Privacy Policy
1. Who we are
"ABCOTUK Limited ", a company registered in England and Wales with company number 03397480, registered office at 46 Syon Lane, Isleworth, Middlesex, TW7 5NQ, and Headquarters at Green Acres, Oakley Green Road, Windsor, S:4 4QF, trading as Euroboilerparts.co.uk, Euroboilerparts, and Electric Combi Boilers Company (“we”, “us”, “our”, the “Company”), is the data controller for personal data processed in connection with the Website and your Orders. We are registered with the Information Commissioner's Office (ICO) with ICO Registration number ZC206542.
Contact us about privacy matters at info@euroboilerparts.co.uk, on 02089 982024, or by post to Abcot UK , Green Acres, Oakley Green Road, Windsor, S:4 4QF.
2. Scope
This policy explains how we collect, use, share and protect personal data when you browse the Website, place an Order, register for a trade/installer discount, or otherwise contact us. Read it alongside our Terms and Conditions of Sale and our Website Terms of Use.
3. Personal data we collect
-
Identity data - name, title.
- Contact data - billing/delivery address, email address, phone number.
- Trade data - Gas Safe, OFTEC or Corgi registration details, submitted if you apply for a trade discount.
- Transaction data - order history, products purchased, payment confirmation. We do not store full card numbers; these are processed by our payment provider (see Section 7).
- Technical data - IP address, browser type, device information, and pages visited, collected via cookies and similar technologies (see Section 5).
- Marketing preferences - whether you've opted in to receive marketing emails.
4. How we collect it
4.1 Directly from you - when you place an Order, create an account, apply for a trade discount, contact us, or subscribe to our newsletter.
4.2 Automatically - through cookies and similar technologies as you use the Website (see Section 5).
5. Cookies
We use cookies and similar technologies for three broad purposes:
-
Strictly necessary cookies (for example, your shopping basket, checkout session, and security) - these don't require consent, as they're necessary to provide the service you've asked for (PECR reg. 6(4)).
-
Analytics cookies (to understand how the Website is used) - set only with your consent.
-
Advertising/targeting cookies (for example, for remarketing) - set only with your consent.
We ask for your consent to non-essential cookies before they are set, using the cookie banner shown on your first visit. You can change your preference at any time via your browser settings. Declining non-essential cookies won't affect your ability to browse or buy from the Website.
6. How we use your data, and our lawful basis
UK GDPR requires us to have a lawful basis for each use of your data. The table below sets this out by purpose.
|
Purpose |
Data used |
Lawful basis |
|---|---|---|
|
Processing and delivering your Order |
Contact data, transaction data |
Contract necessity (Art. 6(1)(b) UK GDPR) - needed to perform the contract with you |
|
Processing payment |
Transaction data (via our payment provider) |
Contract necessity (Art. 6(1)(b)); your payment provider acts as an independent controller/processor for card data |
|
Verifying trade/installer discount eligibility |
Trade registration data |
Contract necessity / legitimate interests (Art. 6(1)(b)/(f)) - assessing eligibility for a discretionary discount |
|
Accounting, tax and audit records |
Transaction data |
Legal obligation (Art. 6(1)(c)) - e.g. under the Value Added Tax Act 1994 and Companies Act 2006 record-keeping requirements |
|
Responding to enquiries and delivery issue reports |
Contact data, transaction data |
Contract necessity / legitimate interests (Art. 6(1)(b)/(f)) |
|
Fraud prevention and Website security |
Technical data, transaction data |
Legitimate interests (Art. 6(1)(f)) - protecting the Company and Customers from fraud and misuse |
|
Sending marketing emails and offers |
Contact data, marketing preference |
Consent (Art. 6(1)(a)), or the PECR reg. 22 “soft opt-in” for existing customers about similar products - you can unsubscribe at any time |
|
Analytics and advertising cookies |
Technical data |
Consent (Art. 6(1)(a)) - see Section 5 (Cookies) |
7. Who we share your data with
We share personal data only where necessary, with:
- Couriers, to deliver your Order;
- Our payment provider, to process payment;
- IT, hosting, email marketing and analytics providers who process data on our instructions;
- Professional advisers (accountants, solicitors, auditors), where necessary;
- Regulators, law enforcement or other third parties, where required by law or to establish, exercise or defend legal claims.
We do not sell personal data. We do not share personal data with third-party advertisers for their own independent marketing purposes without your consent.
8. International transfers
Where we or our processors transfer personal data outside the UK, we ensure appropriate safeguards are in place - such as the UK International Data Transfer Agreement or standard contractual clauses - or that the transfer is to a country covered by UK adequacy regulations.
9. How long we keep your data
- Order and transaction records: for the duration of any applicable warranty, plus the statutory limitation period for contract claims (6 years under the Limitation Act 1980), and in any event as required for tax records (commonly at least 6 years, reflecting HMRC's record-keeping expectations for VAT-registered businesses).
- Marketing data: until you withdraw consent or unsubscribe.
- Technical/analytics data: 14–26 months.
10. Your rights
Under UK GDPR, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to certain processing, including objecting to direct marketing at any time;
- receive your data in a portable format, where applicable;
- withdraw consent at any time, where processing relies on consent;
- not be subject to a decision based solely on automated processing that has a legal or similarly significant effect on you.
To exercise any of these rights, contact us at info@euroboilerparts.co.uk. We will respond within one month, as required by Article 12(3) UK GDPR.
11. Complaints
If you're unhappy with how we've handled your data, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner's Office: ico.org.uk, or by phone on 0303 123 1113.
12. Children
The Website is not directed at children. We do not knowingly collect personal data from anyone under 13 without appropriate consent, in line with the digital age of consent set out in section 9 of the Data Protection Act 2018.
13. Security
We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure, in line with Article 32 UK GDPR.
14. Changes to this policy
We may update this policy from time to time; the version in force is the one published on this page, dated below.
Last updated: 24.07.2026 - supersedes all prior versions. LFM / GP.