Privacy Policy & GDPR Compliance

1. Who We Are

Contact for privacy matters:
See section 13, Complaints, for our email address.

2. What Personal Data We Collect

• Full name
• Email address
• Telephone number(s)
• Billing and delivery address(es)
• Order history and invoices
• Account login details, if you register
• IP address and basic browser/device information

We do not store or process payment card details. Payments are handled securely by our payment providers, such as PayPal.

3. How We Collect Your Data

• When you create an account or place an order
• When you contact us for support or quotations
• Through cookies and similar technologies, as explained in section 8
• From delivery partners when tracking your order

4. Legal Basis for Processing

• Contract — to fulfil orders and provide support
• Legal obligation — to retain invoices and records for tax purposes
• Legitimate interests — to prevent fraud, ensure security, and improve services
• Consent — where required, for example for cookies or optional communications

5. How We Use Your Data

• Process and deliver orders
• Send invoices, updates, and tracking details
• Provide support and respond to enquiries
• Meet legal and tax obligations
• Improve our website and services
• Prevent fraud and protect our systems

We never sell, rent, or trade your data.

6. Sharing Your Data

We only share data when necessary, for example with:

• Payment providers, such as PayPal
• Couriers, for delivery updates
• IT and security service providers
• Law enforcement where required

7. Data Retention

• Invoices and order data are kept for 7 years where legally required
• Customer accounts are kept while active, then securely deleted
• Website logs are stored for less than 14 days, then deleted

8. Cookies & Tracking

We use cookies to improve site performance and security:

• Essential cookies — required for checkout and login
• Analytics cookies — used only with your consent
• YouTube cookies — used only with your consent
• Marketing cookies — we do not use marketing cookies

When you first visit our website, you can choose which cookies to allow: essential cookies only, or all cookies. We remember your choice until you clear your browser cookies.

9. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccuracies
• Erasure — request deletion of data
• Restriction — limit processing
• Portability — receive your data in machine-readable form
• Object — object to certain processing, including marketing
• Withdraw consent — withdraw consent at any time

To exercise your rights, please contact us using the details in section 13, Complaints. Requests are free and processed within 30 days.

10. International Data Transfers

We only process and ship orders within the UK and EU. Your data is stored and processed within this region. If in future we use service providers outside the UK/EU, we will ensure appropriate safeguards, such as adequacy decisions or Standard Contractual Clauses (SCCs), are in place.

11. Security Measures

• PCI DSS-compliant payment systems
• SSL/TLS encryption sitewide
• Firewalls and intrusion detection
• Restricted staff access under confidentiality agreements

12. Updates

We may update this policy from time to time. Changes will be posted here with a new effective date.

13. Complaints

If you have concerns, please contact us first by sending a message to support, followed by @ and then our website domain. We deliberately obscure our email address here to reduce bot scraping and malware.

You may also complain to the UK ICO: ico.org.uk.