Who We Are
EKSC LTD is a private limited company registered in England and Wales (Company No. 15834846). For the purposes of UK GDPR and EU GDPR, EKSC LTD is the data controller for personal data collected through this website and through the central checkout infrastructure it operates for selected group brands.
Data We Collect
- Purchase transactions: name, email address, delivery address, telephone number, order details and payment reference (not raw card data)
- Customer support enquiries: name, email address, order details and communication content
- Website use: IP address, browser type, pages visited and session data via cookies and analytics
- Business enquiries: name, email address, business context and communication content
We do not collect raw card data. Payment processing is handled by regulated, PCI DSS-compliant payment service providers. EKSC LTD receives only tokenised references and transaction confirmation data.
How We Use Personal Data
- Processing and fulfilling orders placed through active group brands
- Communicating with customers about their orders, deliveries and support enquiries
- Processing refunds and returns where applicable
- Responding to complaints and disputes, and retaining records for dispute review
- Operating and improving this website
- Meeting our legal obligations under applicable consumer law, data protection law and payment industry regulations
- Responding to underwriting, compliance and due diligence enquiries
Legal Basis for Processing
- Contract performance: processing necessary to fulfil purchase transactions and service agreements
- Legitimate interests: fraud prevention, transaction monitoring, dispute prevention and operational improvements
- Legal obligation: retention of transaction records, compliance with consumer law and payment industry regulations
- Consent: where explicitly obtained, for example for marketing communications
Data Sharing
- Payment service providers: for processing transactions and fraud screening
- Shipping and logistics partners: for fulfilling delivery of orders
- IT and infrastructure providers: for operating our systems securely
- Legal, compliance and regulatory authorities: where required by law or to defend legal claims
We do not sell personal data to third parties. We do not share personal data with third parties for their own marketing purposes.
Data Retention
Transaction and order records are retained for a minimum of six years in accordance with UK tax and commercial law requirements. Support and complaint records are retained for a minimum of three years.
Your Rights
Under UK GDPR and EU GDPR, you have the right to access, correct, delete, restrict, port and object to processing of your personal data. Contact legal@eksc.co.uk to exercise any of these rights. We respond within one month.
Cookies
This website uses essential cookies for functionality and analytics cookies to understand how visitors use the site. By continuing to use this website, you consent to the use of essential cookies.
Contact and Complaints
For data protection enquiries: legal@eksc.co.uk or EKSC LTD, 4th Floor, 205 Regent Street, London W1B 4HB.
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.