Privacy policy

Privacy Policy

Last Updated: November 2026

At ThermaThrow ("we," "our," or "us"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make a purchase, or communicate with us.

This policy complies with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We collect personal information that you provide to us directly, as well as data collected automatically when you use our website.

A. Information You Provide to Us Directly

  • Contact Details: Name, email address, postal address, and phone number.

  • Order & Payment Information: Billing address, shipping address, and order details. (Note: Payment transactions are processed securely through third-party payment processors. We do not store full payment card details on our servers.)

  • Customer Support Data: Correspondence and records when you contact us via ThermaThrow@outlook.com.

B. Information Collected Automatically

  • Device & Usage Data: IP address, browser type, operating system, pages viewed, time spent on pages, and referring website addresses.

  • Cookies & Tracking Technologies: We use cookies to enable core website functionality (such as shopping cart persistence) and to collect analytics on website performance.

2. How We Use Your Information

We use your personal data to fulfill our contract with you, comply with legal obligations, or pursue our legitimate business interests:

  • Order Fulfillment: Processing transactions, delivering products, sending order confirmations, and providing tracking updates.

  • Customer Support: Responding to inquiries, processing returns, cancellations, and statutory rights claims under UK consumer law.

  • Business Operations: Improving website functionality, monitoring site security, and preventing fraudulent transactions.

  • Legal Compliance: Complying with tax laws, accounting obligations, and regulatory requirements.

3. Lawful Bases for Processing (UK GDPR)

We process your personal data under the following legal grounds:

  1. Performance of a Contract: Processing necessary to complete your purchases and fulfill your orders.

  2. Legal Obligation: Compliance with statutory obligations (e.g., maintaining financial records for tax authorities).

  3. Legitimate Interests: Operations necessary for fraud prevention, network security, and improving our products/services.

  4. Consent: Where you have explicitly opted in (e.g., subscribing to marketing communications). You can withdraw consent at any time.

4. Sharing Your Information

We do not sell, rent, or trade your personal data. We share your information only with trusted third parties necessary to run our business:

  • Delivery & Logistics Partners: Courier and postal services (e.g., Royal Mail, DPD) to ship your orders.

  • Payment Service Providers: Secure payment gateways that process your financial transactions.

  • IT & Hosting Providers: Web hosting, database management, and technical infrastructure services.

  • Legal & Regulatory Authorities: Law enforcement or regulatory bodies if required by law or to protect our rights.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, including satisfying legal, accounting, or tax reporting requirements. Generally, order and financial records are retained for 6 years following the transaction date to comply with UK tax law.

6. International Data Transfers

If any of our third-party service providers process data outside the UK or the European Economic Area (EEA), we ensure adequate safeguards are in place (such as Standard Contractual Clauses or UK International Data Transfer Agreements) to keep your data protected to UK GDPR standards.

7. Your Data Protection Rights

Under UK data protection law, you have the following rights:

  • Right of Access: Request a copy of the personal data we hold about you.

  • Right to Rectification: Request correction of inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data where there is no legal reason for us to keep it.

  • Right to Restrict Processing: Request that we suspend processing your data under certain conditions.

  • Right to Data Portability: Request transfer of your data to another organization.

  • Right to Object: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, please email us at ThermaThrow@outlook.com.

If you are unsatisfied with our response, you have the right to lodge a complaint with the UK data protection supervisory authority:

8. Cookies

Cookies are small text files placed on your device. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. Note that disabling essential cookies may affect website functionality.

9. Contact Us

For any privacy-related questions, data requests, or concerns, please reach out to us:

  • Email: ThermaThrow@outlook.com