Privacy notice.
What we collect, why we collect it, and how to make us delete it. In plain English.
Who we are. Fogaway is operated by Robolock Ltd, United Kingdom. For anything on this page, write to admin@robolock.store.
What we collect
When you just visit
- Pages you open, how far you scroll, what you tap, and how long you stay.
- Your IP address, and the country and city we derive from it. We store the IP with the visit record.
- Your browser, device type, screen size and language.
- Where you arrived from: the referring site, and any campaign tags in the link, for example utm_source or an ad click id such as fbclid, gclid or msclkid.
- A random visitor id and session id we generate. They are not your name and we cannot turn them into your name on their own.
When you buy
- Your name, email address, phone number and delivery address, because we cannot ship a parcel without them.
- What you ordered, the amount, and the order status.
- Not your card details. Card data goes straight from your browser to Stripe. It never touches our servers and we never see or store it.
When you write to us
- Your name, email, the subject and the message, so we can answer and keep a record of the conversation.
Why we are allowed to
- To perform our contract with you: taking payment, shipping the order, handling returns and warranty.
- Legitimate interests: understanding how the site is used, keeping it working, preventing fraud, and measuring which advertising actually works. You can object to this at any time.
- Legal obligation: keeping sales and tax records for as long as the law requires.
- Consent: where you gave it, for example by ticking to receive email from us. You can withdraw it whenever you like.
Who else processes your data
- Stripe — payments and fraud checks.
- Google Firebase — hosting, database and file storage.
- Resend — sending order, shipping and support email.
- Meta, Google Ads and Microsoft Advertising — advertising measurement. This includes server-side conversion reporting: when you buy, we send Meta a record of the purchase, matched using hashed identifiers.
- Microsoft Clarity — anonymous session replay and heatmaps, so we can see where the site confuses people.
- Tawk.to — the live chat widget.
- DHL and FedEx — delivery. They get the address, not your payment data.
- ipwho.is — turning an IP address into a country, so we can show you the right currency.
Some of these are outside the UK and the EEA. Where that is the case, transfers rely on the provider's standard contractual clauses or an adequacy decision.
Cookies and similar storage
We use a small amount of browser storage to remember your basket, the currency your region resolves to, which version of a page you were shown in an A/B test, and whether you already dismissed an offer. Advertising and analytics providers listed above set their own cookies. You can clear all of it in your browser settings, and blocking it does not stop you buying.
How long we keep it
- Order records: as long as tax and accounting law requires, currently at least six years.
- Support messages: up to three years.
- Analytics events: up to 26 months.
Your rights
You can ask us for a copy of what we hold, ask us to correct it, ask us to delete it, ask us to stop using it for advertising measurement, or complain to a regulator. In the UK that is the Information Commissioner's Office. Write to admin@robolock.store and we will answer within one month.
Children
This is a security product sold to adults. We do not knowingly collect data from anyone under 16.