Privacy Policy

Last updated: [INVULLEN: datum van publicatie]

This Privacy Policy explains how Forretress Limited ("we", "us", "our"), trading as Moisy, collects, uses and protects your personal data when you visit moisy.uk or buy from us.

We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Forretress Limited is the data controller responsible for your personal data.

• Company number: 12436517
• Registered office: 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London, England, W1T 6EB
• Contact email for data matters: help@moisy.uk

2. What data we collect

We collect the following categories of personal data:

Information you give us directly:

• Name, email address, phone number (when you sign up for our waitlist, newsletter or place an order)
• Shipping and billing address
• Payment information (processed securely by our payment provider — we do not store full card details)
• Communications with us (e.g. emails to help@moisy.uk)

Information collected automatically when you visit our website:

• IP address, device type, browser, operating system
• Pages viewed, time spent, click behaviour, referral source
• Cookie and tracking data (see our Cookie Policy)

3. How we use your data and our legal basis

We use your personal data for the following purposes:

Purpose	Legal basis
Processing and delivering your orders	Performance of a contract
Handling returns, refunds and customer support	Performance of a contract / legal obligation
Sending marketing emails and SMS (if you opt in)	Consent
Personalising marketing content and offers	Consent / legitimate interests
Improving our website, products and customer experience	Legitimate interests
Preventing fraud and ensuring website security	Legitimate interests / legal obligation
Complying with legal and accounting obligations	Legal obligation

You can withdraw your consent for marketing at any time by clicking the unsubscribe link in any of our emails or by emailing help@moisy.uk.

4. Who we share your data with

We share your data only with carefully selected third parties who help us run our business. These include:

• Shopify — our e-commerce platform (order processing, hosting, analytics)
• Klaviyo — our email and SMS marketing platform
• Payment providers (e.g. Shopify Payments) — for secure payment processing
• Shipping and fulfilment partners — to deliver your order
• Meta (Facebook/Instagram) — for advertising and analytics via the Meta Pixel, where you have consented to marketing cookies
• Other service providers as needed (e.g. customer support tools, accounting software)

We may also use other third-party analytics or marketing tools as described in our cookie banner. We may add or change these providers; the current list is always available in our cookie settings on the website.

All third parties are required to handle your data securely and only for the purposes we have specified.

We do not sell your personal data to third parties.

5. International data transfers

Some of our service providers (such as Shopify, Klaviyo and Meta) are based outside the UK and may process your data internationally, including in the United States. Where this happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses (SCCs) with the UK Addendum.

6. How long we keep your data

We keep your personal data only as long as needed for the purposes set out in this policy and in line with legal requirements:

• Order data: up to 7 years (UK tax and accounting law)
• Marketing data: until you withdraw consent or unsubscribe
• Website analytics data: typically up to 26 months
• Customer service correspondence: up to 3 years

7. Your rights

Under UK GDPR you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your data ("right to be forgotten")
• Right to restrict processing — limit how we use your data
• Right to data portability — receive your data in a portable format
• Right to object — object to processing based on legitimate interests or for marketing
• Right to withdraw consent — at any time, where we rely on your consent

To exercise any of these rights, email help@moisy.uk. We will respond within one month.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk.

8. Marketing emails and SMS

We will only send you marketing emails or SMS messages if you have given us consent (for example, by signing up to our waitlist or newsletter, or by ticking the marketing opt-in box at checkout).

You can unsubscribe at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Replying "STOP" to any marketing SMS
• Emailing help@moisy.uk

If you are aged between 13 and 16, we may require additional confirmation or parental consent before sending you certain types of marketing communications.

9. Cookies

Our website uses cookies and similar tracking technologies. Full details are in our Cookie Policy.

10. Children's privacy

Our website is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us at help@moisy.uk so we can delete it.

For users aged 13–16, certain processing (such as marketing) may require parental consent in accordance with applicable law.

11. Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse or alteration. These include encrypted connections (SSL/HTTPS), restricted access to personal data and reputable service providers with robust security practices.

No method of transmission over the internet is 100% secure, however, and we cannot guarantee absolute security.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated by email or by a notice on our website. The "Last updated" date at the top shows the most recent version.

13. Contact

For any questions about this Privacy Policy or your data, please contact:

Forretress Limited (trading as Moisy) 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London, England, W1T 6EB Email: help@moisy.uk