Privacy Policy

• Order & contact data: name, email, shipping/billing address, phone number.
• Payment data: processed directly by Stripe; we receive confirmation and the last digits/card type, never your full card number.
• Account/communication data: messages you send us and enquiry-form details.
• Technical & usage data: IP address, device/browser type, pages viewed and cookie identifiers (see our Cookie Policy).

• To process and deliver your orders and handle returns (to perform our contract with you).
• To provide customer support and respond to enquiries (legitimate interest / your consent).
• To prevent fraud and secure the Site (legitimate interest / legal obligation).
• To send marketing emails only where you have opted in (consent — you can withdraw at any time).
• To meet accounting and legal obligations (legal obligation).

• Stripe — payment processing.
• Shipping & fulfilment partners — to deliver your order.
• Hosting & analytics providers — to run and improve the Site.
• Authorities — where required by law.
• We do not sell your personal information for money.

Your data may be processed outside your country, including in the UK, EU and US. Where data leaves the UK/EEA we rely on appropriate safeguards such as Standard Contractual Clauses.

We keep order records for as long as needed to fulfil the order and to meet legal, tax and accounting requirements, then delete or anonymise them. Marketing data is kept until you unsubscribe.

Depending on where you live, you have the right to access, correct, delete, port or restrict the processing of your personal data, and to object to processing or withdraw consent.

EU/UK (GDPR): you can exercise any of the above and lodge a complaint with your local supervisory authority (in the UK, the ICO).

California (CCPA/CPRA): you have the right to know, delete, correct and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information for money. To opt out of any sharing for cross-context behavioural advertising, or to exercise any right, email support@heatecph.shop with the subject “Do Not Sell or Share”. We also honour Global Privacy Control (GPC) browser signals as a valid opt-out. We will not discriminate against you for exercising your rights.

To make any request, contact support@heatecph.shop. We may need to verify your identity and will respond within the time required by law.

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies load only with your consent in regions that require it; you can change your choices at any time via the cookie banner.

The Site is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

We use HTTPS encryption across the Site and work with PCI-compliant processors. No method of transmission is completely secure, but we take appropriate technical and organisational measures to protect your data.

Data controller: HEATEC HEATING AND PLUMBING LIMITED, 8 Blue Barns Business Park, Old Ipswich Road, Ardleigh, Colchester, England, CO7 7FX, United Kingdom. Privacy enquiries: support@heatecph.shop.