Privacy Policy

The data controller is WESTMINSTER HEATING & PLUMBING LIMITED, registered office 12 High Street, Stanford-Le-Hope, England, SS17 0EY, United Kingdom, company number 04341321. For any privacy question or to exercise your rights, contact privacy@westminsterph.shop.

We collect only what we need to run the shop:

• — Order & contact data: name, email, shipping address, phone (optional).
• — Payment data: handled by Stripe; we receive confirmation and limited details (e.g. last four digits, card brand) but never your full card number.
• — Communications: messages you send via our contact and enquiry forms.
• — Technical & usage data: IP address, device/browser type, and pages visited, via cookies and similar technologies (see our Cookie Policy).
• — Marketing preferences: whether you opted in to our emails.

• — To fulfil your order (process payment, ship goods, provide support) — legal basis: performance of a contract.
• — To run and secure our site, prevent fraud and improve our service — legal basis: our legitimate interests.
• — To send marketing emails, only where you have opted in — legal basis: consent (withdraw anytime).
• — To meet legal and accounting obligations — legal basis: legal obligation.

We do not sell your personal information. We share data only with service providers who help us operate, under contract and only as needed: Stripe (payments), our shipping and fulfilment partners, our email provider (e.g. Resend) for transactional and opted-in emails, our anti-spam provider (e.g. Cloudflare Turnstile), and analytics providers. We may disclose data where required by law.

We operate globally and some of our providers are based outside the UK and EEA (including the United States). Where personal data is transferred internationally, we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision, so your data stays protected.

We keep order and transaction records for as long as needed to provide the service and to meet legal and tax obligations (typically up to six years). Marketing data is kept until you unsubscribe. Enquiry messages are kept only as long as needed to resolve them.

You have the right to:

• — access the personal data we hold about you;
• — have inaccurate data corrected;
• — have your data erased (the “right to be forgotten”);
• — restrict or object to processing;
• — data portability;
• — withdraw consent at any time; and
• — lodge a complaint with a supervisory authority — in the UK, the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise any of these, email privacy@westminsterph.shop. We respond within 30 days.

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion, to correct inaccurate information, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined under the CCPA, and we do not discriminate against you for exercising your rights. To make a request, email privacy@westminsterph.shop. We respond within 45 days.

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies load only with your consent, which you can change at any time.

We use HTTPS encryption across the site, reputable processors, and access controls to protect your data. No method of transmission is perfectly secure, but we take reasonable steps to safeguard it and will notify you and the relevant authority of any breach as required by law.

Our site is intended for adults. We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy; the current version is always published here with the “last updated” date above.