Privacy Policy

The data controller is MACDONALD PLUMBING AND HEATING SUPPLIES LTD ("Warmwell", "we", "us"), a company registered in Scotland, United Kingdom, with its registered office at 8 Parcock Place Oldmeldrum, AB51 0PH, United Kingdom. You can reach us about privacy at support@macpluheasup.shop or +44 7277360363.

• Order and fulfilment data: name, email, phone, shipping address (delivery address), billing address, city, postal code and country used for order fulfilment and delivery.
• Account and membership data: email and Comfort Club subscription status.
• Support and enquiry data: the messages, subject and contact details you send via our forms.
• Comfort Finder inputs: the room, problem, skill level and tenure choices you select, and any room or pipework photos you choose to upload.
• Payment data: handled by Stripe. We receive confirmation and limited billing metadata; we never receive or store full card numbers.
• Technical data: IP address, device and browser type, and essential cookie identifiers (see our Cookie Policy).

Our collection sources are: directly from you (forms, checkout, account and Comfort Finder), automatically from your device (essential cookies, security logs), and from our processors — our payment processor Stripe (payment confirmation and fraud signals) and our delivery / courier partners (delivery status updates). We do not buy personal data from data brokers.

• To carry out order fulfilment, shipping and provide Comfort Club — performance of a contract. Your shipping address is shared with our courier partners solely to deliver your order.
• To provide support and answer enquiries — legitimate interests / pre-contract steps.
• To retain checkout details as a re-marketing lead where you provided them — consent and legitimate interests, subject to your right to object.
• To prevent fraud and secure the site — legitimate interests and legal obligation.
• To meet tax, accounting and consumer-law duties — legal obligation.

Card payments are processed by Stripe, Inc. and its affiliates as an independent controller of card data. Stripe collects and processes your card details on its own secure systems; Warmwelldoes not receive, see or store full card numbers or CVC codes. Review Stripe's privacy notice for how it handles cardholder data.

We share data only with processors that help us run the store, under contract and only as needed:

• Hosting and deployment (our website infrastructure provider).
• Payment processing (Stripe).
• Database and lead storage (our managed database provider).
• Email and delivery / courier partners used to confirm and ship your order.

We do not sell your personal data.

Some processors are located outside the UK / EEA. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Addendum, EU Standard Contractual Clauses or an adequacy decision.

Order and transaction records are kept for up to 7 years to meet tax and accounting obligations. Support enquiries and marketing leads are kept for up to 24 months. Comfort Finder photos are cached for selection guidance and cleared after 30 days. Account data is kept while your membership is active and for a short period afterward.

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent. California residents may request disclosure of the categories of data collected and may opt out of any "sale" or "sharing" of personal information.

We do not sell or share personal information for cross-context behavioural advertising. To exercise any right, email support@macpluheasup.shop; we respond within statutory timeframes.

We use essential cookies to run the cart, checkout and admin session. Any non-essential analytics are described, and consented where required, in our Cookie Policy.

We do not make solely automated decisions with legal or similarly significant effects. The Comfort Finder provides selection guidance only. Our store is not directed at children: it may not be used by anyone under 13, and those aged 13–17 must have a parent or guardian's consent. Installation tasks should be carried out by an adult.

We use encryption in transit, access controls and reputable processors. No method of transmission is completely secure, but we take reasonable steps to protect your data and to notify you and regulators of any breach where required.

Contact us first at support@macpluheasup.shop. UK/EU residents may also complain to their data protection authority (in the UK, the Information Commissioner's Office). Governing law: England and Wales.