Privacy Policy
Last updated: 28 March 2026
1. Who We Are
PRIME GROUP SAC LTD (Company No. 17108969), registered in England and Wales, is the data controller responsible for your personal data. Registered office: 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE. Contact: contact@primegroupsac.com
2. What Data We Collect
We may collect the following personal data:
- Identity data: full name
- Contact data: email address, billing address
- Transaction data: details of products purchased, payment method (we do not store full card details — these are handled by our payment processor)
- Technical data: IP address, browser type, device information, pages visited
- Usage data: how you interact with our website
3. How We Use Your Data
We use your data for the following purposes:
- To process and fulfil your order
- To send you your purchased digital product
- To send transactional emails (order confirmation, delivery, support)
- To send marketing communications (only with your explicit consent, and you may unsubscribe at any time)
- To improve our website, products, and services
- To comply with legal and regulatory obligations
4. Legal Basis for Processing (GDPR)
We process your data under the following lawful bases:
- Contractual necessity: to fulfil your purchase
- Consent: for marketing communications
- Legitimate interest: to improve our services and prevent fraud
- Legal obligation: to comply with tax and accounting requirements
5. Data Sharing
We do not sell your personal data. We may share data with:
- Payment processors (e.g. Stripe) to handle transactions securely
- Email service providers to deliver transactional and marketing emails
- Analytics providers to understand website usage (anonymised where possible)
- Legal authorities if required by law
6. Cookies
We use essential cookies to ensure the website functions correctly. We may also use analytics cookies (e.g. Google Analytics) to understand how visitors use our site. You can manage cookie preferences through your browser settings.
7. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, typically for 6 years after your last transaction to comply with UK tax and accounting regulations.
8. Your Rights
Under the UK GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise any of these rights, contact us at contact@primegroupsac.com.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All payment transactions are encrypted using SSL technology.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
11. Contact Us
For any privacy-related queries, contact us at contact@primegroupsac.com or visit our Contact page.