GDPR Policy

Last Updated: 10.12.2025

1. Introduction

This GDPR Policy explains how Tool Haven Ltd (“we,” “us,” or “our”) processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU GDPR. This page outlines your rights, the legal bases on which we process data, how long we retain information, and the safeguards we apply to protect your privacy.

2. Data Controller Information

Tool Haven Ltd is the Data Controller responsible for determining how and why your personal data is collected and processed. You may contact us with any GDPR-related inquiries at:
Email: info@toolshaven.co.uk
Phone: +44 73 1109 6350

3. Personal Data We Process

We may collect and process personal data that you provide directly, submit during checkout, enter when creating an inquiry, or that is automatically generated as part of using our website. This may include:

• Identity information such as name, postal address, and contact details.
• Transaction information including billing details, order history, and payment confirmations.
• Technical data such as IP address, device identifiers, browser information, usage statistics, and website interaction logs.
• Communication data including emails, messages, and support correspondence.

4. Legal Bases for Processing

We process personal data under the following lawful grounds:

• Contractual Necessity: Required for processing and delivering orders, customer service, or fulfilling any agreement with you.
• Legitimate Interests: For improving services, monitoring security, preventing fraud, and analysing website performance.
• Legal Obligations: For complying with laws such as tax and accounting requirements.
• Consent: For optional activities such as marketing emails or tracking cookies that require user approval.

5. How We Use Your Personal Data

We use your personal data to operate our website, process orders, provide customer support, personalise your shopping experience, manage security, and communicate updates or service information. We only process data that is necessary for each activity and ensure it is safeguarded at every stage.

6. Data Sharing

Your personal data may be shared with trusted third parties such as payment processors, courier partners, analytics providers, hosting providers, and IT security tools. These parties act under strict data processing agreements and are prohibited from using your information for their own purposes.

7. Transfers Outside the UK or EEA

If we transfer your personal data outside the UK or European Economic Area (EEA), we use approved safeguards such as Standard Contractual Clauses, adequacy regulations, or enhanced encryption. These measures ensure your data remains protected regardless of jurisdiction.

8. Data Retention

We retain personal data only for as long as necessary, based on the purpose of processing. This includes retention required for legal compliance, accounting, dispute resolution, fraud prevention, and legitimate business needs. Once data is no longer required, we securely delete or anonymise it.

9. Your Rights Under GDPR

Under GDPR, you have the following rights:

• The right to access the personal data we hold about you.
• The right to request correction of inaccurate information.
• The right to request deletion of data (“Right to be Forgotten”).
• The right to restrict or limit how we process your data.
• The right to object to processing under certain legal bases.
• The right to request data portability in a structured format.
• The right to withdraw consent for any consent-based processing.

You may exercise your rights by contacting us directly. We respond to all verified GDPR requests within one month.

10. Automated Decision-Making

Tool Haven Ltd does not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals.

11. Data Security

We apply rigorous technical and organisational security measures to protect personal data. These include encryption, firewalls, access controls, secure storage environments, and operational procedures designed to prevent unauthorised access, data loss, or misuse.

12. Complaints

If you believe your data rights have been violated, you may file a complaint with the Information Commissioner’s Office (ICO) or your local supervisory authority. We encourage you to contact us first so that we may address your concerns promptly.

13. Updates to This GDPR Policy

We may update this GDPR Policy from time to time to reflect legal, technical, or operational changes. Updated versions will be posted on this page, and your continued use of the website indicates acceptance of the revised terms.

14. Contact Information

For GDPR requests, inquiries, or rights-based submissions, contact:
Email: info@toolshaven.co.uk
Phone: +44 73 1109 6350