1. Who we are
This website, scotheat.shop, is operated by SCOT-HEAT PLUMBING & HEATING LIMITED("Scotheat", "we", "us"), a company registered in Scotland under company number SC294901, with its registered office at 12 Toftcombs Avenue, Stonehouse, Larkhall, Lanarkshire, ML9 3QY, United Kingdom. We are the data controller responsible for your personal data. You can reach us at support@scotheat.shop.
2. What data we collect
- Order & contact details — name, email, shipping address, phone number and order history.
- Payment information — handled by our payment processors. We never see or store your full card number.
- Communications — messages you send via our contact or bulk-order forms.
- Technical data — IP address, browser type and basic analytics about how you use the site.
3. How we use your data
- To process, fulfil and deliver your orders and send order updates.
- To respond to enquiries and provide customer support.
- To prevent fraud and keep the store and payments secure.
- To meet our legal, tax and accounting obligations.
- With your consent, to send occasional updates you can unsubscribe from at any time.
4. Legal bases (UK/EU GDPR)
We rely on performance of a contract to process orders, legitimate interests to secure and improve our store, legal obligation for tax and accounting records, and consent for optional marketing.
5. Payment processing
Card and wallet payments are processed by PCI-DSS compliant third-party providers (such as Stripe and PayPal). When you pay, your payment details are sent directly to the processor over an encrypted connection. We receive only a confirmation and limited details (such as the last four digits of a card) needed to manage your order. Please review the privacy notices of Stripe and PayPal for how they handle your data.
6. Sharing your data
We share data only with service providers who help us run the store, including:
- Payment processors (Stripe, PayPal) to take payment.
- Shipping and fulfilment partners to deliver your order.
- IT, hosting and analytics providers under appropriate data-processing terms.
- Authorities where required by law.
We never sell your personal data.
7. International transfers
Some providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.
8. Data retention
We keep order and transaction records for as long as needed to fulfil the order and to meet legal and tax requirements (generally up to 7 years). Enquiry messages are kept only as long as needed to help you.
9. Your rights
Under UK/EU GDPR you have the right to access, correct, delete, restrict or object to the processing of your data, and to data portability. To exercise any right, email support@scotheat.shop. You may also complain to the UK Information Commissioner's Office (ICO).
California residents (CCPA):you have the right to know what personal information we collect, to request deletion, and to opt out of any "sale" of personal information. We do not sell personal information. To make a request, contact us at support@scotheat.shop; we will not discriminate against you for exercising your rights.
10. Cookies
We use essential cookies to run the shopping cart and checkout, and limited analytics cookies to understand site usage. You can control cookies through your browser settings.
11. Children
Our store is intended for adults. We do not knowingly collect data from children under 16.
12. Changes & contact
We may update this policy from time to time; the date above shows the latest version. For any privacy question, email support@scotheat.shop or write to us at 12 Toftcombs Avenue, Stonehouse, Larkhall, Lanarkshire, ML9 3QY, United Kingdom.