Privacy policy
Stove Glass Shop
Last updated: [23 October 2026]
1 Who is responsible for your information
Stove Glass Shop is a trading name of Sagars 365 LTD, registered in England under company number 08266466. Our registered office is Unit 7, Lawkholme Lane Industrial Estate, East Avenue, Keighley, West Yorkshire, BD21 3JX. Our VAT registration number is 166636286.
Sagars 365 LTD is the data controller responsible for the personal information described in this policy.
This policy explains how we use personal information when you visit our website, ask for a quotation, place an order, contact us or use our aftercare services. It also explains your choices and data protection rights.
For privacy questions, requests or complaints, email info@stoveglassshop.co.uk, telephone 01274 892360, or write to Privacy enquiries, Stove Glass Shop, Unit 7, Lawkholme Lane Industrial Estate, East Avenue, Keighley, West Yorkshire, BD21 3JX.
2 Information we collect and where it comes from
You provide information when you place an order, complete a form, request a quotation, email, telephone or write to us. This can include your name, billing and delivery address, email address, telephone number, order details, stove make and model, measurements, drawings, templates, correspondence and photographs you send about a product or problem. Please include only personal information that is relevant to your request.
Order and payment records can include the amount paid, payment status, transaction reference and refund details. Payment providers also process the information needed for your chosen payment method.
https://www.paypalobjects.com/webstatic/ua/pdf/EU/privacy.pdf
If customer accounts are offered and you choose to create one, we process the account details and order history needed to provide it. Marketing choices and records of consent are processed where you use those features.
Our website and supporting services can collect technical information such as IP address, browser or device information, access times, security logs and cookie choices. Any optional analytics or advertising data must be described in the cookie information in section 6.
We also receive information from service providers involved in your order, such as payment confirmation from a payment service and delivery status or proof of delivery from a carrier. If someone orders delivery to you, they may provide your name, address and contact information for that purpose.
3 Why we use information and our legal bases
Quotes and orders. We use contact details, delivery details, specifications and transaction information to provide a quotation you request, accept and make your order, take payment, arrange delivery and send order updates. Our legal basis is performing our contract with you, or taking steps you request before entering into it. Without the information needed to take payment, identify the goods and deliver them, we may be unable to fulfil the order.
If someone else orders delivery to you, our basis for using your delivery details is our legitimate interest in delivering the order to its intended recipient. Where you contact us on behalf of a business, we rely on our legitimate interest in communicating with that business and dealing with its enquiry or order.
Customer service and aftercare. We use relevant order details, correspondence and evidence to answer questions, handle returns and resolve problems. Contract is our basis for contractual aftercare. Legal obligation is our basis where processing is necessary to meet statutory consumer duties. For general enquiries unrelated to a contract, we rely on our legitimate interest in responding to people who contact the business.
Business records. We retain and use the information required for accounting, tax and other statutory record keeping. Our basis is compliance with our legal obligations.
Security and legal claims. We use relevant technical, contact and transaction information to protect the website, investigate suspected misuse or fraud, resolve payment disputes, and establish or defend legal claims. Our basis is our legitimate interests in protecting customers, our services and our legal position. We consider the impact on individuals and use information proportionately. Where disclosure is required by law, our basis is legal obligation.
Marketing. If you choose to receive promotional emails or text messages, we use the contact details and preferences you give us for that purpose, relying on your consent. Section 5 explains how to withdraw it. Buying from us or accepting our terms does not automatically sign you up to marketing.
Cookies and similar technologies. We use consent for optional tracking under the approach described in section 6. Where essential technologies involve personal information, we use contract where needed to provide your requested checkout or account service, or our legitimate interest in running and securing the website where appropriate.
We do not treat accepting this policy as consent to every use of personal information. If we propose a materially different purpose, we will give you the relevant information and establish a lawful basis before using the information for that purpose.
4 Who receives information
We share relevant information with organisations that help us provide and administer the service, limited to what is needed for their role. These can include website hosting and technical support providers, payment services, delivery companies, email and customer-support services, and accounting service providers.
For example, a carrier needs the name and delivery address and may need contact details to arrange delivery. A payment service needs information to process and check a transaction. Hosting and technical providers may process website and order records on our behalf.
Professional advisers, insurers, regulators, HMRC, law-enforcement bodies or courts may receive information where necessary and lawful for advice, a claim, a statutory obligation or a valid request. We assess the basis for a disclosure and do not give unrestricted access to customer records.
Providers acting on our instructions must have appropriate contractual and security arrangements. Some organisations, including certain payment providers, act as independent controllers for their own purposes and explain that use in their own privacy notices.
5 Marketing choices
Marketing sign-up is optional and separate from ordering. Where we offer it, we ask you to choose the communication channels you agree to. We do not use pre-ticked consent boxes.
You can withdraw marketing consent at any time by using the unsubscribe option in a message or contacting us. Withdrawing consent does not affect processing that was lawful before withdrawal. We may keep a limited record of your opt-out so that we can honour it.
Order confirmations, delivery updates and messages necessary to deal with a purchase or complaint are service communications. They are separate from promotional marketing.
6 Cookies and similar technologies
Cookies and similar technologies can store or access information on your device. Technologies essential to a service you request, such as maintaining a basket or securing checkout, may operate without optional cookie consent.
