Privacy policy

Last updated: 29 September 2026

This Privacy Policy explains how Omnitub Ltd ("we", "us", "Omnitub") collects, uses, shares and protects your personal data when you visit our website, place an order, or otherwise interact with us. It is written in plain English so you can understand exactly what we do with your information.

We are committed to handling your data lawfully, fairly, and transparently under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

• Company name: Omnitub Ltd
• Registered in: England & Wales · Companies House 05008946
• VAT registration: GB236392792
• Trading address: Unit 6 Works 22, Bennett Road, Highbridge, Somerset, TA9 4PW
• Contact: info@omnitub.co.uk · +44 1934 751200
• Data controller: Omnitub Ltd (we decide what data we collect and how it is used)

If you have questions about this policy or want to exercise your rights under UK GDPR, contact us at info@omnitub.co.uk and we will respond within 30 days.

2. What data we collect

We only collect data we need to deliver our products, run our business, and improve your experience.

When you visit omnitub.co.uk

• Browser type, device type, screen size, operating system
• IP address (used to detect fraud and improve the site — we don't store it long-term)
• Pages visited, time on page, referring URL
• Cookies and similar technologies (see Section 7)

When you place an order

• Your name, email address, phone number, billing address, delivery address
• Order contents, payment method (we do not store full card details — see Section 4)
• Any notes you add to the order (delivery instructions, bespoke colour codes, etc.)
• For trade accounts: company name, VAT number, contact role

When you contact us

• Your name, email, phone, the content of your message
• Any photographs, paint swatches, or technical drawings you send us for bespoke quotes
• WhatsApp messages you send to +44 1934 751200 and our replies — including any photos or documents you share in the chat
• Sales call recordings (where you have consented at the start of the call)

When you subscribe to marketing

• Your email address and (optionally) name
• Your engagement with our emails (opens, clicks — anonymously aggregated for performance reporting)

When you save a design or basket

If you save a Drawing Room design or basket, we keep the choices you made (sizes, colours, fittings) under a random link so you can reopen it on another device. The saved design holds no name, email address or phone number, but anyone you give the link to can open it. If you ask us to email the link to you, we use your address only to send that one email and do not keep it.

How you found us

We note on each order how you found us — the ad, search or email that brought you to our website — including orders you finish by phone, so we can see which of our marketing works. The ad-click code that identifies your visit is only kept if you accept marketing cookies.

To see which of our ads lead to sales, we tell Google, Meta and Microsoft when an order follows one of their ads, and share the contact details from your order (email address, phone number, name and address) with Google and Meta only in a scrambled (hashed) form — we rely on our legitimate interest in measuring our advertising, we never share your contact details for website orders where you declined marketing cookies, and you can object at any time by emailing info@omnitub.co.uk.

When you leave your details in the Drawing Room

If you give us your mobile number or email in the Drawing Room, we use it to send your drawing and follow up about your build.

If you tick the box “Yes — you can use my details to measure your ads”, we also share your mobile number or email with Google and Meta in a scrambled (hashed) form, so we can see which of our ads lead to enquiries and orders. The box is never ticked for you, leaving it unticked changes nothing about your drawing or quote, and you can withdraw at any time by emailing info@omnitub.co.uk.

When you use Match my tile

If you upload a photo of a tile, only the area you crop is sent to us — the photo is redrawn on your device first, so location and camera details are removed. We check each upload automatically, including with an AI service, measure its colour to suggest matching RAL colours, keep it privately for 30 days and then delete it. If you ask us to send your result by email, we use your name and email address to send it and, if we can help further, to follow up about your tile.

3. Why we collect it — the legal bases

Under UK GDPR we must have a lawful basis for every use of your data. We rely on:

• Contract — to fulfil your order, deliver your product, handle returns, provide customer service
• Legitimate interests — to operate our website securely, prevent fraud, improve our products, conduct anonymous analytics
• Consent — for marketing emails, marketing SMS, optional cookies, recording calls
• Legal obligation — to retain financial records for HMRC (6 years) and resolve disputes

You can withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

4. Payments — we never see your card

When you pay on our site, your card details go directly from your browser to our payment processors (Shopify Payments, Apple Pay, Google Pay, Shop Pay, Klarna, PayPal). We receive only a confirmation that the payment succeeded plus the last four digits and card brand for receipt purposes. We never store, see, or transmit your full card number.

