1. Scope
This policy explains what personal data we hold about you when you browse , place an order, contact our support team or ask us about a product. It applies to the site, to email and telephone correspondence, and to the records we keep after a sale is complete.
We are the controller of that data, which means we decide why it is held and how it is used. If you have a question about anything below, write to us before you order rather than after.
2. Data we collect
- Order data: name, delivery and billing address, email address, telephone number, the items ordered and the amount paid.
- Payment data: the outcome of the transaction, the payment method type and the last four digits of the card. Full card numbers are handled by our payment provider and never reach our systems.
- Correspondence: messages you send us about sizing, faults, returns or delivery, including any photographs you attach.
- Technical data: IP address, browser type, device type, referring page and the pages you view, collected through server logs and, where you allow it, analytics cookies.
- Preferences: the display currency you choose, stored in your browser and not sent to us.
We do not ask for special category data. Please do not send health information, identity documents or bank credentials in support messages.
3. Why we use it and on what basis
Performance of a contract
Order data and payment outcomes are used to take payment, arrange pallet or parcel delivery, confirm dispatch, answer questions about your order and handle cancellations, returns and warranty claims.
Legal obligation
Transaction records are retained for tax and accounting purposes, and product safety records are kept where equipment is subject to a recall or a safety notice.
Legitimate interests
We use technical data to keep the site secure, prevent fraudulent orders, diagnose faults and understand which parts of the catalogue are being used. Our interest is in running a functioning shop; we balance it against your rights and use aggregated data wherever aggregated data will do.
Consent
Analytics and any marketing email rely on your consent. You can withdraw it at any time, by using the unsubscribe link or by writing to us, without affecting anything done before you withdrew it.
4. Who we share it with
We share the minimum necessary with the parties who help us fulfil an order: payment providers, pallet and parcel carriers, our warehouse operator, our email and hosting providers, and our accountants. Carriers receive your name, address and telephone number so they can arrange the delivery slot. Each processor acts on our written instructions and cannot use your data for their own purposes.
We may also disclose data where the law requires it, or to establish or defend a legal claim. We do not sell personal data and we do not share it with advertisers.
5. Transfers outside the UK
Most of our processors operate in the UK or the European Economic Area. Where data is transferred elsewhere, the transfer is covered by UK adequacy regulations or by the International Data Transfer Agreement or Addendum, together with any additional safeguards the transfer requires. You can ask us for a copy of the mechanism used for a particular provider.
6. How long we keep it
- Order and transaction records: six years from the end of the financial year in which the order was placed.
- Support correspondence: two years from the last message in the thread, or longer if it relates to an open warranty claim.
- Server and security logs: twelve months.
- Marketing consent records: until consent is withdrawn, plus two years to evidence that the withdrawal was actioned.
When a retention period ends, the data is deleted or anonymised so that it can no longer be linked to you.
7. Cookies
Essential cookies and local storage keep the site working: they hold your basket and remember whether you asked to see prices in euros or pounds. These do not require consent. Analytics cookies are set only if you accept them, and can be cleared at any time in your browser settings. Blocking essential storage will stop the currency choice from carrying between pages.
8. Your rights
Under the UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to another provider in a portable format. You can object to processing based on legitimate interests, and you can withdraw consent where consent is the basis we rely on.
Write to and we will respond within one month. If a request is complex we may extend that by a further two months and will tell you why. There is no charge unless a request is manifestly unfounded or repetitive.
9. Security
The site is served over TLS. Access to order records is limited to staff who need it, protected by individual accounts and multi-factor authentication, and logged. Backups are encrypted at rest. No system is perfect, so if a breach occurs that is likely to result in a risk to your rights we will notify the Information Commissioner's Office within 72 hours and tell you directly where the risk is high.
10. Children
The site is intended for adults. We do not knowingly sell to or collect data from anyone under 18. If you believe a child has given us personal data, contact us and we will remove it.
11. Complaints
Please raise any concern with us first at . You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk.
12. Changes
We update this policy when our processing changes or when guidance moves. The current version always sits at this address; material changes are announced on the site and, where we hold your address for that purpose, by email.