This Privacy Policy explains how Universal Nexus LLC, doing business as Tendora Shop ("Tendora," "we," "us," or "our"), collects, uses, stores, shares, and protects personal information when you visit, use, or make a purchase through tendorashop.shop(the "Site"), or otherwise communicate with us.
This Privacy Policy applies to personal information collected through our website, customer service communications, orders, and other interactions with Tendora shop.
We process personal information in accordance with applicable UK data protection and privacy laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR), where applicable.
1. Store Hosting and Shopify
Our online store is hosted and powered by Shopify, which provides the e-commerce platform used to operate our online store, process orders, facilitate checkout, and provide related services.
Shopify and other service providers may process personal information on our behalf or as independent controllers for certain services.
Information processed through Shopify may include customer contact information, order information, payment-related information, device information, and other information necessary to operate the store.
For more information about Shopify's handling of personal information, please review Shopify's applicable privacy documentation.
2. Information We Collect
We may collect personal information directly from you, automatically through your use of the Site, and from third-party service providers.
Information You Provide Directly
Depending on how you interact with us, we may collect:
- Contact information: Full name, email address, telephone number, billing address, and shipping address.
- Order information: Products purchased, order number, transaction information, delivery information, returns, refunds, and related order details.
- Customer service information: Messages, enquiries, photographs, attachments, reviews, and other information you provide when communicating with us.
- Account information: Information associated with your customer account, where applicable.
- Marketing preferences: Your preferences regarding promotional communications.
We do not normally store complete payment card numbers on our own servers. Payment information is processed through our payment processors and relevant third-party payment providers.
Information Collected Automatically
When you visit or use our Site, certain information may be collected automatically, including:
- IP address;
- Browser type and version;
- Device type;
- Operating system;
- Approximate location derived from technical information;
- Pages visited;
- Referring websites;
- Time spent on the Site;
- Interactions with the Site;
- Shopping-cart information; and
- Other technical information necessary to operate and secure the Site.
3. Cookies and Similar Technologies
We use cookies and similar technologies to operate our website and provide certain features.
These technologies may include:
- Essential cookies;
- Functional cookies;
- Analytics cookies;
- Advertising and marketing cookies;
- Pixels;
- Tags; and
- Similar tracking technologies.
Some cookies are necessary for the Site to function properly, such as cookies used for shopping-cart functionality, checkout, security, and other essential services.
Where required by applicable law, we will obtain your consent before placing or accessing non-essential cookies or similar technologies on your device.
You can manage your cookie preferences through our cookie consent mechanism where available. You may also control certain cookies through your browser settings.
Under UK rules, organization generally need to tell users what cookies or similar technologies are used, explain their purposes, and obtain consent where required.
For more information, please see our Cookie Policy.
4. How We Use Your Personal Information
We use personal information for purposes including:
Processing and fulfilling orders
We use your information to:
- Process and confirm orders;
- Process payments;
- Arrange delivery;
- Provide order updates;
- Process returns and refunds;
- Provide customer support; and
- Maintain transaction records.
Operating and improving our Site
We may use information to:
- Operate and maintain the Site;
- Improve website functionality;
- Understand how customers use our Site;
- Troubleshoot technical issues;
- Improve products and services; and
- Maintain internal business records.
Fraud prevention and security
We may process information to:
- Detect and prevent fraudulent transactions;
- Protect our customers and business;
- Detect unauthorized activity;
- Maintain website security;
- Investigate suspected misuse; and
- Protect our systems and infrastructure.
Marketing
Where permitted by applicable law, we may send you promotional emails, newsletters, offers, and other marketing communications.
Where consent is required, we will obtain your consent before sending the relevant marketing communications.
You can unsubscribe from marketing emails at any time by using the unsubscribe link included in our communications.
UK electronic marketing and tracking activities can be subject to PECR in addition to UK GDPR requirements.
Legal and regulatory purposes
We may process personal information when necessary to:
- Comply with legal obligations;
- Respond to lawful requests from authorities;
- Maintain tax and accounting records;
- Establish, exercise, or defend legal claims;
- Enforce our agreements and policies; or
- Protect our legal rights and the rights of others.
5. Legal Bases for Processing
Where the UK GDPR applies, we process personal information using one or more lawful bases, depending on the circumstances.
These may include:
Contract
We may process information when necessary to perform a contract with you, such as processing and delivering an order you have placed.
Legal obligation
We may process information where necessary to comply with a legal or regulatory obligation.
Legitimate interests
We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
Examples may include website security, fraud prevention, business administration, and improving our services.
Consent
Where required by law, we will request your consent before processing personal information for particular purposes, such as certain marketing or non-essential cookies.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
6. Sharing Your Personal Information
We do not sell your personal information for monetary compensation.
We may share personal information with trusted third parties where necessary to operate our business and provide services to you.
These may include:
Shopify
Shopify provides our e-commerce platform, including services relating to our online store, checkout, orders, and related functionality.
