Privacy Policy
Overview
Quanolo (quanolo.com) is a UK home-improvement and lifestyle goods retailer, offering products across pet care, kids and family, repair and improve, cleaning and organisation, travel, warmth and comfort, wellness and care, kitchen solutions, garden and outdoor living, and smart home devices. This Privacy Policy explains how we collect, use, and disclose personal data when you visit our store, place an order, contact us, or otherwise interact with our services, and sets out your rights under the UK GDPR.
Please read carefully
By using our services, you acknowledge that you have read this Privacy Policy and understand how your personal data is collected, used, and disclosed as described here. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the handling of your personal data.
Data controller
SBV Business LLC (trading as Quanolo)
606 Vang Ct
Boiling Springs, SC 29316
United States of America
info@quanolo.com · +1 740 272-5703
Information We Collect
"Personal data" means any information relating to an identified or identifiable living individual, as defined under the UK GDPR. We collect the following categories depending on how you interact with our services.
Account & order details
Name, email address, delivery and billing address
Account login credentials, if you create an account
Order history, items purchased, and order status
Customer service correspondence
Payment metadata (via Shopify)
Payment method type and transaction confirmation
Truncated card details for reference (last four digits, card brand)
We never see or store your full card number. It is processed directly by Shopify and its payment processors.
Browsing & analytics data
IP address, browser type, and device information
Pages viewed, products browsed, and referring links
On-site behaviour collected through cookies and analytics tools
Marketing preferences
Email marketing opt-in status and consent records
Engagement with our marketing emails and social ads
Preferences you set for the content and frequency of communications
Sources of Information
We collect personal data from several sources, depending on how you interact with us.
Directly from you
When you create an account, place an order, contact customer support, sign up for marketing, or otherwise provide us with information.
Automatically via the store
From your device when you browse our store, through cookies, pixels, and similar tracking technologies.
From service providers
When we engage third parties such as Shopify, payment processors, shipping carriers, or marketing platforms, they may collect or process data on our behalf.
From advertising partners
From advertising and social platforms such as Meta (Instagram/Facebook), which help us measure and deliver ads and may share limited engagement data with us.
How We Use Your Data
Under the UK GDPR, we may only process your personal data where we have a valid lawful basis for doing so. The lawful basis that applies depends on the purpose of the processing.
Primary purposes and lawful bases
We use your data to provide, improve, and protect our services.
This includes processing payments, fulfilling and dispatching orders, managing your account, arranging returns, sending order-related notifications, and providing customer support, relying on the lawful basis of performance of a contract with you (Article 6(1)(b) UK GDPR).
Marketing (consent)
Where you have given consent, we send promotional emails and show online ads based on your activity, relying on Article 6(1)(a) UK GDPR. You can withdraw consent or unsubscribe at any time. We may still send non-promotional communications, such as order updates, on the basis of contract performance.
Security & fraud prevention (legitimate interests)
We use your data to authenticate your account, secure payment transactions, and detect and investigate fraudulent or malicious activity, relying on our legitimate interests under Article 6(1)(f) UK GDPR, balanced against your rights and freedoms.
Customer communications (legitimate interests)
To respond to your enquiries, provide support, and maintain our relationship with you.
Legal & compliance (legal obligation)
To comply with applicable law, respond to valid legal requests, and meet accounting and tax obligations, relying on Article 6(1)(c) UK GDPR.
Third Parties & Processors
We do not sell your personal data. We share personal data only with the categories of third parties described below, each acting for a specific purpose in operating our store.
We do not sell your personal data
Quanolo does not sell personal data to third parties for their own use. Where we share limited data with advertising partners for targeted advertising, you have the right to object. See the rights section below.
Who we share data with
Shopify Inc. Our store is hosted by Shopify Inc., 151 O’Connor Street, Ottawa, ON K2P 2L8, Canada, which processes order, checkout, and payment data on our behalf as our data processor.
Payment processors: To securely process your payment and prevent fraud. These providers receive only the data needed to complete your transaction.
Shipping carriers: To deliver your order, we share your name, delivery address, and contact details with the carrier fulfilling your shipment.
Email and marketing tools: To send order confirmations, dispatch updates, and, where you have consented, marketing communications.
Analytics providers: To understand site usage and improve our services, using aggregated or de-identified data where possible.
Meta / Instagram advertising: We use the Meta advertising pixel to measure and deliver ads on Instagram and Facebook. Meta may receive information about your visits to our store for this purpose, subject to Meta’s own privacy policy.
Legal and business transfers: To comply with legal obligations, respond to valid legal process, enforce our terms, or in connection with a merger, acquisition, or sale of assets.
Objecting to targeted advertising
You may object to your data being used for targeted advertising, including through the Meta pixel, by contacting us at info@quanolo.com or adjusting your ad preferences directly within Instagram or Facebook.
