Privacy and Cookie Policy

Last updated: 2 August 2026

This notice explains how SyraCare uses personal information relating to customers and visitors in the United Kingdom. It is intended to comply with the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003, as amended including by the Data (Use and Access) Act 2025.

1. Controller

The controller is Sinaly Nanlo TOURE, a French sole trader trading as Syra & Co Solutions and SyraCare.

• Address: 59 boulevard Soult, 75012 Paris, France
• Email: contact@syracare.com
• SIRET: 930 623 640 00016

2. UK representative

Because we are established outside the United Kingdom and offer goods to people in the UK, we are in the process of appointing a UK representative under Article 27 UK GDPR. This section will be updated with the representative's name and UK contact details immediately after appointment. Until then, UK individuals may contact us directly at contact@syracare.com.

3. Information we collect

• Identity and contact details, such as name, billing and delivery addresses, email and telephone number;
• Order, returns, delivery and customer-service information;
• Payment status and limited payment information. Complete card details are processed by payment providers and are not provided to us;
• Account, marketing and communication preferences;
• Technical and usage information, such as IP address, device, browser, cookie identifiers, pages viewed and interactions;
• Information you voluntarily provide in reviews, surveys, messages, photographs or videos;
• Fraud-prevention and transaction-risk information.

We receive information directly from you, automatically from your browser or device, and from service providers involved in checkout, fraud prevention, delivery, analytics and marketing.

4. Why we use information and our lawful bases

Where we rely on legitimate interests, you can ask for information about the balancing assessment and object to the processing.

5. Shopify and other recipients

Our store is hosted by Shopify. Information submitted through the store is shared with Shopify and may be processed by Shopify and its affiliates to provide, secure and improve the commerce platform and related services. Shopify may also process information for its own purposes as described in Shopify's Privacy Policy.

We may also share information, only where necessary, with:

• payment, checkout and fraud-prevention providers, including Klarna where selected;
• suppliers, fulfilment partners, customs agents and international or local UK carriers;
• customer-service, email and marketing providers such as Klaviyo;
• analytics and website-experience providers such as Microsoft Clarity;
• advertising providers such as Meta, but only subject to the required consent for their non-essential technologies;
• professional advisers, insurers, regulators, courts, police or public authorities where legally required;
• a purchaser or successor if the business is reorganised or transferred, subject to appropriate safeguards.

We do not sell personal information for money.

6. International transfers

We are established in France, our store uses international service providers, and orders are fulfilled from China. Personal information may therefore be transferred outside the UK, including to the European Economic Area, Canada, the United States and China.

Where UK restricted-transfer rules apply, we use an applicable UK adequacy regulation or appropriate contractual safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to approved EU Standard Contractual Clauses, or another legally permitted mechanism. You may request information about the safeguards relevant to your data.

7. Retention

We keep personal information only for as long as necessary for the purposes described above, including legal, tax, accounting, product-safety and dispute requirements. In general:

• order, invoice and accounting records may be kept for up to 10 years where required by the laws applicable to our French business;
• customer-service and returns records are kept for the period reasonably required to resolve the request and defend legal claims;
• marketing information is kept until consent is withdrawn, you opt out, or the information is no longer reasonably needed;
• cookie and technical information is kept according to the lifetime stated in our consent tool or the relevant provider's information.

We may retain a minimal suppression record to ensure that an opt-out continues to be respected.

8. Your UK data-protection rights

Depending on the circumstances, you may have rights to:

• be informed and obtain access to your personal information;
• correct inaccurate or incomplete information;
• request erasure or restriction;
• object to processing based on legitimate interests and object at any time to direct marketing;
• receive certain information in a portable format;
• withdraw consent at any time, without affecting earlier lawful processing;
• request safeguards concerning qualifying automated decisions.

To exercise a right, email contact@syracare.com. We may request proportionate information to verify your identity. We normally respond within one month, subject to lawful extensions for complex requests.

9. Complaints

You can complain to us at contact@syracare.com. Please describe the issue and include relevant details. We will acknowledge and investigate the complaint and will normally provide an outcome within 30 days.

You also have the right to complain to the UK Information Commissioner's Office: ico.org.uk/make-a-complaint. Because our establishment is in France, you may also contact the CNIL where appropriate.

10. Cookies and similar technologies

We use cookies, pixels, local storage and similar technologies for essential store functions, security, preferences, audience measurement and—where accepted—advertising and personalisation.

• Strictly necessary technologies support functions such as the basket, checkout, fraud prevention and security.
• Functional and permitted low-intrusion technologies may remember preferences or support limited service improvement where a PECR exception applies.
• Analytics technologies help us understand use of the store.
• Advertising technologies may measure campaigns or personalise advertising.

Except where a statutory exception applies, non-essential technologies are not activated until you consent. You can accept, reject or change your choices through the cookie banner or privacy-preferences control. Rejecting non-essential technologies does not prevent you from shopping.

11. Marketing

You can unsubscribe using the link in a marketing message or by contacting us. Service messages about an order are not marketing and may still be sent where necessary.

12. Security and children

We use appropriate organisational and technical measures designed to protect personal information. No online service can guarantee absolute security.

Our store is not directed at children and we do not knowingly collect personal information from children for independent purchases. A parent or guardian should contact us if a child has provided information without appropriate permission.

13. Changes and contact

We may update this notice when our practices or the law change. Material changes will be highlighted where appropriate. Questions can be sent to contact@syracare.com.