Who We Are

Our website address is: https://www.ecoheatshop.co.uk

This privacy policy applies to all visitors, customers, and users of our website.

What Personal Data We Collect and Why

We collect personal data only when it is necessary for legitimate business purposes, legal obligations, or where you have provided consent.

Personal Data We May Collect

• Identity Data: Name, billing address, shipping address
• Contact Data: Email address, telephone number
• Transactional Data: Order details, payment status, purchase history
• Account Data: Username, password, preferences
• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on site, interactions

We do not knowingly collect sensitive personal data such as health information.

Legal Basis for Processing

• Performance of a contract: e.g. fulfilling orders
• Compliance with legal obligations: e.g. tax and accounting
• Legitimate interests: e.g. site security, analytics, fraud prevention
• Consent: e.g. marketing communications, cookies where required

Comments & Media

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, the visitor’s IP address, and browser user agent string to help spam detection.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies & Analytics

Our website uses cookies to enhance user experience, maintain site functionality, and analyse traffic.

We use third-party analytics services (Google Analytics, Microsoft Clarity, Bing Analytics) to understand visitor interaction. You can opt out of Google Analytics tracking using Google’s browser opt-out tool.

Who We Share Your Data With

We share only the minimum data required for each service to function:

• Payment Processing: PayPal
• E-commerce Platform: WooCommerce
• Advertising & Analytics: Google, Microsoft
• Infrastructure: Hosting providers

Data Retention & Your Rights

Retention Periods

• Contact forms: up to 12 months
• Analytics data: up to 14 months
• Customer orders: up to 6–10 years (Legal/Accounting)
• User accounts: While the account remains active

Your Rights

You have the right to request access, correction, or deletion of your data, object to processing, and request data portability.

International Transfers & Security

Some providers are located outside the UK/EU (e.g., USA). We ensure transfers are protected by Standard Contractual Clauses (SCCs) or adequacy decisions.

Security Measures

• SSL encryption
• Secure hosting environments
• Restricted access to personal data

Contact Information

For privacy-related questions or requests, please contact:

If you have concerns, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).