1. WHAT DATA WE COLLECT
WHEN YOU USE OUR CONTACT FORM
We collect your name, email address, and the content of your message. This is used solely to respond to your enquiry.
WHEN YOU MAKE A PURCHASE
We collect your name, billing address, email address, and payment details. Payment card information is processed securely by our payment provider and is never stored on our servers.
WHEN YOU VISIT OUR WEBSITE
If you accept analytics cookies, we collect anonymised data about how you use our website (pages visited, time spent, general location). This is processed by Google Analytics. We do not collect data that identifies you personally through analytics.
2. HOW WE USE YOUR DATA
- Contact form submissions — to respond to your message. Legal basis: legitimate interests.
- Order processing — to fulfil purchases, process payments and handle refunds. Legal basis: contract performance.
- Website analytics — to understand how the site is used and improve it. Legal basis: consent (you can withdraw this at any time via Cookie Settings).
3. COOKIES
We use the following categories of cookies:
- Functional — essential for the website to work (session cookies, shopping cart, security). These cannot be disabled.
- Analytics — Google Analytics cookies that help us understand site usage. Only set with your consent.
- Marketing — used for personalised advertising. We do not currently run advertising campaigns, but this option is available for future use. Only set with your consent.
You can change your cookie preferences at any time using the Cookie Settings link in the footer.
4. GOOGLE ANALYTICS
If you accept analytics cookies, data is sent to Google LLC (USA). Google acts as a data processor on our behalf under a Data Processing Agreement. We have enabled IP anonymisation, meaning your full IP address is never stored. Google is certified under the EU-US Data Privacy Framework.
You can opt out of Google Analytics entirely by installing the Google Analytics Opt-out Browser Add-on.
5. WHO WE SHARE YOUR DATA WITH
We do not sell or rent your personal data. We may share data with:
- Payment processors — to handle transactions securely.
- Google LLC — for analytics (if you have consented).
- Email service providers — to deliver transactional emails (order confirmations, enquiry responses).
All third parties are required to handle your data in accordance with UK GDPR.
6. HOW LONG WE KEEP YOUR DATA
- Contact form messages — retained for up to 12 months, then deleted.
- Order records — retained for 7 years as required by HMRC regulations.
- Analytics data — retained by Google for up to 14 months.
7. YOUR RIGHTS
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data where there is no lawful reason to retain it.
- Restriction — ask us to limit how we use your data.
- Portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on legitimate interests.
- Withdraw consent — where processing is based on consent (e.g. analytics cookies), you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at in**@****************es.com. We will respond within 30 days.
8. COMPLAINTS
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK’s supervisory authority:
Information Commissioner’s Office (ICO)
ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
9. CHANGES TO THIS POLICY
We may update this policy from time to time. The “Last updated” date at the top of this page will always reflect when it was last revised. Significant changes will be noted on the website.