Copyright © 2020
At Water Heaters 4U Ltd, we are committed to ensuring and protecting your privacy at any time you are
and provides a detailed explanation as to how we may use your personal information provided to us or
any we collect through legal means.
on which any personal data we collect from you, or that you provide to us, will be processed by us. Please
read the following carefully to understand our views and practices regarding your personal data and how
we will treat it.
We do occasionally update this policy so please refer back to it in the future.
Definitions and Interpretation:
"Zip 4U Ltd T/A Water Heaters 4U Ltd, 73 Aughnagar Road, Galbally, Dungannon, Co Tyrone, BT70 2PN
"We/Us/Our" means Water Heaters 4U Ltd (See above).
"Account" means an account required to access and/or use certain areas and features of Our group of
"Personal data" means any and all data that relates to an identifiable person who can be directly or
indirectly identified from that data. In this case, it means personal data that you give to Us via Our Site(s).
This definition shall, where applicable, incorporate the definitions provided in the Data Protection Act 1998
OR EU Regulation 2016/679 - the General Data Protection Regulation ("GDPR").
As a data subject, you have the following rights under the GDPR, which this Policy and Our use of
personal data have been designed to uphold:
" The right to be informed about Our collection and use of personal data;
" The right of access to the personal data We hold about you (see section - How to access your data);
" The right to rectification if any personal data We hold about you is inaccurate or incomplete (please
section - How to rectify data or contact Us);
" The right to be forgotten - i.e. the right to ask Us to delete any personal data We hold about you (We
only hold your personal data for a limited time, as explained in the section below (How we use Your data)
" The right to restrict (i.e. prevent) the processing of your personal data.
" The right to data portability (obtaining a copy of your personal data to re-use with another service or
" The right to object to Us using your personal data for particular purposes.
" Rights with respect to automated decision making and profiling.
The processing of your data is either based on your consent or in case the processing is necessary for the
performance of a contract to which you are a party, or in order to take steps at your request prior to
entering into a contract, ref. GDPR art. 6(1) (a)-(b).
If the processing is based on your consent (An example of which is email marketing), you may at any time
withdraw your consent by either updating your preferences or by contacting us direct.
In order to enter into a contract regarding the purchase of Our service(s), you must provide us with the
required personal data. If you do not to provide Us with all the required information, it will not be possible
to provide those service(s).
If you have any cause for complaint about Our use of your personal data, please contact Us and We will
do Our best to solve the problem for you. If We are unable to help, you also have the right to lodge a
complaint with the UK's supervisory authority, the Information Commissioner's Office. For further
information about your rights, please contact the Information Commissioner's Office or your local Citizens
Information We Collect from You
Data can be collected and processed for legitimate interests when our site/s are in operation by you. The
following are approved methods of collection:
" If you register for information or complete a purchase, by filling out a form we can collect the
" Corresponding with us by phone, e-mail, support ticket or otherwise.
" Traffic data, weblogs, location data, and any other communication can be collected. These details come
from your visit to our site and any services / resource tools you use while on the site. See section on
analytics in addition
" Any communication on our website or to personnel allows us to collect information.
" Some information is shared with third party business partners, sub-contractors in technical, payment
and delivery services, analytics providers, search information providers, credit reference agencies to
provide You a better user experience. Any data shared is restricted and limited for the purpose it is
The information collected is dependent on your activity but could be from the below datasets:
" Your name
" Business / Company Name
" Contact information [Address, Email addresses, telephone numbers]
" Financial payment method
" Your Opted In & Out preferences regarding methods & types of communications
" IP Address
" Web browser type and version, including OS type and version
" Access & Activity logs, including full URLs, click to & through data, Site(s) search data, response times
and errors. (Reference Privacy & Electronic Communications Regulations 2003 & Investigatory Powers Act
Please note we use third party payment gateways for online invoices and therefore do not collect
credit/debit card information.
How we use Your data
All personal data is processed and stored securely, for no longer than is necessary in light of the reason(s)
for which it was first collected. We will comply with Our obligations and safeguard your rights under the
Data Protection Act 1998 and GDPR at all times.
Our use of your personal data will always have a lawful basis, either because it is necessary for Our
performance of a contract with you, because you have consented to Our use of your personal data (e.g.
by subscribing to emails), or because it is in Our legitimate interests. We may use your data for the
" Providing and managing your Account.
" Providing and managing your access to Our Site(s)
" Personalising and tailoring your experience on Our Site(s)
" Personalising and tailoring Our products and/or services for you
" Supplying Our products and/or services to you (please note that We require your personal data in order
to enter into a contract with you)
" To conduct manual or systematic monitoring for fraud and other harmful activity
" To process payments with our payment gateway companies (PayPal & BACS)
" Replying to emails from you
" Supplying you with emails that you have opted into (you may unsubscribe or opt-out at any time)
" Supplying you with emails about the product(s) and/or service(s) you have (E.g. usage stats, summary
digests, how to use the service)
" Analysing your use of Our Site(s) and gathering feedback to enable Us to continually improve Our Site(s)
and your user experience
" For audits, regulatory purposes, and compliance with industry standards
With your permission and/or where permitted by law, We may also use your data for marketing purposes
which may include contacting you by email, telephone or post with information, news and offers on Our
products and/or services.
