Overview
This Privacy Policy explains how we collect, use, and process your personal data when you use our online store. We are committed to protecting your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
The data controller is SKMG GROUP LIMITED, operator of this online store.
- Address: Studio No. 11, 138 Marylebone Road, London, England, NW1 5PH
- Email: info@img-market.com
- Phone: +447936765130
Data We Collect
We may collect the following categories of personal data:
- Email address
- Name and billing address (provided at checkout)
- Order and transaction details
- IP address and device data
- Cookies and session-related technical data
We do not collect or store any sensitive personal data (special categories under Article 9 of the UK GDPR).
Card Data: Img-Market does not collect, store, or process your payment card details. All card payments are processed directly and securely by our payment processor, AquilaPayments (aquilapayments.io), which is PCI DSS compliant. Your card information is transmitted directly to AquilaPayments and is never stored on our servers or systems.
Purpose and Legal Basis for Processing
- Order fulfilment — based on necessity for contract performance (Article 6(1)(b))
- Legal obligations — tax and accounting compliance (Article 6(1)(c))
- Fraud prevention and support — based on legitimate interest (Article 6(1)(f))
- Marketing communications — only with your prior consent (Article 6(1)(a))
Third-Party Data Processors
We do not sell your personal data. We may share it only where necessary to operate our store:
- AquilaPayments (aquilapayments.io) — payment processing. Card data is handled exclusively by AquilaPayments; we do not receive or store card details.
- Mailchimp (The Rocket Science Group LLC) — email marketing, only if you have subscribed to our newsletter.
- Google Analytics (Google LLC) — website analytics, only with your cookie consent.
- Hostinger — web hosting and infrastructure.
- Legal and accounting advisors — only where required.
- Competent public authorities — only as required by law.
Where data is transferred outside the UK, we ensure an adequate level of protection through the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.
Data Retention
- Orders and transaction data — minimum 6 years (UK tax and accounting law)
- Contact details — until consent is withdrawn or 2 years of inactivity
- Cookies — according to their specific expiration periods (see Cookie Policy)
Your Rights Under UK GDPR
You have the following rights:
- Right to access your data
- Right to rectify inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
- Right to lodge a complaint with the ICO
To exercise any of these rights, contact us at info@img-market.com. We will respond within one calendar month.
You may also lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk | Helpline: 0303 123 1113
Data Security
We implement appropriate technical and organisational measures to ensure data security, including SSL/TLS encryption, access controls, authentication, and system monitoring. In the event of a data breach posing a risk to your rights, we will notify the ICO within 72 hours and affected individuals where required.
Cookies and Analytics
We use cookies and analytics tools to improve website performance. Analytics tools (e.g. Google Analytics) are activated only after you provide consent via the cookie banner. For more information, see our Cookie Policy.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on users.
Changes to This Policy
We may update this Privacy Policy to reflect changes in data practices or legal requirements. Updates will be published on this page with the revised date.