Legal
Privacy Policy
Last updated: 13 August 2026
This policy explains how ("we", "us") collects and uses personal data when you visit our website, ask us a question or place an order for baths, shower enclosures and related equipment. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The controller of your personal data is , a company registered in England and Wales under company number , with its registered office at .
For any question about this policy or your personal data, email us at or call .
2. What data we collect
We only collect the data we need to answer your enquiry and to fulfil your order.
Order and delivery details. When you place an order, we collect your name, email address, telephone number and delivery address. Baths, trays and enclosures are bulky items, so a complete and accurate delivery address, plus a contact number for the courier, is essential to complete the contract.
Enquiry details. When you contact us by email or phone, we receive your contact details and whatever you choose to tell us about your project, such as room dimensions or preferred styles.
Technical data. Our hosting provider records basic server logs (IP address, browser type, pages requested, date and time) for security and capacity purposes.
We do not collect special category (sensitive) data, and we ask that you do not include it in messages to us. Our website has no server-side forms; the contact button opens your own email application.
3. Purposes and lawful bases
Under Article 6 of the UK GDPR, we rely on the following lawful bases:
Performance of a contract. Processing your name, contact details and delivery address to confirm, invoice, deliver and support your order, including arranging courier delivery and handling returns.
Legitimate interests. Responding to pre-sales questions, keeping records of correspondence, preventing fraud and misuse, and maintaining the security of our website. We balance these interests against your rights and only process what is proportionate.
Legal obligation. Retaining transaction records for accounting and tax purposes required by UK law, and responding to lawful requests from authorities.
Consent. Any optional communications, such as updates you have expressly asked to receive. You can withdraw consent at any time.
4. Sharing with third parties
We never sell personal data. We share it only with service providers who help us run the business, under contracts that restrict how they may use it:
Hosting provider — stores the website and its server logs.
Email provider — transmits and stores our correspondence with you.
Payment provider — where payment is taken electronically, your payment details are processed directly by a regulated payment provider; we do not see or store full card numbers.
Delivery partners — receive your name, address and phone number so they can deliver your order and contact you about timing.
We may also disclose data where required by law, for example to HMRC, a court or a regulator.
5. International transfers
We aim to keep personal data within the United Kingdom or the European Economic Area. If a service provider processes data outside these areas, we ensure an adequate level of protection through a UK adequacy decision, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with additional safeguards where appropriate.
6. How long we keep data
We keep personal data only as long as necessary for the purpose it was collected:
Order and transaction records are kept for six years after the end of the financial year in which the transaction took place, as required for tax and accounting purposes. General enquiries that do not lead to an order are kept for up to twelve months. Server logs are kept for up to ninety days. When data is no longer needed, it is securely deleted or anonymised.
7. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls limited to staff who need the data, and reputable providers with their own security certifications. No transmission over the internet is completely secure, but we work to reduce risk and will notify you and the ICO of any breach where the law requires it.
8. Cookies
This website does not set advertising or analytics cookies and does not use local storage. Our hosting provider may set strictly necessary technical cookies needed to serve the site securely; these do not track you across other websites. If we introduce non-essential cookies in the future, we will ask for your consent first and update this policy.
9. Your rights
Under the UK GDPR you have the right to:
Access — request a copy of the personal data we hold about you.
Rectification — have inaccurate or incomplete data corrected.
Erasure — ask us to delete your data where there is no overriding reason to keep it.
Restriction — ask us to limit how we use your data in certain circumstances.
Portability — receive the data you gave us in a structured, machine-readable format.
Objection — object to processing based on legitimate interests, and to any direct marketing at any time.
To exercise any of these rights, email . We respond within one month and never charge for a reasonable request.
10. Withdrawing consent
Where processing is based on your consent, you may withdraw it at any time by emailing us. Withdrawal does not affect the lawfulness of processing carried out before you withdrew, and it does not affect processing based on other lawful grounds, such as keeping records of a completed order.
11. Complaints
If you believe we have handled your data unlawfully, please contact us first so we can put it right. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by phone on 0303 123 1113.
12. Age restriction
Our products and website are intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time, for example when we change providers or the law changes. The current version is always published on this page with its "Last updated" date. Significant changes will be highlighted on the website.