Privacy information

DRAFT FOR LEGAL REVIEW
This privacy notice is a draft. It is not legal advice and must be checked before it is relied on. Placeholder retention periods are marked below and are not confirmed.

SHOP WORKTOPS - PRIVACY INFORMATION
The Admiral Network Limited, trading as Shop Worktops, is the controller for customer information used to operate this store, for the purposes of the UK GDPR and the Data Protection Act 2018. Contact info@shopworktops.com or write to Office 1, 527 Wilbraham Road, Chorlton, Manchester, M21 0UF.

We use your name, contact details, account details, order contents, delivery information and correspondence to quote, take orders, arrange delivery, answer enquiries and keep business records. Sign-in is provided by Supabase Auth. We do not store full card numbers. Stripe processes card payments.

Service providers: Supabase (accounts, authentication and the database), Stripe (payments), Resend (transactional email) and Vercel (hosting). Delivery partners receive the name, address and contact details needed to deliver an order. The shopping assistant is provided by OpenRouter, or by OpenAI when that is the configured service instead (see lib/assistant/provider.ts). If you use the assistant, your question and the relevant product or page context are sent to that provider. Do not put payment details or sensitive personal information in the chat.

We use information to perform your order, meet record-keeping duties and run and protect the store. We do not add you to a marketing list merely because you place an order. Some providers may process information outside the UK.

YOUR RIGHTS UNDER THE UK GDPR
You can ask us for access to your personal information, correction of inaccurate information, erasure, restriction of processing, and a portable copy of information you provided to us. You can object to processing based on legitimate interests. Where we rely on consent, you can withdraw it. You can complain to the Information Commissioner's Office at ico.org.uk. These rights are not absolute, and some business records have to be kept.

RETENTION — PLACEHOLDERS, NOT CONFIRMED
Order records: Shane to confirm the retention period.
Account information: Shane to confirm the retention period.
Enquiry emails and assistant transcripts: Shane to confirm the retention period.
Until those periods are confirmed, we keep information only for as long as we need it for the purposes above and for any record we are legally required to hold.

Account cookies and browser storage support sign-in, your basket and saved fabrication drafts. Keep your account and device secure, and sign out on a shared device. Optional tracking and session recording are disabled.