FLOWIE COOLING LTD is the controller responsible for the personal information described in this policy. “Flowie”, “we”, “us” and “our” refer to that company.

This policy covers our Shopify store, pre-orders and purchases, enquiries, delivery communications, returns, warranty and aftercare. It does not replace a short privacy message shown at the point where we ask for particular information.

We collect information directly from you, automatically from your device where allowed, and from organisations involved in your transaction—such as Shopify, payment providers, delivery partners and support providers.

Please do not send sensitive personal information that is not needed to answer your enquiry. If you provide it, we will limit its use to what is necessary and lawful.

UK data protection law requires a lawful basis for each use. The basis can differ according to the information and circumstances.

Shopify may use affiliated companies and subprocessors in other countries. Its role and processing depend on the services enabled for our store. You can use the Shopify Privacy Portal to learn about and exercise choices relating to Shopify’s own processing.

We share the minimum reasonably necessary with organisations that help us deliver the purposes above:

• 01
  Shopify and store providers

  Hosting, checkout, accounts, security, order management and approved store functionality.

• 02
  Payment and fraud providers

  Authorising transactions, handling refunds, preventing fraud and meeting financial rules.

• 03
  Warehousing, delivery and returns partners

  Fulfilling orders, arranging heavy-item collection and resolving delivery issues.

• 04
  Support, warranty and repair partners

  Providing troubleshooting, repair, replacement, safety and aftercare where relevant.

• 05
  Professional and public bodies

  Accountants, insurers, lawyers, regulators, courts, law enforcement or tax authorities where necessary or required.

• 06
  Business change recipients

  A genuine buyer, investor or adviser during a proposed sale, investment or reorganisation, under appropriate confidentiality safeguards.

Strictly necessary technologies support functions you request, such as security, checkout and remembering basket contents. These do not normally require consent, but we still explain them.

You can unsubscribe from marketing using the link in a message or by contacting us. Withdrawing consent does not affect processing already carried out lawfully and does not stop necessary service communications.

We keep identifiable information only for as long as needed for the purpose collected, including legal, accounting, safety and claims requirements. We then delete or anonymise it.

Retention can be shorter or longer if the information is no longer needed, a dispute is active, a safety issue arises, the law requires it, or you successfully exercise a deletion right.

We use appropriate technical and organisational measures designed to protect information against accidental loss, unauthorised access, alteration or disclosure. Access is limited to people and providers who need it for legitimate purposes.

No online service can promise absolute security. If a personal-data breach creates a legal notification duty, we will notify the ICO and affected people as required.

We do not currently make decisions about you based solely on automated processing that produce legal or similarly significant effects. Payment and fraud providers may conduct their own checks under their privacy notices.

We review this policy and may update it when our services, providers or legal duties change. The latest version appears here with its effective date. If a change materially affects how we use existing information, we will provide an appropriate notice before the new use begins.

Questions, rights requests and privacy complaints can be sent to returns@flowie.co.uk or by post to the address below.