Data controller
Privacy policy
What we collect and why.
We collect only the information needed to operate the shop, fulfil orders, provide support and meet legal obligations. We do not sell personal information or use advertising trackers.
Last updated: 13 July 2026
No marketing tracking
Necessary storage only.
The cart and admin session use storage that is necessary for requested site functions and security. We do not currently use advertising, behavioural tracking or optional analytics cookies.
Information we collect
- Name, email address and telephone number.
- Billing and delivery addresses.
- Products, quantities, prices and order notes.
- Payment status and Stripe transaction references, but not full card details.
- Messages, return requests and customer-support correspondence.
- Basic technical and security information such as IP address, request logs and browser details.
How and why we use it
Contract
To take payment, fulfil and deliver orders, process returns and provide requested support.
Legal obligation
To maintain tax and accounting records and respond to lawful requests or consumer-rights obligations.
Legitimate interests
To secure the website, prevent fraud, investigate operational problems and maintain reliable business records.
Service providers and sharing
We share information only where needed to operate the shop: Stripe processes payments; Vercel hosts the website; Neon stores catalogue and order records; Resend sends transactional emails; and delivery providers such as DPD receive the details required to deliver parcels. We may also share information with professional advisers, insurers, regulators or law-enforcement bodies where reasonably necessary or legally required.
Some providers may process information outside the UK. Where this happens, the provider must use an appropriate legal safeguard, such as UK adequacy regulations or approved contractual protections.
How long we keep it
Order, payment and accounting records are generally retained for at least the period required by UK tax and legal obligations, normally around six years. Enquiries that do not become orders are kept only as long as reasonably needed to answer them and manage any follow-up. Security logs are retained for a shorter operational period unless needed to investigate abuse or a legal claim.
Your rights
Depending on the circumstances, you may ask to access, correct, erase, restrict or receive a copy of your personal information, or object to certain uses. Some information must still be retained for legal, accounting, fraud-prevention or dispute purposes.
Contact support@aquaronics.co.uk to make a request. You may also complain to the Information Commissioner’s Office if you are unhappy with how your information is handled.
Security and updates
We use reasonable technical and organisational safeguards, including encrypted connections, restricted administration access and trusted specialist providers. No internet service can guarantee absolute security. We will update this notice when our data use or service providers materially change.