Privacy Policy
Last updated: 16 September 2026
1. Who we are
TECNI Ltd (“we”, “us” or “our”) is the controller responsible for your personal data.
Our registered details are:
- Company name: TECNI Ltd
- Registered office: TECNI Ltd, 10 Evercreech Way, Walrow Ind Estate, Highbridge, Somerset, TA9 4AR, United Kingdom
- Company registration number: 5340355
- Email: support@tecni.uk
- Telephone: +44 (0)1278 773510
For the purposes of applicable UK data protection law, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018 (“DPA 2018”), we are the data controller of the personal data described in this Privacy Policy.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, and the rights you have in relation to your personal data.
We provide this information when we collect personal data from you and make this Privacy Policy available on our website. This reflects the ICO's transparency requirements under Articles 13 and 14 of the UK GDPR. IICO+1
2. Personal data we collect
Depending on how you interact with us, we may collect the following categories of personal data.
Identity Data
This may include:
- first name;
- last name; and
- other information necessary to identify you when dealing with your order or account.
Contact Data
This may include:
- email address;
- telephone number;
- billing address;
- delivery address;
- city/town;
- county/state/province; and
- postcode/ZIP code.
Transaction and Order Data
This may include:
- products ordered;
- order numbers;
- order dates;
- prices and transaction details;
- delivery information;
- returns, refunds and exchanges; and
- correspondence relating to your orders.
Payment Data
When you make a payment, payment-card information may be processed by our payment service provider, Stripe.
Where you use a Stripe Payment Link, you enter your payment details directly into Stripe's payment environment. We do not intentionally receive or store your full card number or CVV.
Where you make a payment by telephone, our authorised staff may enter the card details you provide directly into Stripe's secure payment interface.
We do not intentionally record, write down or otherwise retain full payment-card numbers or CVV codes after the transaction has been processed.
Payment information is processed by Stripe in accordance with the arrangements between Stripe and us and Stripe's applicable privacy documentation.
Technical and Usage Data
When you use our website, we may automatically collect technical information such as:
- IP address;
- browser type and version;
- device type;
- operating system;
- time zone;
- referring website;
- pages viewed;
- approximate interaction and usage information; and
- information about how you interact with our website.
The exact information collected depends on the cookies, analytics tools and other technologies actually used on our website.
3. How we use your personal data
We only use personal data where we have a lawful basis under applicable data protection law.
The purposes and lawful bases for our principal processing activities are set out below.
A. Processing and fulfilling orders
Personal data: Identity Data, Contact Data and Transaction/Order Data.
Purpose: We use this information to process your orders, take appropriate payment steps, arrange delivery, provide order confirmations and tracking information, process returns and refunds, and provide related customer support.
Lawful basis: Performance of a contract with you.
We may also process certain information where necessary to comply with a legal obligation.
B. Processing payments
Personal data: Payment and Transaction Data, together with relevant Identity and Contact Data.
Purpose: To process payments, prevent payment-related fraud and administer refunds or payment disputes.
Lawful basis: Performance of a contract and, where applicable, compliance with a legal obligation.
Payment-card information is processed through our payment service provider, Stripe. We aim to minimise our access to payment-card information and do not intentionally retain full card numbers or CVV codes.
C. Customer service and communications
Personal data: Identity Data, Contact Data, Order Data and information contained in communications with us.
Purpose: To respond to enquiries, provide customer support, resolve complaints and communicate with you about your orders or our services.
Lawful basis: Performance of a contract where the communication relates to a contract with you; otherwise, legitimate interests in administering our business and providing customer service, where appropriate.
D. Website operation, security and administration
Personal data: Technical and Usage Data.
Purpose: To operate, maintain and secure our website; detect and prevent fraud or abuse; investigate technical problems; maintain system security; and improve the reliability of our services.
Lawful basis: Legitimate interests in operating and securing our website and business, where those interests are not overridden by your rights and freedoms.
E. Website analytics and non-essential tracking
Where we use analytics, advertising or other non-essential cookies or similar technologies, we will use them in accordance with applicable privacy and electronic communications laws.
Where consent is legally required, we will obtain your consent before using those technologies.
You can manage your cookie preferences through our cookie-management tool.
