This Privacy Policy explains how Stair Nosing Direct (operated by Trion Technology Ltd.) collects, uses and protects your personal data when you visit or make a purchase from stairnosingdirect.co.uk.
We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Data Controller: Trion Technology Ltd. trading as Stair Nosing Direct Website: https://stairnosingdirect.co.uk Email: sales@stairnosingdirect.co.uk Business Hours: Monday – Friday, 9am – 6pm
If you have any questions about how we handle your personal data, please contact us at the email address above.
2. What Data We Collect
We collect personal data in the following ways:
When You Place an Order
- Full name
- Billing and delivery address
- Email address
- Phone number (if provided)
- Payment information (processed securely by Stripe — we do not store your card details)
- Order history and purchase details
When You Create an Account
- Username and password (encrypted)
- Email address
- Order history
When You Contact Us
- Name and email address
- The content of your message
When You Browse Our Website
- IP address
- Browser type and version
- Pages visited and time spent on the site
- Referring website
- Device type
When You Sign Up to Our Mailing List
- Email address
- Name (if provided)
3. How We Use Your Data
We use your personal data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling your orders | Performance of a contract |
| Sending order confirmations and updates | Performance of a contract |
| Handling returns, refunds and complaints | Performance of a contract |
| Sending marketing emails (only with your consent) | Consent |
| Improving our website and understanding how it is used | Legitimate interests |
| Preventing fraud and ensuring security | Legitimate interests |
| Complying with legal obligations (e.g. tax records) | Legal obligation |
We will never sell your personal data to third parties.
4. Third Parties We Share Data With
To operate our website and fulfil orders, we share limited data with trusted third-party services:
Stripe — Payment processing. Your payment card details are entered directly into Stripe’s secure system. We do not see or store your full card number. Stripe is PCI-DSS compliant. Privacy policy: https://stripe.com/gb/privacy
Mailchimp (by Intuit) — Email marketing. If you subscribe to our mailing list, your email address is stored with Mailchimp. You can unsubscribe at any time via the link in any email. Privacy policy: https://mailchimp.com/legal/privacy/
Tawk.to — Live chat support. If you use the live chat feature, your messages and any information you provide may be stored by Tawk.to. Privacy policy: https://www.tawk.to/privacy-policy/
Google Analytics (via Google Site Kit) — Website analytics. We use Google Analytics to understand how visitors use our website. This data is anonymised and aggregated. You can opt out via your browser settings or the Google Analytics opt-out browser add-on. Privacy policy: https://policies.google.com/privacy
Hostinger — Web hosting. Our website is hosted by Hostinger, which stores server logs and website files. Privacy policy: https://www.hostinger.co.uk/privacy-policy
WooCommerce / Automattic — Our online store is powered by WooCommerce, a product of Automattic Inc. Privacy policy: https://automattic.com/privacy/
All third parties we work with are required to handle your data securely and in accordance with data protection law.
5. Cookies
Our website uses cookies — small text files stored on your device — to improve your experience.
Essential cookies are required for the website to function (e.g. shopping cart, login session). These cannot be disabled.
Analytics cookies (Google Analytics) help us understand how visitors use the site. These are only set if you accept them.
Marketing cookies may be set by third-party services such as Facebook or Google if you have visited their platforms. We do not use these for targeted advertising.
You can manage or disable cookies through your browser settings at any time. Note that disabling essential cookies may affect how the website works.
6. How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Order records | 7 years (required by UK tax law) |
| Customer accounts | Until you request deletion |
| Live chat transcripts | 90 days |
| Marketing email list | Until you unsubscribe |
| Website analytics data | 26 months (Google Analytics default) |
| Server logs | 30 days |
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Right of access — You can request a copy of the personal data we hold about you.
Right to rectification — You can ask us to correct any inaccurate or incomplete data.
Right to erasure — You can ask us to delete your personal data. We will comply unless we are legally required to retain it (e.g. order records for tax purposes).
Right to restrict processing — You can ask us to pause processing your data in certain circumstances.
Right to data portability — You can request your data in a structured, machine-readable format.
Right to object — You can object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent — Where processing is based on consent (e.g. marketing emails), you can withdraw consent at any time by unsubscribing or contacting us.
To exercise any of these rights, please email us at sales@stairnosingdirect.co.uk. We will respond within 30 days.
8. International Data Transfers
Some of our third-party service providers (such as Mailchimp and Stripe) may process your data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO), to protect your data.
9. Data Security
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss or disclosure. Our website uses HTTPS encryption for all data in transit. Passwords are stored in encrypted form. Payment data is handled entirely by our PCI-compliant payment processor, Stripe.
However, no internet transmission is 100% secure. If you have concerns about the security of your data, please contact us.
10. Children’s Privacy
Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Links to Other Websites
Our website may contain links to third-party websites. This Privacy Policy applies only to stairnosingdirect.co.uk. We are not responsible for the privacy practices of other websites and encourage you to read their privacy policies before submitting any data.
12. How to Complain
If you are unhappy with how we have handled your personal data, please contact us first at sales@stairnosingdirect.co.uk and we will do our best to resolve your concern.
If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: https://ico.org.uk/make-a-complaint/
- Phone: 0303 123 1113
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page will be revised accordingly. We encourage you to check this page periodically.