Privacy policy
Who we are
Proxy is a product made and sold by [Proxy Ltd], a company registered in England and Wales ([company number]), at [registered address].
We're the "data controller" for the information on this page. That means we decide what gets collected and what happens to it.
Questions, or want your data deleted? Email [privacy@itsproxy.fyi].
This policy covers itsproxy.fyi and our emails. It doesn't cover other sites we link to.
What we collect
Only what we need to sell you a thing and send it to you.
When you order: name, email, delivery and billing address, phone number if you give it, what you bought.
Payment: handled by [Stripe / PayPal / Shopify Payments]. They take your card details, not us. We only see the last four digits and whether it worked.
When you sign up to emails: your email address, and whether you open or click them.
When you use the site: pages viewed, roughly where you are (country/city level), device and browser, how you got here.
When you contact us: whatever you write to us, plus your email address.
We don't collect anything sensitive — no health data, no ID documents, no biometrics.
Why we collect it
UK law says we need a reason for each thing. Here they are.
What we do
Why
Our legal basis
Take and ship your order
We can't send you a Proxy otherwise
Performing our contract with you
Handle returns, refunds, support
You asked us to
Performing our contract with you
Keep order and tax records
HMRC requires it
Legal obligation
Send marketing emails
To tell you about new things
Your consent (you can withdraw it any time)
Measure how the site is doing
To fix what's broken and build what people want
Your consent for cookies; otherwise our legitimate interest in running a business
Show ads on Meta
To find more people like you
Your consent
Stop fraud and abuse
To protect the shop and you
Legitimate interest
Who we share it with
We don't sell your data. We do use other companies to run the shop, and they see parts of it.
Company
What they do
Where they are
Squarespace
Runs our website and store
USA
[Stripe / PayPal]
Takes payments
USA / Ireland
[Royal Mail / courier]
Delivers your order
UK
[Email platform, e.g. Klaviyo or Mailchimp]
Sends our emails
USA
Meta
Shows our ads and measures them
USA
[Accountant / bookkeeping software]
Keeps our books
[UK]
We may also share data if the law requires it, or if the business is sold.
Keep this table accurate. If you add a tool, add it here.
Cookies and tracking
Cookies are small files the site puts on your device.
Essential ones keep your basket working and let you check out. These can't be turned off.
Analytics ones tell us which pages people actually read.
Advertising ones — mainly the Meta Pixel — let us show ads to people who've visited, and tell us if an ad led to a sale.
In the UK and EU we ask before setting the non-essential ones. You can change your mind any time via [cookie settings link]. In the US you can opt out via the same link.
If you'd rather not be tracked at all, your browser's "do not track" or an ad blocker will stop most of it. Our site works fine either way.
How long we keep things
Order and payment records: 7 years. Tax law.
Email marketing list: until you unsubscribe, then we keep a note that you opted out so we don't email you again.
Support emails: 2 years.
Website analytics: up to 2 years, then deleted or anonymised.
After that it's deleted.
Where your data goes
We're in the UK, but several of our suppliers are in the USA, so your data crosses borders.
When that happens we rely on the UK's approved safeguards — either the UK Extension to the EU–US Data Privacy Framework, or the UK International Data Transfer Agreement — which commit the company receiving your data to protect it to UK standards.
If you're in the US, your data stays mostly in the US, with some processing in the UK.
Your rights (UK and EU)
You can ask us to:
tell you what data we hold about you, and send you a copy
correct anything that's wrong
delete it (unless we legally have to keep it, like order records)
stop using it for marketing — always, no questions
limit what we do with it while a complaint is sorted out
hand it to another company in a usable format
Email [privacy@itsproxy.fyi]. We'll reply within one month, free of charge.
Not happy with how we handled it? You can complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113.
Your rights (USA)
If you're in California, Colorado, Connecticut, Virginia, Texas or another state with a privacy law, you can ask us to:
tell you what we've collected and who we shared it with
send you a copy
correct it
delete it
stop sharing it for targeted advertising
We do not sell your personal information, and we don't share it for cross-context behavioural advertising beyond the ad cookies described above. You can switch those off via [cookie settings link].
Email [privacy@itsproxy.fyi] to use any of these rights. We won't treat you differently for asking. Someone else can make the request for you if you authorise them in writing.
If we say no, you can appeal by replying to our email. California residents can also complain to the California Privacy Protection Agency.
Marketing
We'll only email you marketing if you asked us to, or if you bought something and we told you at the time that you'd get emails about similar products.
Every email has an unsubscribe link. One click, you're out, and we won't email you again.
We don't do SMS or post unless you specifically opt in.
Children
Proxy is sold to adults. We don't knowingly collect data from anyone under 16 in the UK or EU, or under 13 in the USA.
If you think your child has given us their details, email [privacy@itsproxy.fyi] and we'll delete it.
Security and changes
Our site uses encryption, and we pick suppliers who take security seriously. No system is perfect, but if something goes wrong that puts you at risk, we'll tell you and the ICO within 72 hours.
If we change this policy we'll update the date at the top. If the change is significant, we'll email anyone on our list.