfur.com to exercise any of these. We respond within one month.
8. Complaints
If you are not satisfied with our response you can complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, at dataprotection.ie. If you are in another EEA state you may complain to your local supervisory authority instead.
9. Changes
We review this notice when the site changes what it collects. The review date is at the top of this page.