Purpose of this privacy notice

This privacy notice aims to give you information on how Tanna's Limited t/a Gotraka.com collects and processes your personal data through your use of this website and our services, including any data you may provide through this website when you sign up to an account with us, subscribe to our newsletter, or purchase products or services we provide.

This website is not intended for children and we do not knowingly collect data relating to children.

It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we collect or process personal data, so that you are fully aware of how and why we use your data. This privacy notice supplements other notices and is not intended to override them.

Controller

Tanna's Limited is the controller and is responsible for your personal data (collectively referred to as 'Gotraka.com', 'we', 'us' or 'our' in this privacy notice).

Contact details

Our full details are:

Unit 13-14 Cygnus Business Centre
Dalmeyer Road
London
NW10 2XA
020 8208 1234
help@gotraka.com

You have the right to make a complaint to the ICO at any time.

Changes to this privacy notice and your duty to inform us of changes

It is important that the personal data we hold about you is accurate and current.

Please keep us informed if your personal data changes during your relationship with us.

Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control those third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

1. The data we collect about you

Personal data, or personal information, means information about an individual from which that person can be identified. It does not include data where the identity has been removed, which is anonymous data.

We may collect, use, store and transfer different kinds of personal data about you, including the following:

·         Identity Data includes name, title, date of birth, gender and other information you provide.

·         Financial Data includes bank account details and payment card details.

·         Contact Data includes billing address, delivery address, email address and telephone numbers.

·         Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.

·         Technical Data includes internet protocol address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, platform and other technology on the devices you use to access this website.

·         Profile Data includes your username and password, purchases or orders made by you, preferences and feedback.

·         Usage Data includes information about how you use our website, products and services.

·         Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.

We also collect and use Aggregated Data, such as statistical or demographic data, for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law where it does not directly or indirectly reveal your identity.

If we combine or connect Aggregated Data with personal data so that it can directly or indirectly identify you, we treat the combined data as personal data and use it in accordance with this privacy notice.

If you fail to provide personal data

Where we need to collect personal data by law, or under the terms of a contract with you, and you fail to provide that data when requested, we may not be able to perform the contract or provide the relevant goods or services. If this occurs, we will notify you at the time.

2. How is your personal data collected?

We use different methods to collect data from and about you, including through the following channels:

·         Direct interactions. You may give us Identity, Financial and Contact Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes data you provide when you apply for our products or services or create an account on our website.

·         Third parties or publicly available sources. We may receive personal data about you from third parties and public sources, such as search information providers or data brokers and aggregators.

Marketplace orders (Amazon, eBay) and our order-management system

When you buy from us through a marketplace such as Amazon or eBay, the marketplace passes us the details we need to fulfil your order: your name, delivery address, contact telephone number, an email address (usually a marketplace-generated alias), the items ordered and the order value. We also receive information about returns and refunds you request through the marketplace.

We use this information only to pick, pack and dispatch your order, produce shipping labels and packing slips, handle delivery queries, process returns, replacements and warranty claims, and meet our legal, tax and accounting obligations. We do not use marketplace order data for marketing, and we do not add marketplace customers to our mailing lists.

This data is held in our internal order-management system, hosted on servers located in the United Kingdom and the European Economic Area, encrypted in transit and at rest. Access is limited to named staff whose role requires it, including warehouse, customer service and finance staff. Each signing-in user has an individual account, and access to buyer details is logged.

We share delivery details only with the carrier delivering your parcel, currently Royal Mail, APC Overnight and DHL, and where an item is dispatched directly from a supplier, with that supplier for the sole purpose of delivering your order. We do not sell or otherwise share marketplace order data.

We do not sell or otherwise share marketplace order data. Personal details on Amazon orders (name, delivery address, telephone number and email address) are permanently deleted no later than 30 days after delivery. Personal details on other marketplace orders are deleted once they are no longer needed to fulfil the order and handle any return, in line with that marketplace's data-protection requirements. After deletion we keep only non-personal transaction records (order number, items, amounts and VAT) for legal, tax and accounting purposes.

3. How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we use personal data where we need to perform a contract with you, where it is necessary for our legitimate interests and your rights do not override those interests, or where we need to comply with a legal or regulatory obligation.

