Privacy Policy

Rules here apply strictly to thermovar.uk, submitted orders and incoming messages. Third-party websites follow their own notices.

Data controller: Thermovar Heating Systems Ltd., 154 Bermondsey Street, London, SE1 3TQ, United Kingdom. Direct privacy queries to [email protected] or call +44 20 6677 9840.

Merchant

Thermovar Heating Systems Ltd.

Registered address

154 Bermondsey Street, London, SE1 3TQ, United Kingdom

Email

[email protected]

Phone

+44 20 6677 9840

We gather only details required for heater dispatch and accounting.

3.1 Information you provide directly

Name, delivery point, email address and contact number on checkout; correspondence and review text. We store records for statutory bookkeeping limits, and support notes up to 3 years.

3.2 Payment and transaction data

Order reference, purchased items, invoices, payment route and tracking. Payment card details never touch our server. Kept per statutory tax schedules.

3.3 Automatically collected information

IP log, browser type, device details, page history and session timing captured by servers and active cookies. Stored 30 days in logs and up to 14 months in aggregated metrics.

3.4 Marketing and advertising data

Incoming campaign codes, ad tags and source URLs. We log these purely for marketing attribution and purge them after 90 days.

3.5 Third-party service inputs

Delivery notifications from freight couriers and settlement confirmations from billing gateways, linked to your order file.

3.6 Children

Services target adults only, not users under 18. We never deliberately log minor details; guardians can request erasure via [email protected].

Name, shipping location, phone number and email handle delivery and dispatch alerts. Orders cannot process without them. Remaining entries are optional.

• Process purchases, pack heaters, arrange delivery, generate invoices and manage returns or refunds.
• Answer product questions and send dispatch alerts by SMS or email.
• Maintain server defense, spot fraudulent orders and check site stability.
• Send newsletter updates strictly upon request. Each dispatch contains a fast unsubscribe link.
• Comply with mandatory tax, accounting and product safety filing rules.

We do not sell customer databases. We transfer files strictly to vetted contractors bound by written handling agreements.

6.1 Payment processing

Selected payment gateways receive purchase totals and necessary checkout fields to process settlements.

6.2 Shipping and fulfilment partners

Couriers receive your name, physical address and phone number to coordinate parcel drop-off.

6.3 Service providers

Hosting servers, automated mailing engines and helpdesk ticketing platforms manage records under contract.

6.4 Advertising and analytics partners

Approved analytics and marketing cookies transfer site activity data to third-party providers as listed in the Cookie Policy.

6.5 Legal and regulatory disclosures

Records get disclosed when statutory regulations demand it or during formal disputes regarding an order.

6.6 Business transfers

Business asset sales or restructuring transfer customer records to the succeeding entity under identical data protections.

External partners handling data outside United Kingdom operate under approved adequacy decisions or standard contractual clauses guaranteeing equal protection.

Statutory rights under UK GDPR and the Data Protection Act 2018 grant you data subject rights.

8.1 Data inspection, updates, erasure and export

Request file inspects, corrections, record deletion, machine-readable data transfers, processing limits or objections. Withdrawing consent does not alter prior processing.

8.2 Marketing choices

Marketing dispatches feature direct unsubscribe links. Disable tracking and ad scripts anytime via the cookie settings toggle.

8.3 Exercising your rights

Direct requests to [email protected]. Identity confirmation may be requested, with responses issued within 30 days. Formal complaints submit to authorities in United Kingdom.

Sites run on secure HTTPS connections. Purchase databases operate behind access controls restricted to authorized staff. Card numbers are never stored on-site.

Billing records remain on file for statutory accounting periods. Customer support archives delete after 3 years. Server logs wipe after 30 days, analytics after 14 months. Mailing consent holds until revoked.

Links leading to offsite platforms, social networks or payment processors operate under outside terms. We hold no responsibility for external practices.

Revisions appear here whenever operational procedures or statutory regulations update. The effective draft stays published online with the revision date posted above.