Privacy Policy

1. Data controller

The data controller is S. T. Plumbing and Heating Gas Specialists Limited (trading as Stphgas), 11 Hill Top, Knottingley, West Yorkshire, WF11 8EB, United Kingdom, company number 04723562. For any privacy request, email support@stphgas.shop.

2. What we collect

• Order & contact data: name, email, phone, shipping/billing address.
• Payment data: processed directly by Stripe and PayPal — we receive confirmation and limited details, never your full card number.
• Enquiry data: anything you send via our contact or wholesale forms.
• Technical data: IP address, device/browser info, and cookie data (see our Cookie Policy).

3. Why we use it, and our legal bases (GDPR)

• To fulfil your order — performance of a contract.
• Customer service & enquiries — legitimate interests / pre-contract steps.
• Fraud prevention & site security — legitimate interests and legal obligation.
• Analytics & marketing cookies — only with your consent.
• Accounting & legal compliance — legal obligation.

4. Who we share it with (processors)

We share data only with trusted providers who process it on our behalf:

• Stripe, PayPal — payment processing.
• Shipping & fulfilment partners — to deliver your order.
• Resend — transactional and enquiry email.
• Cloudflare — security, spam protection (Turnstile) and content delivery.
• Vercel — website hosting.

We never sell your personal data.

5. International transfers

As we operate globally, your data may be processed outside your country, including in the UK, EU and US. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses with our processors.

6. How long we keep it

We keep order records for as long as needed to provide the service and to meet legal, tax and accounting obligations (typically up to 6–7 years), then delete or anonymise it.

7. Your rights (GDPR)

You have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise any right, email support@stphgas.shop; we respond within 30 days. You may also complain to your local data protection authority.

8. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, to correct it, and to opt out of any "sale" or "sharing" of personal information. We do not sell your personal information for money.If we ever use cross-context behavioural advertising cookies, that may be considered "sharing" — you can opt out at any time by rejecting non-essential cookies in our cookie banner or by emailing support@stphgas.shopwith the subject "Do Not Sell or Share My Personal Information". We respond within 45 days and will not discriminate against you for exercising these rights.

9. Children

Our store is not directed at children under 16, and we do not knowingly collect their data.

10. Changes

We may update this policy; the current version is always posted here with its date.