International Data Transfers
Quanolo serves customers in the United Kingdom only, but your personal data is handled outside the UK at several points. We are transparent about this, and we apply appropriate safeguards required under the UK GDPR.
Cross-border handling of your data: Our data controller, SBV Business LLC, is established in Boiling Springs, South Carolina, United States. Our store platform is operated by Shopify Inc., established in Ottawa, Ontario, Canada. This means your personal data, though collected from you in the UK, is transferred to and processed in both the United States and Canada.
Safeguards we rely on
Where personal data is transferred outside the UK to a country not covered by UK adequacy regulations, we rely on appropriate safeguards recognised under Article 46 UK GDPR, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, entered into with the recipient.
Shopify’s safeguards
Shopify maintains its own data processing terms incorporating the UK Addendum to the EU Standard Contractual Clauses to protect personal data it processes on our behalf outside the UK. Details are available directly from Shopify.
Questions about a specific transfer
If you would like more information about the safeguards that apply to a particular transfer of your personal data, contact us at info@quanolo.com and we will provide details on request.
Cookies & Tracking Technologies
We and our service providers use cookies and similar technologies to operate our store, remember your preferences, and understand how our services are used.
Essential cookies
Required for core functions such as your shopping basket, checkout, and account login. The store cannot operate without these.
Analytics cookies
Help us understand which pages and products customers find useful, so we can improve the site experience.
Advertising cookies
Including the Meta pixel, used to measure and personalise ads shown on Instagram and Facebook.
Managing cookies
Most browsers let you block or delete cookies through their settings. Blocking essential cookies may prevent parts of our store, such as checkout, from working correctly. In line with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR), we request your consent before setting non-essential cookies, and you can change your preferences at any time.
Retention & Security
We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it, as required under Article 32 UK GDPR. No security system is completely immune to risk, and we cannot guarantee absolute security.
Security measures
Encrypted data transmission (SSL/TLS), restricted access controls, and PCI-compliant payment processing through Shopify. We never store your full card number.
We recommend that you avoid sending sensitive information to us over unsecured channels, such as social media messages.
How long we keep your data
We retain order and account data for as long as needed to fulfil orders, provide support, and meet accounting and tax record-keeping obligations under applicable law, consistent with the UK GDPR storage limitation principle.
Marketing data is kept until you withdraw consent or unsubscribe, after which we delete or anonymise it within a reasonable period.
In-transit security
Data sent to us over the internet may not be fully secure while in transit. We recommend using a trusted network and keeping your account credentials confidential. If you suspect your account has been compromised, contact us immediately at info@quanolo.com.
Your UK GDPR Rights
As a UK resident, you have rights over your personal data under the UK GDPR (the retained EU law version of the General Data Protection Regulation, as it forms part of the law of England and Wales, Scotland, and Northern Ireland) and the Data Protection Act 2018. These rights are not absolute and may be subject to exemptions.
Exercising your rights
To exercise any of these rights, contact us at info@quanolo.com. We may need to verify your identity before acting on a request. We will respond within one month, as required by the UK GDPR, extendable by a further two months for complex or numerous requests, in which case we will tell you why the extension is needed.
Children’s Privacy
Quanolo sells home-improvement and lifestyle goods, including a kids and family category, but our store and checkout are built for use by adults. Purchases of any products relevant to children are made by adult parents and guardians on their behalf. Our services are not directed at, and we do not knowingly collect personal data from, children.
Not directed to children under 18
Our website and checkout are intended for use by adults aged 18 and over. We do not knowingly collect, solicit, or store personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at info@quanolo.com so we can delete it.
Updates & How to Reach Us
However you exercise your rights under the UK GDPR, the process starts the same way: a message to our team.
Exercising your rights
Contact info@quanolo.com to make a request.
We may need to verify your identity before we can act on a request, and we will respond within the timeframe required under the UK GDPR. You will not be discriminated against for exercising any of your privacy rights, and you may designate an authorised third party to act on your behalf, subject to verification.
Data processed by Shopify
For rights related to data Shopify processes directly, you may also contact Shopify at 151 O’Connor Street, Ottawa, ON K2P 2L8, Canada.
Response time
We aim to acknowledge privacy requests within 5 business days and to respond in full within one month, as required by the UK GDPR.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised policy on this page and update the effective date above. We encourage you to review this page periodically.
Questions about your privacy?
Our team responds to all emails within 1 to 2 business days.
info@quanolo.comThis Privacy Policy applies to all users ofquanolo.com and to our United Kingdom customer base only. It sets out your rights under the UK GDPR and the Data Protection Act 2018, enforced by the Information Commissioner's Office (ICO) at ico.org.uk. Nothing in this policy limits any right that cannot be waived under applicable law. Quanolo is a trading name of SBV Business LLC. Effective 15 September 2026.