Privacy Policy

Last updated: 24 September 2026

This Privacy Policy explains how we collect, use, share and protect your personal data when you use plumbez.co.uk, place an order, contact us or receive after-sales support. We will only use your personal data in line with UK data protection law, including the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.

1. Who we are

PlumbEZ is a trading name of The Oil Tank Man Limited, which is the data controller responsible for your personal data. We are a company registered in England and Wales (company number 12638872).

Contact us about privacy at sales@plumbez.co.uk, on 01522 396350, or by post to The Oil Tank Man Limited, Unit 2A, Dowland Business Park, Harrison Way, Manby, Louth, Lincolnshire, LN11 8UX.

2. The personal data we collect

• Identity and contact details: name, billing and delivery addresses, email address and telephone number.
• Order details: products bought, prices, delivery method, payment status, returns, refunds and warranty information.
• Account details: login details and account activity if you create an account.
• Business details: business name and VAT or trade details if you buy as a business.
• Communications: messages, contact form enquiries, emails, call notes and any photos, videos or documents you send us.
• Reviews: review content and the name or display name you choose.
• Technical data: IP address, browser and device information, security logs and, depending on your cookie choices, information about how you use our website.

You must give us your name, address, email address and phone number to place an order; without them we cannot take or deliver it. Everything else is optional.

We do not see or store your full card details; these go directly to our payment providers. We do not knowingly collect special category data (such as health information) and ask you not to send it to us.

3. How we collect it

Most of the information comes directly from you when you order, create an account or contact us. We also receive information from payment providers (for example, whether a payment succeeded or was flagged as a fraud risk), from delivery companies (for example, delivery updates) and, depending on your cookie choices, from cookies and similar technologies.

4. How we use your personal data and our lawful bases

Purpose	Lawful basis
To take, process, deliver and support your order, including returns, refunds and warranty issues	Contract
To manage your account	Contract
To reply to enquiries and give product advice and customer support	Legitimate interests (helping customers) or contract
To keep accounting, tax and VAT records	Legal obligation
To prevent fraud and keep our website, systems and customers safe	Legitimate interests (protecting our business and customers) and legal obligation
To handle complaints and legal claims	Legitimate interests and legal obligation
To understand how our website is used and measure our advertising, using non-essential cookies	Consent (you can change your choice at any time)
To send you marketing emails, if you have opted in	Consent (you can unsubscribe at any time)

Where we rely on legitimate interests, we have balanced our interests against your rights. You can object at any time (see Your rights).

5. Marketing emails

We will only send you marketing emails if you have asked us to, and every marketing email includes an unsubscribe link. Service emails about your order (such as confirmations, dispatch notices and invoices) are not marketing and will still be sent.

6. Payments and fraud checks

Payments are handled by the following providers, who process your payment details under their own privacy policies:

• WooPayments by Automattic, powered by Stripe: card, Apple Pay, Google Pay and Klarna payments and fraud screening
• Klarna: Pay later and instalment options, if you choose Klarna

Our payment providers use automated tools to check payments for fraud. This can occasionally mean a payment is declined or an order is held for review. If this happens and you think it is wrong, contact us and a member of our team will review it.

7. Who we share personal data with

We never sell your personal data. We share it only where necessary with:

• Delivery companies such as Royal Mail, couriers and hauliers, to deliver your order.
• Suppliers, manufacturers and fulfilment partners, where they send goods to you directly or help with a return, warranty claim or product support.
• Payment providers listed above.
• Our IT and service providers: Kinsta (website hosting), Fasthosts (our business email), our website and e-commerce software (WordPress and WooCommerce) and associated plugins.
• Google (Google Analytics, Google Ads and Google Merchant Center): website statistics, measuring our adverts and listing our products on Google.
• Cloudflare: website security, spam and bot protection (including Turnstile on our forms) and performance.
• Akismet (Automattic): filtering spam from comments and forms.
• Complianz: recording your cookie choices.
• A buyer of our business: if we sell or reorganise all or part of our business, to the new owner and our advisers, who may use it only as described in this policy.
• Professional advisers and authorities: our accountants, legal advisers and insurers, and HMRC, the police or regulators where the law requires it.

These organisations may only use your data to provide their services to us, except where they act as independent controllers (for example payment providers, Klarna, delivery companies and, where you have consented to their cookies, Google), in which case their own privacy policies also apply.

8. Cookies

We use cookies that are essential for the website to work, such as those for the basket, checkout, login and security. We only use non-essential cookies, such as analytics and advertising cookies, if you agree to them through our cookie banner. You can change your choices at any time using the “Manage consent” option on our website or on our Cookie Policy page. Full details are in our Cookie Policy.

9. International transfers

Some of our service providers (for example payment, email, hosting and security providers, and analytics and advertising providers) may process personal data outside the UK, including in the European Economic Area and the United States. Where this happens, we make sure the transfer is protected, for example by relying on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or by using the UK’s International Data Transfer Agreement or Addendum. You can ask us for a copy of the safeguards we rely on.

10. How long we keep your data

• Orders, invoices and accounting records: 6 years from the end of the financial year they relate to, as required for tax purposes.
• Customer accounts: while your account is active. If an account is unused for 3 years, we may delete it (keeping order records as above).
• Enquiries, returns, warranty and complaint records: for as long as needed to deal with the matter and then for up to 6 years in case of a legal claim.
• Reviews: while they are published, unless you ask us to remove them.
• Cookies: for the periods shown in our Cookie Policy.

11. How we protect your data

We use appropriate technical and organisational measures to protect your data, including encrypted (HTTPS) connections, secure payment processing, access controls and reputable hosting and email providers. No system is completely secure, so please contact us straight away if you think your data has been affected.

12. Your rights

You have the right to:

• ask for a copy of your personal data;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data (we may need to keep some records, such as invoices, for legal reasons);
• ask us to restrict how we use your data;
• object to our use of your data where we rely on legitimate interests, and object to marketing at any time;
• ask us to transfer data you have given us to another organisation;
• withdraw your consent at any time where we rely on consent (for example, cookies or marketing).

To make a request, email sales@plumbez.co.uk. There is no charge in most cases. We may need to confirm your identity, and we will respond within one month (which may be extended in limited cases, in which case we will tell you why).

13. Complaints

If you are unhappy with how we have used your personal data, please complain to us first at sales@plumbez.co.uk. We will acknowledge your complaint within 30 days, look into it and let you know the outcome without undue delay.

You also have the right to complain to the UK data protection regulator, the Information Commissioner’s Office (from 30 September 2026 the Information Commission, still known as the ICO): ico.org.uk/make-a-complaint or telephone 0303 123 1113.

14. Children

Our website is not intended for children, and you must be 18 or over to place an order. We do not knowingly collect personal data from children.

15. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.