Privacy Policy

Data Controller: Total Sheds, 30 Dudley Road West, Tividale, B69 2HW. Telephone: 0121 740 0132. Email: info@totalsheds.co.uk.

As the data controller, we are responsible for deciding how we hold and use personal information about you.

We collect information when you create an account, place an order, browse products and request quotes, contact us, subscribe to marketing, leave feedback, or register a warranty. This may include:

• Identity Data: full name, date of birth
• Contact Data: email, phone, billing and delivery address
• Business Data: company name, VAT number, business address (trade accounts)
• Financial Data: payment card details (processed securely by Stripe, not stored by us)
• Transaction Data: payments, orders, products purchased
• Marketing Data: your communication preferences
• Profile Data: username, password, purchase history, saved configurations

We also automatically collect Technical Data (IP address, browser/OS), Usage Data, Marketing Attribution Data (UTM parameters, referral source) and Device Data when you visit our site, and use cookies as described in Section 8.

Under UK GDPR we process your data under one of these bases:

• Contract Performance — processing orders, delivering products, customer service
• Legal Obligation — tax records, warranty obligations, consumer protection laws
• Legitimate Interests — fraud prevention, website security, business analytics
• Consent — marketing communications, optional cookies, newsletters

Order processing and fulfilment; customer service and warranty claims; account management; marketing communications (with consent) and transactional emails; and business operations such as fraud prevention, analytics and legal compliance.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We share data only with trusted providers: Stripe (payments — we never store full card details), Resend (transactional/marketing email), Google Tag Manager/Analytics and Meta Pixel (analytics and advertising), and our cloud infrastructure provider. We may disclose information to comply with legal obligations, protect our rights, prevent fraud, or enforce our Terms & Conditions, and as part of a merger, acquisition, or sale of assets (with notice to you).

We use encryption in transit (SSL/TLS), secure password hashing, access controls, PCI-DSS compliant payment processing (Stripe), regular backups and staff training.

Important: no method of transmission over the internet or electronic storage is 100% secure — we cannot guarantee absolute security.

• Order & transaction data: 7 years (accounting/tax)
• Warranty records: up to 30 years (warranty duration plus a reasonable claim period)
• Marketing consent: until withdrawn, or 3 years of inactivity
• Account data: until deletion requested, or 3 years of inactivity
• Website analytics: 26 months (Google Analytics default)

We use essential cookies (required for core functionality — sessions, login, basket), analytics cookies (Google Tag Manager/Analytics), marketing cookies (campaign and conversion tracking) and preference cookies. You can control cookies via your browser settings; blocking essential cookies may affect functionality like the basket or Build Studio.

You have the right to access, rectify, erase ("right to be forgotten"), restrict processing, port, and object to processing of your data, and to withdraw consent at any time. You may also lodge a complaint with the ICO. To exercise any of these rights, contact info@totalsheds.co.uk or 0121 740 0132 — we respond within one month.

We only send marketing with your explicit consent or a legitimate interest (existing customers). Opt out via the unsubscribe link in any marketing email, your account preferences, or by contacting us — this does not stop transactional emails (order confirmations, delivery updates, warranty information).

Your data is primarily stored and processed in the UK. Where a service provider is located outside the UK/EEA, we ensure appropriate safeguards (Standard Contractual Clauses, adequacy decisions, or Binding Corporate Rules).

Our site may link to third-party websites. We are not responsible for their privacy practices — please read their own policies.

Our services are intended for adults aged 18 and over. We do not knowingly collect data from children under 18 — contact us immediately if you believe we have.

We may update this policy to reflect changes in our practices, technology, or legal requirements, and will post the updated policy here with a new "Last updated" date.

If you believe we have not handled your data properly, you may complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Telephone: 0303 123 1113.

Total Sheds — Data Protection. Address: 30 Dudley Road West, Tividale, B69 2HW. Telephone: 0121 740 0132. Email: info@totalsheds.co.uk. We aim to respond to data protection inquiries within 48 hours and fulfil subject access requests within one month.