Legal
Privacy Policy
Last updated: [DATE]. This policy explains what personal data we hold, why we hold it, and how you can take control of it.
1. Who we are
[LEGAL NAME LTD] (“we”, “us”, “our”) operates [WEBSITE], trading as [BRAND]. We are the data controller for the personal data described here.
- Registered address: [LEGAL ADDRESS]
- Company number: [COMPANY NUMBER]
- Privacy contact: [EMAIL]
- Telephone: [PHONE]
- ICO registration number: [ICO NUMBER]
2. What data we collect
- Identity and contact data: name, billing and delivery address, email address, phone number.
- Order and payment data: the machines you ordered, your order history and payment confirmation. Card details are handled by our payment provider — we never store full card numbers.
- Technical data: IP address, device and browser type, and cookie data.
- Communications: messages you send us by email, contact form or chat, including service and spare-part enquiries.
- Marketing preferences: whether you have opted in to our emails.
3. Why we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Processing and delivering your order, managing your account | Performance of a contract |
| Answering enquiries, handling warranty and spare-part requests | Legitimate interests / contract |
| Sending marketing emails | Consent, or soft opt-in for existing customers |
| Fraud prevention and site security | Legitimate interests |
| Analytics to improve the website | Consent, given through cookies |
| Meeting tax and other legal obligations | Legal obligation |
5. International transfers
Where a provider stores data outside the UK, we make sure it is protected by an adequacy decision or by appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
- Order and transaction records: six years, to meet UK tax and accounting rules.
- Account data: while your account is open, then [X] months after you close it.
- Marketing data: until you unsubscribe.
- Support messages: [X] months after the enquiry is closed.
7. Your rights
Under UK GDPR you can ask us to give you a copy of your data, correct it, erase it, restrict or stop our use of it, or send it to another provider. Where we rely on consent, you can withdraw it at any time.
To use any of these rights, write to [EMAIL]. We reply within one month and may ask you to confirm your identity first.
8. Complaints
If you are unhappy with how we handle your data, tell us first at [EMAIL] and we will investigate. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
10. Changes to this policy
We update this policy when our practices change. The date at the top shows the current version, and we will announce material changes on this page and by email where we have your address.