1. Introduction
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website www.torxup.co.uk or purchase products from us. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
Torxup is the data controller responsible for your personal data. If you have questions about this policy or your data, contact us at:
Email: store@torxup.co.uk
Phone: 07903 670115
Post: Unit 1 Out of the Woods, Halton, Lancashire, LA2 6ND
3. What Data We Collect
We may collect the following personal data:
When you place an order: Full name, email address, postal/delivery address, phone number, payment information (processed securely by our payment provider — we do not store card details).
When you browse our website: IP address, browser type and version, operating system, pages visited, time and date of visit, referring website. This data is collected via cookies and similar technologies.
When you contact us: Name, email address, phone number, and the content of your message.
When you subscribe: Email address for newsletter or subscription services.
4. How We Use Your Data
We use your personal data for the following purposes:
- To process and fulfil your orders, including delivery and payment processing
- To communicate with you about your order, including dispatch and delivery updates
- To manage subscription services (e.g. filter replenishment)
- To respond to enquiries and provide customer support
- To improve our website, products, and services
- To comply with legal and regulatory obligations
- To send marketing communications where you have given consent
5. Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Contract: Processing necessary to fulfil orders you have placed with us.
- Legitimate interest: Website analytics, fraud prevention, and improving our services.
- Consent: Marketing emails and newsletters — you may withdraw consent at any time.
- Legal obligation: Tax records, consumer protection compliance, and regulatory requirements.
6. Sharing Your Data
We may share your data with the following third parties:
- Payment processors (to process transactions securely)
- Delivery and courier services (to fulfil orders)
- Website hosting and analytics providers
- Email marketing platforms (where you have opted in)
We do not sell, rent, or trade your personal data to any third party. Where third parties process data on our behalf, they are contractually obligated to protect your data in accordance with UK GDPR.
7. Data Retention
We retain your personal data only for as long as necessary:
- Order and transaction records: 6 years (to comply with HMRC requirements)
- Customer support correspondence: 2 years
- Marketing consent records: Until consent is withdrawn
- Website analytics data: 26 months
8. Your Rights
Under UK GDPR, you have the following rights:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to request correction of inaccurate data
- Right to erasure — to request deletion of your data where there is no compelling reason for continued processing
- Right to restrict processing — to request we limit how we use your data
- Right to data portability — to request your data in a structured, commonly used format
- Right to object — to object to processing based on legitimate interest or for direct marketing
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, contact us at store@torxup.co.uk. We will respond within one month.
9. Cookies
Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device.
- Essential cookies: Required for the website to function (e.g. shopping cart, login sessions).
- Analytics cookies: Help us understand how visitors use our website so we can improve it.
- Marketing cookies: Used to deliver relevant advertisements where you have given consent.
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.
10. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (SSL/TLS), secure payment processing through PCI-compliant providers, and restricted access to personal data.
11. International Transfers
Where your data is processed outside the UK (for example, by third-party service providers), we ensure appropriate safeguards are in place in accordance with UK GDPR, such as Standard Contractual Clauses or adequacy decisions.
12. Children
Our website and products are not directed at individuals under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated date. We encourage you to review this policy periodically.
14. Complaints
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: www.ico.org.uk
Phone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
