Privacy Policy
Last updated 22 June 2026. This policy covers both the EU/UK GDPR and the California CCPA/CPRA.
RICHARD THOMPSON AND SONS (PLUMBING AND HEATING) LTD("Rthompsonsons", "we", "us") is the data controller for rthompsonsons.shop. We respect your privacy and only collect what we need to run the shop.
1. Who we are
Controller: RICHARD THOMPSON AND SONS (PLUMBING AND HEATING) LTD, a company registered in Scotland (No. SC280329).
Registered office: 26a Seatown, Lossiemouth, Scotland, IV31 6JJ.
Contact: privacy@rthompsonsons.shop or support@rthompsonsons.shop, +44 7585 666788.
2. What we collect
- Order data — name, shipping and billing address, email, phone.
- Payment data — processed directly by Stripe (and PayPal where offered). We never see or store full card numbers.
- Account / enquiry data — anything you send via our contact or bulk-order forms.
- Technical data — IP address, device and browser type, and cookie identifiers (see our Cookie Policy).
3. How and why we use it (legal bases)
| Purpose | Legal basis (GDPR) |
|---|---|
| Process and deliver your order | Performance of a contract |
| Customer service and returns | Performance of a contract / legitimate interest |
| Fraud prevention and site security | Legitimate interest / legal obligation |
| Accounting and tax records | Legal obligation |
| Analytics and marketing emails | Consent (you can withdraw any time) |
4. Who we share it with
We share data only with processors that help us run the shop:
- Stripe — payment processing.
- PayPal — payment processing (where selected).
- Our hosting and email providers — to serve the site and send order and enquiry messages.
- Couriers — to deliver your order.
We do not sell or share your personal information for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA.
5. International transfers
Some processors are outside the UK/EEA. Where that happens, transfers are covered by appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.
6. How long we keep it
Order and accounting records are kept for as long as the law requires (typically 6 years for tax). Enquiry data is kept only as long as needed to help you, then deleted.
7. Your rights
Under the GDPR you can access, correct, delete, port, restrict or object to our processing, and withdraw consent at any time.
Under the CCPA/CPRA (California residents) you have the right to know, to delete, to correct, to opt out of any sale or sharing, and not to be discriminated against for exercising those rights.
To exercise any right, email privacy@rthompsonsons.shop. We respond within the time limits set by law. You may also complain to your local data protection authority (in the UK, the ICO).
8. Cookies
We use essential cookies to run the store and, only with your consent, analytics cookies. EU/UK visitors are asked before any non-essential cookie loads. See the Cookie Policy.
9. Security
The site runs over HTTPS and payment data is handled by Stripe's PCI-DSS compliant systems — it never touches our servers.
10. Changes
We'll post any updates here with a new "last updated" date. Material changes will be highlighted on the site.