Last Updated: 01.01.2026
Koreesa Solutions (“We”) respects the privacy of our professional partners and website visitors. This policy outlines how we handle personal data in compliance with the UK GDPR and the Data Protection Act 2018.
1. Data Protection Principles
We commit to processing personal data that is:
- Processed lawfully, fairly, and transparently.
- Collected for specified, explicit, and legitimate professional purposes.
- Adequate, relevant, and limited to what is necessary for wholesale operations.
- Protected by appropriate technical and organisational security measures.
2. Information We Collect
Device Information
When you visit www.shopkoreesa.co.uk, we automatically collect data regarding your device, including IP address, browser type, and site interaction (pages viewed, duration, and referring keywords). This data is used for site optimisation and is not directly identifiable to you.
Account & Transaction Data
When you register a professional account or make a purchase, we collect:
- Identification: Name and business name.
- Contact: Professional address, telephone number, and email.
- Payment Security: Full payment card details are never stored on our systems. Sensitive information is tokenised by our secure payment processor; we only retain non-sensitive data (e.g., last four digits) for order identification.
3. Cookies and Tracking
We use cookies to operate our wholesale store:
- Essential Cookies: Required for site functionality, such as shopping cart persistence and secure login. These are placed automatically.
- Non-Essential Cookies: Analytics or marketing cookies are only placed with your explicit consent via our consent management platform. You can adjust these preferences at any time.
4. How We Use Your Data
- Fulfilment: To process orders, manage deliveries, and provide technical support.
- Risk Management: To screen for potential fraud or unauthorized retail (non-professional) purchases.
- Communication: To provide product updates, clinical data, or marketing materials (where explicit consent is provided).
- Legal Compliance: To meet regulatory requirements or respond to lawful data requests.
5. International Data Transfers
Where data is transferred outside the UK, we ensure compliance via the UK International Data Transfer Agreement (IDTA) or transfers to countries with a UK-recognised adequacy decision. We do not transfer personal data internationally without verified protective measures.
6. Your Rights
Under the UK GDPR, you have the right to:
- Access, rectify, or erase your personal data.
- Object to or restrict specific data processing.
- Data portability.
- Lodge a complaint with the Information Commissioner’s Office (ICO).
7. Contact Information
To exercise your rights or request clarification on our data practices, please contact:
- Email: salesnsupport@koreesa.com
- Phone: 0151 3059 882
- Post: Koreesa Solutions, 5A Toledo Road, Spitfire Court, Triumph Business Park, Liverpool, L24 9AE
