Privacy Policy

This Privacy Policy explains how DOVER PLUMBING AND HEATING LIMITED (“Doverph”, “we”, “us”) collects, uses, shares and protects your personal data when you visit doverph.shop or place an order. We are the data controller.

1. Who we are

Data controller: DOVER PLUMBING AND HEATING LIMITED, company no. 04359378, registered in England and Wales.
Registered office: The Swallows Howlett End, Wimbish, Saffron Walden, Essex, CB10 2XW, United Kingdom.
Privacy contact: support@doverph.shop.

2. What we collect

• Identity & contact: name, email, phone, billing and shipping address.
• Order data: items purchased, order value, correspondence.
• Payment data: processed directly by our payment providers (Stripe, PayPal). We never receive or store your full card number.
• Technical & usage data: IP address, device/browser type, pages viewed, and cookie identifiers (see our Cookie Policy).

3. How and why we use it (legal bases)

• To perform our contract: process orders, take payment, ship goods, handle returns and provide support.
• Consent: non-essential analytics/marketing cookies and any marketing emails — only with your consent, which you can withdraw at any time.
• Legitimate interests: securing the site, preventing fraud, and improving our products and service.
• Legal obligation: keeping tax and accounting records.

4. Who we share it with

We share data only with processors that help us run the store: payment providers (Stripe, PayPal), shipping and fulfilment partners, email/communication tools, hosting (Vercel) and analytics (only with consent). We do not sell your personal information.

5. International transfers

Some processors are located outside the UK/EEA, including the United States. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

Order and transaction records are kept for up to 7 years to meet UK tax and accounting requirements. Enquiry correspondence is kept up to 24 months. Marketing data is kept until you unsubscribe or withdraw consent. Cookie data follows the lifespans in our Cookie Policy.

7. Your rights

Under the UK/EU GDPR you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise any right, email support@doverph.shop; we respond within one month. If you are in California, see your CCPA/CPRA rights in our Do Not Sell or Share notice.

8. Security

The site runs over encrypted HTTPS. Payments are handled by PCI-DSS compliant providers. We apply appropriate technical and organisational measures to protect your data, though no method of transmission is completely secure.

9. Children

Doverph is intended for adults. We do not knowingly collect data from anyone under 16.

10. Complaints

You can complain to your local data protection authority. In the UK that is the Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to resolve concerns first — please contact us.

11. Changes

We may update this policy; the “last updated” date above will change. Material changes will be highlighted on this page.