1. Who we are
YPH (YARNTON PLUMBING & HEATING) LIMITED(“we”, “us”, trading as Yphplumb) is the data controller for personal data collected through yphplumb.shop.
Registered in England & Wales, Company No. 05019347. Registered office: Sussex Barn New Road, Hellingly, Hailsham, East Sussex, United Kingdom, BN27 4EW, BN27 4EW. Contact: support@yphplumb.shop · +44 7934706319.
2. What we collect
- Order & contact data — name, email, phone, billing and shipping address.
- Transaction data — items purchased, amount, currency and order status. We do not store full card numbers.
- Communications — messages you send via our contact or bulk-enquiry forms.
- Technical data — IP address, device and browser type, and cookie identifiers (see our Cookie Policy).
3. How and why we use it (legal bases)
- To process orders and payments — performance of a contract.
- To provide customer support and respond to enquiries — legitimate interests / consent.
- To send order updates and required service messages — performance of a contract.
- To prevent fraud and secure our site — legitimate interests and legal obligation.
- Marketing emails — only with your consent, which you can withdraw at any time.
4. Who we share it with
We share data only with processors that help us run the store, under contract:
- Stripe and PayPal — payment processing.
- Shipping carriers — to deliver your order.
- Email & hosting providers — to send confirmations and host the site.
We never sell your personal information. We may disclose data where required by law.
5. International transfers
We ship worldwide, so your data may be processed outside your country. Where data leaves the UK/EEA we rely on appropriate safeguards such as Standard Contractual Clauses.
6. How long we keep it
Order records are kept for as long as needed to fulfil the order and to meet legal, tax and accounting obligations (typically up to 7 years). Enquiry messages are kept only as long as needed to handle your request.
7. Your rights
Depending on where you live, you have rights over your personal data. Under the UK/EU GDPR you can request access, correction, deletion, restriction, portability, and you can object to certain processing or withdraw consent.
Under the California CCPA/CPRA you have the right to know what we collect, to delete it, to correct it, and to opt out of the “sale” or “sharing” of your personal information. We do not sell or share your personal information as those terms are defined, and we honour Global Privacy Control (GPC) browser signals as a valid opt-out.
To exercise any right, email support@yphplumb.shop or use our contact form — two channels are available. We respond within the timeframes required by law and never charge for or discriminate against you for exercising a right.
8. Security
The site runs over HTTPS and payments are handled by PCI-DSS compliant processors (Stripe / PayPal). We apply appropriate technical and organisational measures to protect your data.
9. Complaints
If you are in the UK you may complain to the Information Commissioner's Office (ICO). EU residents may contact their local supervisory authority. We ask that you contact us first so we can put things right.
10. Changes
We review this policy at least annually and will post any changes here with an updated date.