Privacy

Who this applies to

This page explains what SupaGrip does with your personal information when you buy from us or contact us.

SupaGrip is a small UK business run by a sole trader, based at 29 Castlemere Street, Rochdale, OL11 3SW. We are responsible for the information described here.

What we collect

When you place an order we ask for:

• your name;
• your email address;
• your telephone number (optional);
• your UK delivery address.

We also keep a record of the order itself: what you bought, what it cost, the order number, the date, and later the carrier and tracking reference once it is dispatched.

If you email or call us, we keep that correspondence so we can deal with your enquiry and any follow-up.

We do not ask for anything we do not need to take payment, deliver your order and answer your questions.

There are no customer accounts

You do not create an account to buy from us and there is no password to remember. We do not run a members' area, a saved-address book or an order-history login.

Why we are allowed to use your information

Data protection law requires us to have a reason for using your information. Ours are:

• To take steps at your request before entering into a contract, and to perform our contract with you: receiving and processing your order, taking payment, dispatching and delivering your goods, sending transactional order and dispatch communications, and dealing with returns or refunds.
• To meet our legal obligations: keeping the accounting and tax records a business is required to keep.
• Our legitimate interests: replying to enquiries and complaints and keeping a record of what was said, and keeping the shop and the checkout secure and free from abuse. We rely on this only where it does not override your own rights.

We do not currently rely on consent as a lawful basis for the processing described on this page. We do not currently send marketing emails or use advertising or visitor-analytics tracking.

Payment

Payment is taken through Stripe, using Stripe's own secure checkout pages.

Your card details are handled by Stripe and never reach SupaGrip's website. We do not see, store or process your card number. We receive confirmation from Stripe that a payment succeeded, together with Stripe's reference for it.

Who else handles your information

We use a small number of services to run the shop:

• Stripe: takes and processes your payment.
• Supabase: stores our orders, products and product images.
• Vercel: hosts the website itself.
• Google (Gmail): sends the emails you receive from us about your order.
• Our own automation server: prepares each order email from our system and passes it to Gmail to be sent.
• Cloudflare: manages the domain name for our website.

We use these providers to operate the shop and provide the services described above. They process personal information as needed to provide those services and, where applicable, may also process information for their own legal, security, fraud-prevention or regulatory purposes under their own terms and privacy notices.

Where your information is processed

Our order and product information is stored in a hosted database provided by Supabase.

Our transactional email automation server runs on Google Cloud infrastructure in the United States. That server prepares and passes on the order emails we send you, so the information needed to produce those emails, which is your name, your email address and your order details, is processed in the United States.

Some of our other providers, including Stripe, Vercel and Google, are international services and may also process information outside the United Kingdom.

If you would like to know more about the arrangements that apply to information processed outside the UK, please email us and we will tell you.

Cookies, tracking and analytics

We do not use Google Analytics. We do not use advertising trackers or marketing cookies. We do not track you across other websites.

Your basket is stored in your own browser so that it survives while you shop. It stays on your device and is only sent to us when you go to checkout.

We use limited technical mechanisms that are necessary for the site and the shop administration to work at all. We do not use anything for advertising or visitor profiling.

We do look at our own sales figures, meaning how many orders we have taken and what they were worth, but that comes from our own order records. It is not visitor tracking and it does not involve any third-party analytics service.

Keeping the shop secure

Like any website, ours receives the internet (IP) address your device connects from, and our hosting provider records it as part of running the service. We use it for one narrow purpose: limiting how many times the same source can attempt a checkout, or send us invalid payment notifications, in a short space of time. That protects the shop, and your order, from abuse.

We do not use this to build a profile of you, to follow you across other websites, or for advertising or visitor analytics.

Marketing

We do not send marketing emails. There is no newsletter and no marketing sign-up. The only emails we send you are about your order: confirmation, dispatch, and any reply to a message you send us.

How long we keep your information

We keep order records for as long as we need them to run the business properly, to deal with returns, refunds, warranty questions and any dispute, and to meet our accounting and legal record-keeping obligations. We do not keep personal details for longer than we need them for those purposes.

Your rights

You can ask us to:

• give you a copy of the information we hold about you;
• correct anything that is wrong;
• delete information where we no longer need it;
• stop using it in a particular way.

Email us and we will deal with your request. Some information we may need to keep in order to meet our legal and accounting obligations, and we will tell you if that applies.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Changes to this page

If we change how we handle personal information, we will update this page.