Privacy policy.

Last updated: [17 Sep 2025]

This Privacy Policy explains how [Company legal name] trading as [Brand name] (“we”, “us”, “our”) collects, uses, discloses and protects your personal data when you visit stechhomes.co.uk/ and purchase from us. We are the data controller for the purposes of UK data protection law.

Registered address: Rear Warehouse Unit A, Field Industrial Estate, Clover Street, Kirkby-in-Ashfield, NG17 7LH

Email: stechhomes@email.com

Phone: 07455 734005

VAT number: 486444260

1. Personal data we collect

We collect the following categories of information:

  1. Identity and contact data
    Name, email, phone number, billing and shipping address, company name (if applicable).

  2. Order and account data
    Products purchased, order history, basket contents, delivery preferences, account credentials.

  3. Payment and anti-fraud data
    Payment method, last 4 digits of card, transaction IDs, fraud-prevention signals. Full card details are handled by our payment providers and are not stored on our servers.

  4. Communications and support
    Messages sent via forms, email, chat, reviews and survey responses; recordings/notes if you call us.

  5. Device, usage and cookies
    IP address, device type, browser, pages visited, approximate location, referral source, and cookie identifiers gathered via cookies and similar technologies. See Cookies section.

  6. Marketing preferences
    Your opt-in status for email/SMS, and engagement with our campaigns.

  7. User generated content
    Photos/reviews you choose to submit or tag us in.

We may also receive information from third parties such as payment providers, analytics, advertising partners and delivery carriers to fulfil orders, prevent fraud and measure performance.

2. How we use your data and lawful bases

We process personal data only where a lawful basis applies:

• To operate our website and provide our services
Create and manage your account, process and deliver orders, provide invoices, handle returns and warranty.
Lawful basis: Contract; Legal obligation (tax/accounting).

• Payments and fraud prevention
Process payments, verify identity where needed, detect and prevent fraud or misuse.
Lawful basis: Contract; Legitimate interests.

• Customer support and communications
Respond to enquiries, service messages about your order, policy updates.
Lawful basis: Contract; Legitimate interests.

• Marketing with your consent
Send newsletters, promotions and product updates; personalise content where permitted. You can unsubscribe at any time.
Lawful basis: Consent; Legitimate interests for existing-customer soft opt-in under PECR where applicable.

• Analytics and site improvement
Measure traffic and performance, debug and improve our services.
Lawful basis: Consent for non-essential cookies/analytics; Legitimate interests for strictly necessary operations.

• Legal compliance and enforcement
Comply with tax and consumer laws; exercise or defend legal claims.
Lawful basis: Legal obligation; Legitimate interests.

We do not use your data for automated decision-making that produces legal or similarly significant effects. If we ever do (for example, certain buy-now-pay-later checks), we will inform you and explain your rights to request human review.

3. Sharing your data

We share data with trusted service providers acting under contracts that protect your information:

• Website hosting and ecommerce: Squarespace, Inc.
• Payments: Stripe, PayPal, Apple Pay, Google Pay, [Square/Clearpay/Klarna if used]
• Email/SMS marketing: [Klaviyo/Mailchimp/other]
• Analytics and advertising: [Google Analytics/Ads, Meta, Microsoft Advertising, etc.]
• Reviews and customer feedback: [Trustpilot/other]
• Delivery and fulfilment: [Royal Mail, DPD, Evri, DHL, or your carriers]
• Customer support and productivity tools: [e.g., Zendesk, Google Workspace, Microsoft 365]

We may disclose data to professional advisers, authorities or courts where required by law or to protect our rights.

We do not sell your personal data.

4. International transfers

Some providers are located outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as:
• Adequacy regulations (for example, the UK-US Data Bridge), and/or
• UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs.
Copies of relevant safeguards can be requested via the contact details above.

5. Data retention

We keep personal data only as long as necessary for the purposes set out in this policy:

• Orders, invoices and tax records: up to 6 years after the end of the financial year in which the transaction occurred.
• Customer account and support records: while your account is active and up to 24 months after last activity.
• Marketing data: until you withdraw consent or we determine inactivity for 24 months.
• Website logs and analytics: typically 14–26 months, depending on provider settings.
• Warranty/returns: for the duration of the warranty and reasonable period thereafter.

6. Your rights

Under UK data protection law, you have the right to:

• Access a copy of your personal data
• Rectify inaccurate or incomplete data
• Erase your data in certain circumstances
• Restrict or object to processing, including a right to object to direct marketing at any time
• Data portability for information you provided to us
• Withdraw consent where processing is based on consent
• Lodge a complaint with the UK Information Commissioner’s Office (ICO): ico.org.uk

To exercise your rights, contact us using the details above. We may need to verify your identity.

7. Cookies and similar technologies

We use cookies and similar technologies to run our site, keep your basket, improve performance and, where you agree, for analytics and marketing.

• Essential cookies
Required for core functionality such as secure checkout, session management and load balancing. These cannot be switched off.
• Analytics cookies
Help us understand traffic and usage to improve the site. Set only with your consent.
• Advertising cookies
Used by our partners to measure and deliver relevant ads. Set only with your consent.

Managing cookies
You can manage preferences via our cookie banner at any time, and also through your browser settings. Blocking some cookies may affect site functionality. For details of the specific cookies we use and their lifetimes, see our Cookie Policy at [link to /cookies] or our cookie banner disclosures.

8. Children

Our site is not intended for children under 13. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us to delete it.

9. Third-party links

Our site may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies.

10. Changes to this policy

We may update this policy from time to time. Changes take effect when posted on this page. We will notify you of material changes where appropriate.

11. How to contact us

Questions about this policy or your data rights can be sent to:
Email: [support email]
Post: [Company legal name], [Address, City, Postcode, UK]