Privacy policy

Draft for business review. Confirm the controller, service providers, processing practices and retention arrangements before publication.

Who is responsible for your information?

This policy covers personal information handled through konnectelectricals.co.uk.

[Required: full legal name of the business operating as Konnect Electricals, geographical address, privacy contact email and any applicable data protection contact.]

Use our contact page to raise a privacy query.

Information used to run the shop

The shop and contact forms request information such as your name, contact details, delivery address, order details and the message you send us. Order records can include payment status, transaction references and correspondence. Website security and hosting services may record technical information such as an IP address and browser details.

[Confirm: actual technical logs, any account data, review data, fraud checks and the handling of card details by the selected payment provider. Do not send card details through the contact form.]

Purposes and legal grounds

The proposed processing purposes are:

• Taking and fulfilling orders, delivering goods and responding to purchase enquiries: performing a contract or taking steps at your request before entering one.
• Maintaining records required by tax or other law: complying with a legal obligation.
• Resolving complaints, protecting the website and preventing misuse: legitimate interests in operating a secure business, subject to an assessment of your rights.

[Confirm this purpose and legal-basis mapping against actual operations. Add any marketing, analytics or other processing, with the correct legal basis, before publication.]

Information needed to process and deliver an order is necessary for that transaction. If it is not provided, we may be unable to fulfil it. Information for optional services should be identified as optional.

Who receives information?

[Required: identify the actual payment provider, delivery companies, website host, email services and any marketing or analytics providers; explain their roles and the information shared with each. Include professional advisers and public authorities where applicable. Verify whether any provider uses information for its own purposes.]

Information outside the UK

[Required: confirm whether any service stores or accesses personal data outside the UK, identify the relevant destinations and explain the applicable UK transfer protections and how a customer can obtain information about them. Do not claim UK-only storage without verification.]

How long information is kept

[Required: set and implement retention periods or clear criteria for completed orders, abandoned or failed orders, enquiries, accounts, marketing records and security logs. Consider legal record-keeping requirements and any genuine need to handle claims.]

Review note: the WooCommerce automatic retention fields were blank when checked on 2 October 2026. No scheduled deletion period has been verified.

Your rights

Depending on the circumstances, you can request access to your information, correction, erasure, restriction or portability. Some rights have legal conditions and exceptions. We may need proportionate information to verify your identity.

You can object to processing based on legitimate interests. You have an absolute right to object to the use of your personal information for direct marketing.

Where processing relies on consent, you can withdraw it. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. A request to erase data may not apply to records we must retain by law or need for legal claims.

Contact us to exercise a right or raise a concern. Requests are normally answered within one month, subject to lawful extensions and rules about clarification or identity verification.

Complaints

You can complain to the Information Commissioner’s Office, the UK data protection regulator. You do not need our permission to do so.

Cookies and automated processing

See our cookie policy for storage and access technologies.

[Confirm: whether automated decision-making or profiling occurs, including any payment-provider fraud decisions, and add the legally required explanation if applicable.]

Changes to this policy

The final policy will carry its revision date. Material changes in how information is used must be communicated as required by law.

Prepared: 2 October 2026.