You have the right to withdraw consent to marketing at any time by contacting us.

Purposes for which we will use your personal data

We use personal information held about you to perform a contract with you and/or where necessary for our legitimate interests, including to:

·         register you as a new client;

·         process and deliver your order, including managing payments, fees and charges;

·         collect and obtain feedback about your account use or your use of our products and services;

·         administer and protect our business and this website, including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data; and

·         use data analytics to improve our website, products and services, marketing, client relationships and experiences.

We may process personal data for more than one lawful ground depending on the specific purpose. Please contact us if you need details about the specific legal ground on which we rely.

4. Marketing

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. You can contact us to make decisions about your personal data use and communication preferences.

Third-party marketing

We do not share your personal data with any company outside our group of companies for their marketing purposes.

Opting out

You can ask us or our group of companies to stop sending you marketing messages at any time by following the opt-out links in a marketing message or by contacting us.

Change of purpose

We will only use your personal data for the purposes for which we collected it unless we reasonably consider that another use is compatible with the original purpose. If you would like an explanation of how the new purpose is compatible, please contact us.

If we need to use personal data for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so. We may process personal data without your knowledge or consent where this is required or permitted by law.

5. Disclosures of your personal data

We require third parties that process personal data for us to respect its security and treat it in accordance with the law. We do not allow third-party service providers to use personal data for their own purposes and only permit them to process it for specified purposes and in accordance with our instructions.

6. International transfers

Personal data may be processed in the United Kingdom and the European Economic Area. Where personal data is transferred to another country, we will use an appropriate lawful transfer mechanism and safeguards required by applicable data-protection law.

Please contact us if you want further information about safeguards used for international transfers of your personal data.

7. Data security

We have put in place appropriate security measures to prevent personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to employees, agents, contractors and other third parties who have a business need to know. They process personal data on our instructions and are subject to duties of confidentiality.

We have procedures to deal with suspected personal data breaches and will notify you and any applicable regulator where we are legally required to do so.

8. Data retention

How long will you use my personal data for?

We retain personal data only for as long as necessary to fulfil the purposes for which we collected it, including satisfying legal, accounting and reporting requirements.

When determining an appropriate retention period, we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes of processing, whether those purposes can be achieved through other means and applicable legal requirements.

By law we may need to keep basic information about customers for six years after they cease being customers for tax purposes. In some circumstances you may ask us to delete your data. We may also anonymise personal data for research or statistical purposes and use that anonymous information indefinitely.

9. Your legal rights

Under certain circumstances, you have rights under data-protection laws in relation to your personal data, including the right to request access to, correction of or erasure of your personal data, to object to processing, and to withdraw consent where consent is the lawful basis for processing.

If you wish to exercise any of these rights, please contact us using the contact details in this policy.

No fee usually required

You will not usually have to pay a fee to access your personal data or exercise your other rights. We may charge a reasonable fee, or refuse to comply, if a request is clearly unfounded, repetitive or excessive.

What we may need from you

We may request specific information to help us confirm your identity and ensure that personal data is not disclosed to anyone who has no right to receive it. We may also ask for further information about your request to help us respond efficiently.

Time limit to respond

We try to respond to legitimate requests within one month. It may take longer if a request is particularly complex or if you have made a number of requests. In that case, we will notify you and keep you updated.

If you would like to make a complaint, please contact us by email or post using the details above. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data-protection authority, including the ICO in the United Kingdom.

10. SMS

By consenting to Gotraka SMS marketing at checkout, through promotional activity, when initiating a purchase, or through our subscription tools, you agree to receive recurring text notifications relating to your order, marketing offers and transactional texts, including requests for reviews. Message frequency varies. Consent is not a condition of purchase.

To unsubscribe from text marketing messages and notifications, reply STOP to a mobile message from us or use the unsubscribe link provided in our messages. Alternative methods of opting out may not be recognised by the messaging service.

We do not charge for the SMS service, but your wireless provider may apply message and data charges. For questions, contact help@gotraka.com.

We may modify a telephone number or short code used to operate the service. Where this occurs, we will notify you. Messages sent to a changed number or short code may not be received.

Last updated: 8 September 2026