Privacy Policy - OutDoor Patio Heaters

1. Who We Are

outdoorheater.co.uk is a website operated by Outdoor Patio Heaters , a company registered in UK under company number [Insert Company Number] , with our registered office at Ireland .

For any questions about this Privacy Policy or how we handle your personal data, you can contact us at:

Email:Info@outdoorheater.co.uk
Phone: [Insert Your Phone Number]

We are the “data controller” for the purposes of UK data protection law. This means we are responsible for deciding how and why your personal data is processed.

2. What This Policy Covers

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, place an order, or interact with us. It applies to:

Visitors to outdoorheater.co.uk
Customers who purchase products from us
Individuals who sign up for our newsletter or contact us

3. What Personal Data We Collect

We may collect and process the following categories of personal data about you:

Data You Give Us:

Identity Data: Full name, title, date of birth (if applicable).
Contact Data: Billing address, delivery address, email address, phone number.
Transaction Data: Details about products you have purchased from us, order history, payment references.
Account Data: Username and password if you create an account on our website.
Marketing Preferences: Your preferences for receiving marketing communications from us.
Communications Data: Any correspondence you send to us via email, contact forms, or phone.

Data We Collect Automatically:

Technical Data: IP address, browser type and version, time zone setting, device identifiers, cookie IDs.
Usage Data: Information about how you use our website—pages viewed, links clicked, products viewed, session duration, referral source.

Data From Third Parties:

Payment processors (who confirm payment but do not share full card details with us).
Delivery and courier services (who confirm delivery status).
Analytics providers (such as Google Analytics) who provide anonymised usage data.

We do not collect or store full credit or debit card details. All payment information is processed securely by our third-party payment processor.

4. How We Use Your Personal Data and Our Legal Basis

Under UK GDPR, we must have a “lawful basis” for processing your personal data. We rely on the following legal bases:

Purpose	Data Used	Lawful Basis
To process and deliver your orders, including sending order confirmations and delivery updates.	Identity, Contact, Transaction	Contract – necessary to perform our contract with you.
To manage your account and provide customer support.	Identity, Contact, Account, Communications	Contract – necessary to provide the services you request.
To comply with legal obligations (e.g., tax and accounting records, fraud prevention).	Identity, Contact, Transaction	Legal Obligation – processing required by law.
To improve our website, products, and customer experience (e.g., analytics).	Technical, Usage	Legitimate Interest – to understand how customers use our site and improve our services.
To send you marketing communications (where you have not opted out).	Identity, Contact, Marketing	Consent (where required) or Legitimate Interest – to keep you informed about products similar to those you have purchased (soft opt-in under PECR).
To respond to your enquiries and provide information you request.	Identity, Contact, Communications	Legitimate Interest – to respond to customer queries.

5. Marketing Communications

We may send you marketing communications about our products, special offers, and news if:

You have given us explicit consent (e.g., by ticking a box on our website).
You are an existing customer and we are marketing similar products to those you have previously purchased (soft opt-in under PECR), provided you were given the opportunity to opt out at the time of purchase.

You can opt out of marketing communications at any time by:

Clicking the “unsubscribe” link in any marketing email we send you.
Contacting us directly at [Insert Your Email Address].
Updating your preferences in your account settings.

We will never share your personal data with third parties for their own marketing purposes without your explicit consent.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device to help us understand how you use our site, remember your preferences, and improve your experience.

Under the Privacy and Electronic Communications Regulations (PECR), we are required to obtain your consent before setting non-essential cookies (such as analytics and marketing cookies).

Types of cookies we use:

Strictly Necessary Cookies: Essential for the website to function (e.g., shopping cart, checkout, security). These do not require consent.
Analytics/Performance Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics). Under the Data (Use and Access) Act 2025, analytics cookies may be exempt from consent, but we still inform you clearly and offer a free opt-out.
Functionality Cookies: Remember your preferences and improve your experience.
Targeting/Marketing Cookies: Used to deliver relevant advertisements.

When you first visit our website, you will see a cookie banner that allows you to:

Accept all cookies
Reject non-essential cookies
Customise your cookie preferences

You can change your cookie preferences at any time through our Cookie Preferences Centre (link in website footer).

