takemyheatoor.shop ("we", "our", or "us") is dedicated to safeguarding the privacy and personal data of our UK website visitors and customers in strict compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller Information
The data controller responsible for personal information collected through this website is:
Heatoor UK Operations Ltd
124 City Road, London, EC1V 2NX, United Kingdom
Email: [email protected] • Phone: +44 20 8092 6841
2. What Personal Data We Collect
Depending on how you interact with our website, we may collect and process:
- Identity & Contact Data: Name, delivery address, billing address, email address, and contact telephone number when purchasing products or submitting contact inquiries.
- Transaction Data: Details of orders placed, payment status, and order fulfillment history. (Payment card details are tokenized and processed directly by PCI-DSS compliant merchant gateways; we do not store full payment card numbers).
- Technical & Usage Data: IP address, browser type, operating system, pages visited, and referring URLs collected through strictly essential and analytical cookies.
3. Legal Bases for Data Processing
We process your personal information under the following legal bases under Article 6 of the UK GDPR:
- Contractual Necessity: To process and fulfill your orders, arrange courier delivery with Royal Mail or DPD, and provide customer support.
- Legal Obligation: To maintain statutory accounting records and comply with UK tax authorities (HMRC).
- Legitimate Interests: To optimize website performance, prevent fraudulent transactions, and enhance customer service.
- Consent: Where you have explicitly opted in to receive email newsletters or accepted analytical tracking cookies.
4. Your Rights Under UK GDPR
As a UK resident, you have statutory rights regarding your personal data:
- Right of Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where no legal basis mandates retention.
- Right to Object & Restrict Processing: Object to processing based on legitimate interests or direct marketing.
- Right to Lodge a Complaint: You have the right to report concerns directly to the UK Information Commissioner's Office (ICO) at ico.org.uk.