Under our approach, optional analytics, advertising and similar tracking technologies are enabled only after you consent. You can accept or reject optional categories and change your choices through the Cookie Settings button displayed on every page of our website, which reopens the cookie preference panel. Refusing optional tracking does not prevent you from placing an order. Withdrawing consent is as easy as giving it.
Our website runs on the Shopify platform and uses the CookieYes consent management tool. Essential cookies set by Shopify are used to keep your basket, operate and secure checkout, remember your cookie choices and protect the site. These are needed to provide the service you request and do not require consent. Optional cookies fall into the following categories: functional (remembering preferences such as region or display settings), analytics (understanding how visitors use the site so we can improve it) and advertising (measuring and personalising marketing). Optional cookies are blocked until you accept the relevant category.
The full list of the cookies and similar technologies in use on this site, including the name of each cookie, the provider that sets it, its purpose, how long it stays on your device and whether it is essential or requires consent, is shown in the cookie preference panel opened by the Cookie Settings button. The list is produced by a regular automated scan of the website and is updated when the technologies we use change.
You can also change browser settings to restrict or delete cookies. Blocking essential technologies may stop some requested functions from working. The duration of a cookie on your device can differ from the period for which related personal information is held by us or a provider.
7 Information processed outside the UK
Some of the service providers we use process personal information outside the UK. Our ecommerce platform (Shopify), our payment providers (Stripe and PayPal), our cookie consent tool and our email and analytics providers operate infrastructure or support teams in the European Economic Area, Canada and the United States, and information may be transferred to or accessed from those countries. Where this happens, we rely on UK adequacy regulations, which cover the European Economic Area, Canada and United States organisations certified under the UK Extension to the EU-US Data Privacy Framework (the UK-US data bridge). Where adequacy regulations do not apply, we rely on appropriate safeguards included in our providers' terms, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, supported by the required transfer risk assessment.
Where transfer safeguards apply, you can contact us using section 1 to ask for information about them and how to obtain a copy. We may redact confidential or unrelated information where appropriate. Using our website is not treated as consent to unrestricted overseas transfers.
8 How long we keep information
We retain personal information for the purposes described in this policy and review whether it is still needed. Different types of record have different requirements.
Order, invoice and payment records are retained for the applicable accounting and tax record-keeping periods and, where necessary, to deal with a claim or dispute. We consider the transaction date, the relevant statutory record-keeping duty, applicable legal claim periods and whether a specific dispute remains open.
Enquiries that do not lead to an order are retained while we answer the enquiry and for an appropriate follow-up period, taking account of the nature of the request and any unresolved issue. We do not retain them indefinitely merely because someone might contact us again.
Returns, complaints and supporting evidence are retained for the time needed to resolve the issue and meet relevant legal obligations or manage an associated claim. If an account service is offered, account details are reviewed by reference to whether the account is active and still needed. Closing an account does not require deletion of separate records we must retain by law.
Marketing information is retained while you remain subscribed or until our review shows it is no longer needed. A limited suppression record may be kept after you opt out to prevent unwanted messages. Technical and security records are kept for the period necessary to identify and investigate faults or security incidents, with longer retention only where a specific incident or legal requirement justifies it. Cookie durations are described in section 6.
When the relevant purpose and retention requirement end, we delete the information or make it anonymous. You can ask us for more information about the retention criteria applying to a particular record.
9 How we protect information
We use appropriate technical and organisational measures to protect personal information and limit access to people and service providers who need it for their work. These measures must be proportionate to the information and the risks involved. If you suspect a security issue affecting information you have provided, please contact us promptly.
10 Your data protection rights
Depending on the circumstances and the legal basis for processing, you may have rights to access your personal information, correct inaccurate or incomplete information, ask for erasure, restrict its use, and receive certain information in a portable format or have it transferred to another provider. These rights are subject to legal conditions and exemptions.
Where we rely on consent, you can withdraw it at any time using the relevant settings or by contacting us. This does not affect the lawfulness of earlier processing.
To make a request, contact us using section 1. We may need proportionate information to confirm your identity. We normally respond within one month, subject to any lawful extension or pause that applies, and will explain any extension, refusal or permitted charge. Requests are normally free of charge.
11 Your right to object
You can object at any time to the use of your personal information for direct marketing, including related profiling. We will stop that use when you object.
You can also object, on grounds relating to your particular situation, where we rely on legitimate interests. We will consider the objection and stop the processing unless the law permits us to continue, for example where we demonstrate overriding compelling grounds or need the information for legal claims. Contact us using section 1 to exercise this right.
12 Automated decisions
We do not make decisions about you based solely on automated processing where those decisions have legal or similarly significant effects on you.
Some third-party service providers, such as payment processors or fraud-prevention providers, may use automated systems when processing transactions. Where they do so, their own privacy policies will explain how those systems operate and what rights you have in relation to them.
13 Questions and complaints
You can complain to us about our handling of your personal information by email, telephone or post using section 1. We will confirm receipt within 30 days. We will make appropriate enquiries, keep you informed and explain the outcome without undue delay. We may ask for information needed to understand and investigate the concern.
You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator. Information about making a complaint is available at https://ico.org.uk/make-a-complaint/.
14 Changes to this policy
We may update this policy when our practices or legal obligations change. The date above shows when it was last updated. We will draw significant changes to your attention where appropriate and obtain fresh consent where required. A policy update does not remove rights relating to information we already hold.