Privacy Policy

This Privacy Policy explains how Twincoast Commerce Ltd (trading as Stair-gates.co.uk) collects, uses, stores, and protects your personal data when you use our website or purchase from us. We are committed to protecting your privacy and handling your data in a transparent and lawful manner, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Twincoast Commerce Ltd is the data controller responsible for your personal data.

If you have any questions about how we handle your personal data, please contact us at the email address above.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity data: first name, last name
  • Contact data: email address, telephone number
  • Address data: billing address, delivery address
  • Transaction data: details of products you have purchased, order history, payment method type (we do not store full card details)
  • Technical data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and other technology on the devices you use to access our website
  • Usage data: information about how you use our website, including pages visited and products viewed
  • Marketing preferences: your preferences for receiving marketing communications from us

We do not collect any special categories of personal data (such as health data, racial or ethnic origin, or religious beliefs).

3. How We Collect Your Data

We collect personal data through the following means:

  • Direct interactions: when you create an account, place an order, contact us by email or telephone, or subscribe to our newsletter
  • Automated technologies: as you interact with our website, we may automatically collect technical and usage data through cookies and similar technologies (see our Cookie Policy)
  • Third parties: we may receive data from analytics providers, payment processors, and delivery partners

4. How We Use Your Personal Data

We use your personal data for the following purposes and on the following legal bases:

Purpose Legal basis (UK GDPR)
Processing and fulfilling your order Performance of a contract
Sending order confirmation and dispatch notifications Performance of a contract
Processing payments via Stripe Performance of a contract
Managing returns and refunds Performance of a contract / Legal obligation
Complying with legal and tax obligations Legal obligation
Fraud prevention and security Legitimate interests
Improving our website and services Legitimate interests
Sending marketing emails (if you have opted in) Consent

We will never sell your personal data to third parties.

5. Third Parties We Share Your Data With

We may share your personal data with the following categories of third parties, strictly for the purposes described above:

  • Stripe: payment processing. Stripe acts as a data processor and processes your card details in accordance with PCI-DSS standards. We do not store your full payment card details. See Stripe’s Privacy Policy.
  • Delivery and courier partners: we share your name and delivery address with our shipping providers to enable delivery of your order.
  • Hostinger: our website hosting provider, which stores website data on servers in the EU/EEA.
  • WooCommerce / Automattic: our e-commerce platform processes order data. See Automattic’s Privacy Policy.
  • Google Analytics: we may use Google Analytics to understand how visitors use our website. Data is anonymised where possible. See Google’s Privacy Policy.
  • Trustpilot: we use Trustpilot to collect and display customer reviews. If you leave a review, Trustpilot will process your name and email address as an independent data controller. See Trustpilot’s Privacy Policy.

All third-party processors are required to process your data only on our instructions and in accordance with applicable data protection law.

6. International Data Transfers

Some of our third-party service providers may be located outside the UK or EEA. Where this is the case, we ensure that appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions) to protect your personal data in accordance with UK GDPR requirements.

7. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements.

  • Order and transaction data: retained for 7 years to comply with UK tax and accounting obligations
  • Account data: retained for as long as you maintain an active account, plus 2 years after your last purchase
  • Marketing data: retained until you withdraw your consent or opt out
  • Technical / website log data: typically retained for up to 12 months

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access: you can request a copy of the personal data we hold about you (Subject Access Request)
  • Right to rectification: you can ask us to correct inaccurate or incomplete data
  • Right to erasure: you can ask us to delete your personal data where there is no legitimate reason for us to continue holding it
  • Right to restriction: you can ask us to restrict the processing of your data in certain circumstances
  • Right to data portability: you can request that we transfer your data to another organisation, or directly to you, in a structured, machine-readable format
  • Right to object: you can object to the processing of your personal data where we rely on legitimate interests as our legal basis
  • Right to withdraw consent: where processing is based on consent, you can withdraw your consent at any time

To exercise any of these rights, please contact us at info@stair-gates.co.uk. We will respond within 30 days. You will not be charged a fee for exercising your rights.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

9. Marketing Communications

We will only send you marketing emails if you have explicitly opted in to receive them. You can unsubscribe at any time by clicking the “unsubscribe” link in any marketing email, or by contacting us at info@stair-gates.co.uk.

We do not share your email address with third parties for their own marketing purposes.

10. Cookies

Our website uses cookies and similar technologies. For full details of the cookies we use, the purposes for which we use them, and how to manage your cookie preferences, please see our Cookie Policy.

11. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include SSL encryption, secure hosting, and access controls. However, please be aware that transmitting information over the internet is never completely secure.

12. Changes to This Privacy Policy

We keep this Privacy Policy under regular review and will update it when necessary. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

Last updated: July 2026

Scroll to Top