5. Who we share your data with

We share your data only with trusted partners who help us deliver our service. Each partner is bound by contract to use your data only for the purpose we share it.

Order fulfilment

• Shopify Inc. — our e-commerce platform. Stores your account, orders, addresses.
• Shipping & logistics providers — the carriers and delivery partners who fulfil UK and international orders. They receive your delivery address (and, where needed, phone, email and parcel dimensions) to complete delivery, provide tracking, calculate live shipping rates and handle customs.

Payments

• Shopify Payments / Stripe — primary card processor
• Klarna — pay-later option
• PayPal — payment alternative
• Apple Pay / Google Pay / Shop Pay — wallet payments

Marketing & analytics (with your consent)

• Advertising, analytics & review providers — we use trusted, industry-standard tools to measure how our website performs, to show relevant advertising, and to invite verified customer reviews. Where data is used for advertising, only hashed (not plain-text) identifiers are ever shared. You can withdraw consent at any time through your cookie settings or the opt-out links in our emails.

Email & messaging

• Email & messaging providers — we use trusted providers to send order and account updates (such as confirmations and delivery notices) and, with your consent, marketing messages and order notifications.

Operational

• AI services — an AI provider helps us check photos uploaded to Match my tile and draft replies to messages; it processes them only to provide that service to us.
• Operational & security tools — we use trusted providers for website security and hosting, fraud prevention, accounting and invoicing, and internal business operations.

We do not sell your personal data to anyone, ever.

6. International transfers

Some of our partners are based outside the UK or EEA (including some providers based in the United States). When your data is transferred to these countries, we rely on: - Adequacy decisions issued by the UK government (where applicable) - Standard Contractual Clauses (SCCs) approved by the European Commission and recognised by the UK - The UK Data Bridge to the United States (US Privacy Framework)

All partners we use have public privacy commitments and security certifications appropriate to their role.

7. Cookies

We use cookies and similar technologies to make the site work, remember your preferences, analyse traffic, and (with your consent) show you relevant ads.

Essential cookies — always on

Needed for the site to function (shopping cart, checkout, security). No consent required.

Functional cookies — optional

Remember your preferences (currency, language, recently viewed). You can disable these in our cookie banner.

Analytics cookies — optional

Anonymous traffic measurement. Consent required and asked for via the cookie banner.

Marketing cookies — optional

Used to show you relevant advertising. Consent required and asked for via the cookie banner. You can opt out at any time.

You can change your cookie preferences any time via the cookie banner (bottom of every page) or your browser settings.

8. How long we keep your data

Data type	Retention period
Order records	6 years (HMRC requirement)
Customer account	Until you ask us to delete it, then 30 days for safety
Marketing email list	Until you unsubscribe + 30 days
Website analytics	14 months
Sales call recordings	12 months, then deleted automatically
WhatsApp conversations	12 months from each message, then the message text, photos and documents are deleted automatically. We keep only a record that you contacted us and when.
Saved designs and baskets	12 months from your last change, then deleted automatically
Match my tile photos	30 days, then deleted automatically
Quote drafts	1 year (then auto-archived)
Email correspondence	3 years

9. Your rights under UK GDPR

You have the right to:

• Access — request a copy of all personal data we hold about you
• Rectify — correct any inaccurate or incomplete data
• Erase — ask us to delete your data ("right to be forgotten")
• Restrict processing — ask us to limit how we use your data
• Data portability — receive your data in a machine-readable format
• Object — to direct marketing or to legitimate-interest processing
• Withdraw consent — at any time, for any consent-based processing
• Lodge a complaint — with the UK Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113

To exercise any of these rights, email info@omnitub.co.uk. We respond within 30 days.

10. Children's data

Our products are not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us and we will delete it.

11. Security

We use industry-standard security measures including HTTPS encryption, access controls, encrypted databases, and regular security audits. No system is 100% secure, but we apply best-practice safeguards to protect your data and notify you within 72 hours if a breach affects your personal data.

12. Updates to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. For material changes (new data uses, new partners), we will notify you via email or a banner on the site.

13. Contact us

For any privacy question, request, or complaint:

• Email: info@omnitub.co.uk
• Phone: +44 1934 751200
• Post: Omnitub Ltd, Unit 6 Works 22, Bennett Road, Highbridge, Somerset TA9 4PW

If we cannot resolve your concern, you have the right to complain to the UK Information Commissioner's Office:

• ICO website: https://ico.org.uk/make-a-complaint
• ICO phone: 0303 123 1113