For more detailed information, please see our separate [Cookie Policy] (link to your Cookie Policy page).

7. Who We Share Your Data With

We may share your personal data with the following categories of third parties:

Payment Processors: To securely process your payments. We do not store your full card details.
Delivery and Courier Services: To fulfil and deliver your orders.
IT and Hosting Providers: Who host our website and store data securely.
Email Marketing Platforms: To send you marketing communications (if you have consented).
Analytics Providers: Such as Google Analytics, to help us understand website usage.
Professional Advisers: Including lawyers, accountants, and regulators, where legally required.
Law Enforcement or Regulatory Bodies: If required by law or to protect our legal rights.

We require all third-party service providers to respect the security of your personal data and to process it only in accordance with our instructions and UK data protection law.

8. International Data Transfers

Some of our third-party service providers may be based outside the United Kingdom. Where we transfer your personal data outside the UK, we ensure appropriate safeguards are in place, such as:

Transferring to countries that the UK Government has deemed to have adequate data protection laws (Adequacy Regulations).
Using the UK International Data Transfer Agreement (IDTA) or Addendum to the EU Standard Contractual Clauses.
Ensuring our contracts with service providers include the necessary data protection clauses.

If you would like more information about international transfers, please contact us.

9. How Long We Keep Your Data

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

We generally retain:

Customer Order Data: For [e.g., 6 years] after your last order, to comply with tax and accounting obligations.
Account Data: Until you close your account or request deletion.
Marketing Data: Until you unsubscribe or opt out.
Enquiry Data: For [e.g., 2 years] after your last contact.

When we no longer need your personal data, we will securely delete or anonymise it.

10. Your Rights Under UK GDPR

Under UK GDPR, you have the following rights regarding your personal data:

Right	What It Means
Right to be Informed	You have the right to know how we collect and use your data (this Privacy Policy explains this).
Right of Access	You can request a copy of the personal data we hold about you (Subject Access Request).
Right to Rectification	You can ask us to correct inaccurate or incomplete data we hold about you.
Right to Erasure (Right to be Forgotten)	You can ask us to delete your personal data in certain circumstances.
Right to Restriction of Processing	You can ask us to restrict the processing of your data in certain circumstances.
Right to Data Portability	You can request a copy of your data in a structured, commonly used, machine-readable format.
Right to Object	You can object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent	Where we rely on consent, you can withdraw it at any time.
Rights Related to Automated Decision-Making	You have the right not to be subject to decisions based solely on automated processing.

To exercise any of these rights, please contact us at [Insert Your Email Address]. We will respond to your request within one month (or within two months for complex requests).

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) , the UK’s data protection supervisory authority, at:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: www.ico.org.uk
Phone: 0303 123 1113

11. Data Security

We take the security of your personal data seriously. We have implemented appropriate technical and organisational measures to protect your personal data from accidental loss, unauthorised access, alteration, or disclosure. These include:

Secure servers and firewalls.
Encryption of data in transit (SSL/TLS).
Restricted access to personal data to authorised personnel only.
Regular security reviews and updates.

While we strive to protect your personal data, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of the breach, as required by UK GDPR. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. Any changes will be posted on this page, and where appropriate, we will notify you by email or via a notice on our website.

We encourage you to review this Privacy Policy periodically. The date at the top of this policy indicates when it was last updated.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Email:Info@outdoorheater.co.uk
Phone:

If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO) (details provided above).

Next Steps

Replace all bracketed [Insert ...] placeholders with your actual business information.
Create a separate Cookie Policy page that lists the specific cookies your website uses, their purposes, and lifespans. Link to it from this Privacy Policy and display it via your cookie consent banner.
Add a link to this Privacy Policy in your website footer, during checkout, and on any forms where you collect personal data.
Implement a cookie consent banner that loads before non-essential cookies are set, with clear “Accept” and “Reject” options.
Review your Data Processing Agreements (DPAs) with all third-party service providers (hosting, payment processors, email platforms, analytics) to ensure they meet UK GDPR requirements.
Consider creating a “Subject Access Request” procedure so your team knows how to respond if a customer requests access to their data.