Payment providers
Payment processors may process payment and transaction information to complete purchases and prevent fraud.
Delivery and fulfilment providers
We may provide your name, delivery address, telephone number, and other necessary information to carriers, fulfilment providers, and logistics partners so that your order can be delivered.
Technology and service providers
We may use third-party providers for services such as:
- Website hosting;
- Analytics;
- Customer support;
- Email delivery;
- Fraud prevention;
- IT and security;
- Marketing;
- Order management; and
- Business administration.
Legal and regulatory authorities
We may disclose information where required by law or where reasonably necessary to:
- Comply with legal obligations;
- Respond to lawful requests;
- Protect our rights or property;
- Prevent fraud or illegal activity; or
- Protect the safety of our customers or others.
Business transfers
If our business is sold, reorganized, merged, acquired, or transferred, personal information may be transferred as part of that transaction, subject to applicable law.
7. International Transfers
Some of our service providers may operate outside the United Kingdom.
Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection law.
Depending on the destination and circumstances, transfers may rely on:
- UK adequacy regulations;
- Appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or UK Addendum; or
- Another lawful transfer mechanism permitted under applicable UK data protection law.
The UK GDPR contains specific requirements for restricted transfers of personal information outside the UK.
Where required, we will take appropriate steps to ensure that personal information receives an appropriate level of protection after transfer.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
The length of time we retain information depends on factors including:
- The purpose for which it was collected;
- Whether we have an ongoing relationship with you;
- Legal and regulatory requirements;
- Tax and accounting obligations;
- Dispute resolution;
- Fraud prevention; and
- The establishment, exercise, or defense of legal claims.
When personal information is no longer required, we will take reasonable steps to delete it or securely anonymize it, subject to applicable legal requirements.
9. Data Security
We take reasonable technical and organizational measures designed to protect personal information against:
- Unauthorized access;
- Accidental loss;
- Destruction;
- Misuse;
- Alteration; and
- Unauthorized disclosure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
If we become aware of a personal data breach that requires notification under applicable law, we will take the appropriate steps required by law.
10. Your UK Privacy Rights
Depending on the circumstances and applicable law, you may have rights regarding your personal information.
These may include:
Right of access
You may request a copy of personal information we hold about you.
Right to rectification
You may request that inaccurate or incomplete personal information be corrected.
Right to erasure
You may request deletion of your personal information in certain circumstances.
Right to restrict processing
You may request that we restrict the processing of your personal information in certain circumstances.
Right to data portability
In certain circumstances, you may request personal information you provided to us in a structured, commonly used, and machine-readable format.
Right to object
You may have the right to object to certain processing of your personal information, including certain processing based on legitimate interests.
You may also object to direct marketing.
Right to withdraw consent
Where we rely on consent, you may withdraw your consent at any time.
These rights are not absolute and may be subject to legal exceptions.
11. How to Exercise Your Privacy Rights
To exercise a privacy right or ask a question about how we process your personal information, contact us at:
You may also contact us by phone:
+44 161 485 2468
We may need to request additional information to verify your identity before completing certain requests. This is intended to help protect your personal information from unauthorized access.
We will normally respond to valid requests within the period required by applicable data protection law.
12. Right to Complain to the ICO
If you believe that we have not handled your personal information appropriately, we encourage you to contact us first so that we can try to resolve your concern.
You also have the right to complain to the UK's Information Commissioner's Office (ICO) if you believe your personal information has been handled in breach of applicable data protection law.
Information Commissioner's Office (ICO)
13. Children's Privacy
Our Site is intended for a general audience and is not specifically directed toward children.
We do not knowingly collect personal information from children where doing so would be unlawful.
If you believe that a child has provided personal information to us improperly, please contact us at:
We will take appropriate steps to investigate and, where appropriate, delete the information.
14. Third-Party Websites and Services
Our Site may contain links to websites, applications, or services operated by third parties.
We are not responsible for the privacy practices, security, or content of third-party websites or services.
We recommend reviewing the privacy policies of any third-party websites or services before providing them with personal information.
15. Do Not Track and Browser Signals
Some browsers offer "Do Not Track" or similar privacy signals.
Our Site may not respond to all such signals unless required by applicable law or supported by the technologies we use.
Where applicable, we provide cookie and privacy controls through our Site's consent and preference mechanisms.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:
- Our business practices;
- Our website;
- Technology;
- Third-party services;
- Applicable laws and regulations; or
- How we process personal information.
When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy.
We encourage you to review this Privacy Policy periodically.
17. Contact Information
Store Name: Tendora Shop
Legal Business Name: Universal Nexus LLC
Website: tendorashop.shop
Customer Support Email: support@tendorashop.shop
Customer Support Phone: +44 161 485 2468
Customer Support Hours: Monday–Friday, 9:00 AM–5:00 PM UK time, excluding UK public holidays.
Corporate Address:
65 Granby Row
Manchester M1 7AP
United Kingdom