The use of cookies and similar technologies is subject to the Privacy and Electronic Communications Regulations 2003 (“PECR”). The ICO states that non-essential cookies generally require consent before they are placed or used. IICO+1
F. Legal and regulatory compliance
We may process personal data where necessary to:
- comply with applicable laws and regulations;
- maintain accounting, tax and business records;
- establish, exercise or defend legal claims;
- respond to lawful requests from public authorities; or
- detect, prevent or investigate fraud and other unlawful activity.
Lawful basis: Compliance with a legal obligation and/or our legitimate interests, depending on the circumstances.
4. If you do not provide personal data
Some personal data is necessary for us to enter into or perform a contract with you.
For example, if you do not provide the information necessary to process and deliver an order, we may not be able to accept, process or fulfil that order.
Where the provision of personal data is optional, we will make this clear when we collect it.
5. Where we obtain personal data from
We normally collect personal data directly from you when you:
- place an order;
- make a payment;
- contact us by email or telephone;
- use our website;
- request customer support; or
- otherwise provide information to us.
We may also receive personal data from third parties where this is lawful and necessary, for example from payment providers, delivery providers or fraud-prevention services.
Where personal data is obtained from another source, we will provide the applicable privacy information required by law. IICO+1
6. Who we share your personal data with
We do not sell your personal data.
We may share relevant personal data with carefully selected service providers where this is necessary for the purposes described in this Privacy Policy.
These may include:
Delivery and logistics providers
We may provide your name, delivery address, telephone number and relevant order information to couriers, postal services and logistics providers so that they can deliver your order.
Payment service providers
We use Stripe to process payments.
For payment links, you enter your payment information directly into Stripe's payment environment.
For telephone payments, authorised staff enter the payment information you provide into Stripe's secure payment interface.
Stripe may process personal data in accordance with its own privacy documentation and its contractual arrangements with us.
Website hosting and technology providers
We may use third-party providers for website hosting, security, maintenance, technical support, cloud infrastructure and related services.
Analytics providers
Where applicable, we may use third-party analytics providers to understand how our website is used and improve our services.
Where consent is required for the relevant cookies or technologies, we will obtain that consent before using them.
Professional advisers and authorities
We may disclose personal data to professional advisers, insurers, regulators, law-enforcement bodies, courts or other authorities where this is necessary and lawful.
We require processors that process personal data on our behalf to provide appropriate contractual and security protections as required by applicable data protection law.
7. International transfers
Some of our service providers may process personal data outside the United Kingdom.
Where we transfer personal data outside the UK, we will ensure that the transfer is made in accordance with applicable UK data protection law.
Depending on the circumstances, this may include relying on:
- UK adequacy regulations;
- appropriate safeguards such as the UK International Data Transfer Agreement (“IDTA”) or UK Addendum to the EU Standard Contractual Clauses; or
- another lawful transfer mechanism permitted by applicable law.
Where required, further information about the relevant safeguards and how to obtain a copy of them can be requested from us.
The ICO identifies information about international transfers and applicable safeguards as part of the information that may need to be included in a privacy notice. IICO+1
8. Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure.
These measures may include access controls, encryption in transit, secure systems, authentication controls, staff procedures and contractual controls for relevant service providers.
No method of transmitting or storing information can be guaranteed to be completely secure. However, we take reasonable and appropriate steps to protect the personal data we hold.
9. Payment-card security
We do not intentionally retain full payment-card numbers or CVV codes.
For telephone payments, our staff enter payment information directly into our secure Stripe payment interface rather than recording or storing the card details separately.
We do not intentionally write card details on paper or store them in ordinary digital documents.
We also configure our telephone systems so that payment-card information is not intentionally retained in call recordings.
Where call recording is used for any other purpose, callers will be informed as required by applicable law and appropriate controls will be applied.
10. Data retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to satisfy legal, accounting, tax, regulatory or dispute-resolution requirements.
Retention periods vary depending on the type of information and the reason we hold it.
For example:
- Order and transaction records: We retain these for the period necessary to comply with applicable tax, accounting and legal requirements and to establish, exercise or defend legal claims.
- Customer correspondence: We retain relevant correspondence for as long as reasonably necessary to handle the enquiry, complaint or relationship and, where appropriate, to establish or defend legal claims.
