Privacy Policy

Who is responsible for your data

Power Backup UK is the data controller for this shop. You can contact us about privacy using the details at the end of this page.

We comply with UK GDPR and the Data Protection Act 2018.

Data we collect

• Identity and contact data: name, email, phone, billing and delivery address.
• Order data: products, quantities, payment status, returns, warranty claims and carrier tracking.
• Support data: enquiries, product questions, reviews and any images you choose to submit.
• Technical data: IP address, browser, device, security logs and essential session information.
• Preferences: consent records, wishlists, alerts and marketing choices.

Payment card details are handled by the payment provider. We receive payment status and limited transaction references, not your full card number.

How and why we use data

Who we share data with

We share only the information needed with hosting, payment, delivery, accounting, IT support, review and communication providers. We may also disclose information where the law requires it or to protect customers, our business and the public.

We do not sell your personal data. Providers must handle it under appropriate contractual and security terms.

International transfers and security

If a provider processes data outside the UK, we will use an approved safeguard where required, such as UK adequacy regulations or the International Data Transfer Agreement/Addendum and appropriate supplementary measures.

We use access controls, encryption in transit, backups and operational reviews. No online service is risk-free, so please use a unique account password and contact us if you suspect misuse.

How long we keep data

Data may be anonymised for analysis instead of deleted.

Your rights

Depending on the circumstances, you can ask to access, correct, erase, restrict or receive your data, object to processing, and withdraw consent at any time. Withdrawing consent does not affect earlier lawful processing.

We may need to verify your identity and will normally respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk, although we welcome the chance to resolve your concern first.

Automated decisions and children

We do not use solely automated decisions that produce legal or similarly significant effects. Our shop is not directed at children, and children should only provide personal data with appropriate involvement from a parent or guardian.

Changes to this policy

We will post material changes here and, where appropriate, provide a more prominent notice. The current version and update date are shown above.

Where we obtain information

Most information comes directly from you when you order, contact us, leave a review or request an alert. We also receive order and payment-status information from payment and delivery providers, and technical events from your browser and our security logs.

If you give us information about someone else, such as a delivery recipient, tell them why you are sharing it and only provide what is necessary.

Medical and other sensitive information

Please do not send diagnoses or detailed medical records when asking about backup power. If you tell us that equipment supports an essential medical device, we use that information only to provide suitable product guidance and support.

We do not need or request special-category health data for ordinary shopping. Do not include it in reviews, uploaded images or public Q&A.

Cookies, local storage and device identifiers

We use essential session storage for basket and account features, and local storage for preferences such as wishlists, comparison and consent. If you clear browser storage, some preferences will reset.

Our Cookie Policy lists the technologies and explains how to control them.

Product images and third-party infrastructure

Product images may be delivered from manufacturer or owner-supplied hosting. Your browser may share your IP address, user agent and referring page with that host when loading an image. We do not permit those hosts to use your information for unrelated advertising.

Payment, carrier and mapping services have their own privacy terms. Optional third-party embeds are blocked until the required consent is given.

Service providers and processing instructions

Providers may act as processors for hosting, database storage, email delivery, accounting, fraud prevention, customer support, order fulfilment, review moderation and analytics. They may only process relevant data under documented instructions and confidentiality obligations.

Where a provider acts as an independent controller, we will provide the minimum information needed for its service and will not share unrelated marketing data.

Customer reviews and uploaded images

Reviews and images are moderated before display where moderation is enabled. Remove house numbers, personal documents, vehicle registrations, faces and other identifying details unless you are happy for them to be public.

We may reject unlawful, misleading, unsafe or unrelated content. Publication does not transfer ownership of your image; you give us permission to display it for review and product-information purposes.

Marketing, alerts and suppression

You can unsubscribe from marketing or a product alert at any time through the supplied link or by contacting us. We may keep a limited suppression record so we do not contact you again after withdrawal.

Price-drop and stock alerts relate only to the products you selected and should not be treated as a promise of availability or a future price.

Data security incidents

If we become aware of a personal-data breach, we will assess the risk, contain the incident and document our response. Where required, we will notify the ICO and affected individuals without undue delay.

Contact us immediately if you believe an account, message or document has been accessed without permission.

Access requests and identity checks

You can make a data-rights request using the contact details below. Describe the right you want to exercise and any relevant order or account information. We may ask for proportionate proof of identity and authority before releasing or changing records.

Requests are normally free and answered within one month. Complex or numerous requests may take longer, as permitted by law. Manifestly unfounded or excessive requests may be handled differently under UK GDPR.

Retention in backups and suppression systems

Deleted data may remain temporarily in protected backups until the normal rotation removes it. We restrict restoration of deleted personal data and will reapply deletion where appropriate after a restore.

Limited records may be retained to demonstrate consent, honour an objection, resolve a dispute or establish, exercise or defend legal claims.

Legal claims and business changes

We may use and retain information needed to establish, exercise or defend legal claims. If the business is sold, reorganised or transferred, relevant records may pass to the successor under appropriate confidentiality and data-protection safeguards.

Where practical, we will notify affected customers of a material change in how their data is handled.

Regulator and independent advice

You can contact the Information Commissioner’s Office at ico.org.uk or call its helpline on 0303 123 1113. You can also seek independent legal advice about your rights.

Nothing in this policy limits any right or remedy available under UK GDPR or the Data Protection Act 2018.