We will not, however, send you any unsolicited marketing and will take all reasonable steps to ensure that
We fully protect your rights and comply with Our obligations under the Data Protection Act 1998, GDPR
and the Privacy and Electronic Communications (EC Directive) Regulations 2003.
How we store your data
We only keep your personal data for as long as We need to for legitimate and lawful purposes. All
information you provide to us is stored on our secure servers. We use third party payment gateways and
so do not store any card details.
The majority of your data will be stored within the European Economic Area ("the EEA"), however some of
your data may be stored outside of the EEA (The EEA consists of all EU member states, plus Norway,
Iceland, and Liechtenstein). You are deemed to accept and agree to this by using Our Site and submitting
information to Us. If We do store data outside the EEA, We will take all reasonable steps to ensure that
your data is treated as safely and securely as it would be within the UK and under the Data Protection Act
1998 and GDPR.
Where we have given you (or where you have chosen) a password which enables you to access certain
parts of our site, you are responsible for keeping this password confidential. We ask you not to share a
password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will
do our best to protect your personal data, we cannot guarantee the security of your data transmitted to
our site; any transmission is at your own risk. Once we have received your information, we will use strict
procedures and security features to try to prevent unauthorised access.
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or
disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and
secure the information we collect online.
Do we share your data?
Some of your personal data is passed to third parties during order processing. For example, providing
your personal data to a payment gateway provider for invoice fulfilment, or providing your personal data
for fraud checks during the order processing.
In certain circumstances, We may be legally required to share certain data held by Us, which may include
your personal data, for example, where We are involved in legal proceedings, where We are complying
with legal obligations, a court order, or a government authority.
We may compile statistics about the use of Our Site(s) including data on traffic, usage patterns, user
numbers, sales, and other information. All such data will be anonymised and will not include any
personally identifying data, or any anonymised data that can be combined with other data and used to
identify you. The third-party data processors used by Us, which could be located outside of the European
Economic Area ("the EEA") (The EEA consists of all EU member states, plus Norway, Iceland, and
Liechtenstein). Where We transfer any personal data outside the EEA, We will take all reasonable steps to
ensure that your data is treated as safely and securely as it would be within the UK and under the Data
Protection Act 1998 and GDPR.
How Can You Control Your Data?
You have choices regarding our use and disclosure of Your Personal Data:
" Opting out of receiving electronic communications from us. If You no longer want to receive
marketing-related emails from us on a going-forward basis, You may opt-out via the unsubscribe link
included in such emails or by updating your opt-in/opt-out status in your personal settings of the site(s).
We will try to comply with Your request(s) as soon as reasonably practicable.
Please note that if You opt-out of receiving marketing-related emails from us, we may still send You
important administrative messages that are required to provide You with our Services.
" How You can access or change Your Personal Data. If You would like to review, correct, or update
Personal Data that You have previously disclosed to us, You may do so by contacting us.
If emailing us Your request, please make clear in the email what Personal Data You would like to have
changed. For Your protection, we may only implement requests with respect to the Personal Data
associated with the particular email address that You use to send us Your request, and we may need to
verify Your identity before implementing Your request. We will try to comply with Your request as soon as
Your Right to Withhold Information
You may access certain areas of Our Site(s) without providing any data at all. However, to use all features
and functions available on Our Site you may be required to submit or allow for the collection of certain
Your right to be forgotten
You have the right to request that We delete your personal data at any time unless that data is necessary
for us to provide you with services or We are required to retain it to fulfil Our legal obligations. (e.g.
financial information is retained for 7yrs - reference UK HMRC Tax laws)
unless a longer retention period is required or permitted by law. Please note that we have a variety of
obligations to retain the Data that You provide to us, including to ensure that transactions can be
appropriately processed, settled, refunded or charged-back, to help identify fraud and to comply with
anti-money laundering and other laws and rules that apply to us and to our financial service providers.
To protect your payment details We do not store card information. We use the below third-party payment
PayPal, payments made via the PayPal gateway can be either with or without a PayPal account, including
credit and debit card payments.
BACS, for selected customers payment by BACS is possible.
In order to process your payment, it is necessary to pass some of your personal data (name, address and
purchase details) to the third-party payment provider.
We use Google Analytics to monitor our website statistics. Google Analytics sets session cookies to help us
accurately estimate the number of visitors to the website and volumes of usage. This to ensure that the
service is available when you want it and fast. For more information about Google Analytics visit Google
The facts collected about you are statistical only. No identifying information will be shared about our
visitors and how they made use of our site. No personal details will ever be shared.
Links to other websites
Our site(s) may contain links to other websites of interest. However, once you have used these links to
leave our site(s), you should note that we do not have any control over that other site. Therefore, we
cannot be responsible for the protection and privacy of any information which you provide whilst visiting
such sites and such site(s) are not governed by this privacy statement. You should exercise caution and
look at the privacy statement applicable to the website in question.
Controlling your personal information
You may choose to restrict the collection or use of your personal information at any time. If you have
previously agreed to us using your personal information for direct marketing purposes, you may change
your mind at any time by using the opt-out/unsubscribe in the message or updating your personal
preferences. Alternatively, you can also do so by writing to or emailing us.
We will not sell, distribute or lease your personal information to third parties unless we have your
permission or are required by law to do so. You may request details of your personal information which we
hold about you under the Data Protection Act 1998 and GDPR. If you believe that any information we are
holding about you is incorrect or incomplete, please write to us or email us as soon as possible and we will
promptly correct any information found to be incorrect.