- Payment-card information: We do not intentionally retain full card numbers or CVV codes after processing the transaction.
- Technical and security logs: We retain these for periods appropriate to the security and operational purposes for which they are collected, subject to applicable legal requirements.
- Analytics information: Retention depends on the analytics tools we use and the settings applied to those tools.
Where we cannot specify a fixed retention period, we use criteria such as the nature and sensitivity of the information, the purpose for which it is processed, applicable legal requirements, and whether the information may be required to establish or defend legal claims.
11. Your data protection rights
Subject to applicable legal conditions and exemptions, you may have the following rights:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can ask us to correct inaccurate or incomplete personal data.
- Right to erasure: You can ask us to delete your personal data in certain circumstances.
- Right to restriction: You can ask us to restrict how we use your personal data in certain circumstances.
- Right to object: You may have the right to object to processing based on legitimate interests, including certain forms of direct marketing.
- Right to data portability: In certain circumstances, you can ask us to provide personal data you have supplied to us in a structured, commonly used and machine-readable format or to transmit it to another organisation.
- Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew your consent.
Not all rights apply in every circumstance, and certain exemptions may apply.
Further information about data protection rights is available from the ICO. IICO+1
How to exercise your rights
To exercise a right, please contact:
Email: support@tecni.uk
Postal address: TECNI Ltd, 10 Evercreech Way, Walrow Ind Estate, Highbridge, Somerset, TA9 4AR, United Kingdom
Please provide enough information to allow us to identify you and understand your request.
We may need to verify your identity before responding to a request.
12. Right to object
You have the right to object to processing of your personal data where we process it on the basis of legitimate interests, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.
Where your personal data is processed for direct marketing purposes, you have an absolute right to object to that processing.
The ICO states that the right to object must be specifically brought to individuals' attention and presented clearly and separately from other information where applicable. IICO
13. Direct marketing
If we send you marketing communications by email, text message, telephone or other electronic means, we will comply with applicable data protection and electronic communications laws, including PECR.
Where consent is required, we will obtain it before sending the relevant marketing communications.
Where applicable law permits us to rely on another lawful route, such as the soft opt-in for certain electronic marketing communications, we will only do so where the relevant legal conditions are satisfied.
You can opt out of marketing communications at any time by using the unsubscribe mechanism provided in the communication or by contacting us.
14. Cookies and similar technologies
Our website uses cookies and similar technologies.
Some cookies are strictly necessary for the website to operate, such as cookies required for security, shopping-basket functionality or other essential functions.
Other cookies, including certain analytics, advertising or tracking technologies, may require your consent before they are used.
Our Cookie Policy explains:
- which cookies and similar technologies we use;
- what each technology does;
- who operates it;
- how long it remains active; and
- how you can accept, reject or change your preferences.
You can manage non-essential cookie preferences through our cookie-management tool.
PECR generally requires organisations to explain their use of cookies and obtain consent for non-exempt cookies and similar technologies. IICO+1
15. Complaints
If you have concerns about how we use your personal data, please contact us first:
Email: support@tecni.uk
Postal address: TECNI Ltd, 10 Evercreech Way, Walrow Ind Estate, Highbridge, Somerset, TA9 4AR, United Kingdom
You also have the right to complain to the UK's data protection supervisory authority, the Information Commissioner's Office (ICO).
ICO website: Information Commissioner's Office
You can find information about contacting the ICO and making a complaint on its website.
We would appreciate the opportunity to address your concerns first, but contacting us before contacting the ICO is not a condition of making a complaint to the ICO.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, the services we use, applicable law or how we process personal data.
When we make changes, we will update the “Last updated” date at the top of this Privacy Policy.
Where required by law, we will notify you of material changes before they take effect.
We recommend checking this Privacy Policy periodically for the latest information about our privacy practices.
17. Contact us
If you have any questions about this Privacy Policy or our use of personal data, please contact us:
TECNI Ltd
Email: support@tecni.uk
Telephone: +44 (0)1278 773510
Postal address: TECNI Ltd, 10 Evercreech Way, Walrow Ind Estate, Highbridge, Somerset, TA9 4AR, United Kingdom
Company registration number: 5340355