Privacy policy

Last updated: 28 May 2026

This Privacy Policy explains how Omnitub Ltd ("we", "us", "Omnitub") collects, uses, shares and protects your personal data when you visit our website, place an order, or otherwise interact with us. It is written in plain English so you can understand exactly what we do with your information.

We are committed to handling your data lawfully, fairly, and transparently under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Company name: Omnitub Ltd
Registered in: England & Wales · Companies House 05008946
VAT registration: GB236392792
Trading address: Unit 6 Works 22, Bennett Road, Highbridge, Somerset, TA9 4PW
Contact: info@omnitub.co.uk · +44 1934 751200
Data controller: Omnitub Ltd (we decide what data we collect and how it is used)

If you have questions about this policy or want to exercise your rights under UK GDPR, contact us at info@omnitub.co.uk and we will respond within 30 days.

2. What data we collect

We only collect data we need to deliver our products, run our business, and improve your experience.

When you visit omnitub.co.uk

Browser type, device type, screen size, operating system
IP address (used to detect fraud and improve the site — we don't store it long-term)
Pages visited, time on page, referring URL
Cookies and similar technologies (see Section 7)

When you place an order

Your name, email address, phone number, billing address, delivery address
Order contents, payment method (we do not store full card details — see Section 4)
Any notes you add to the order (delivery instructions, bespoke colour codes, etc.)
For trade accounts: company name, VAT number, contact role

When you contact us

Your name, email, phone, the content of your message
Any photographs, paint swatches, or technical drawings you send us for bespoke quotes
Sales call recordings (where you have consented at the start of the call)

When you subscribe to marketing

Your email address and (optionally) name
Your engagement with our emails (opens, clicks — anonymously aggregated for performance reporting)

3. Why we collect it — the legal bases

Under UK GDPR we must have a lawful basis for every use of your data. We rely on:

Contract — to fulfil your order, deliver your product, handle returns, provide customer service
Legitimate interests — to operate our website securely, prevent fraud, improve our products, conduct anonymous analytics
Consent — for marketing emails, marketing SMS, optional cookies, recording calls
Legal obligation — to retain financial records for HMRC (6 years) and resolve disputes

You can withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

4. Payments — we never see your card

When you pay on our site, your card details go directly from your browser to our payment processors (Shopify Payments, Apple Pay, Google Pay, Shop Pay, Klarna, PayPal). We receive only a confirmation that the payment succeeded plus the last four digits and card brand for receipt purposes. We never store, see, or transmit your full card number.

5. Who we share your data with

We share your data only with trusted partners who help us deliver our service. Each partner is bound by contract to use your data only for the purpose we share it.

Order fulfilment

Shopify Inc. — our e-commerce platform. Stores your account, orders, addresses.
Shipping & logistics providers — the carriers and delivery partners who fulfil UK and international orders. They receive your delivery address (and, where needed, phone, email and parcel dimensions) to complete delivery, provide tracking, calculate live shipping rates and handle customs.

Payments

Shopify Payments / Stripe — primary card processor
Klarna — pay-later option
PayPal — payment alternative
Apple Pay / Google Pay / Shop Pay — wallet payments

Marketing & analytics (with your consent)

Advertising, analytics & review providers — we use trusted, industry-standard tools to measure how our website performs, to show relevant advertising, and to invite verified customer reviews. Where data is used for advertising, only hashed (not plain-text) identifiers are ever shared. You can withdraw consent at any time through your cookie settings or the opt-out links in our emails.

Email & messaging

Email & messaging providers — we use trusted providers to send order and account updates (such as confirmations and delivery notices) and, with your consent, marketing messages and order notifications.

Operational

Operational & security tools — we use trusted providers for website security and hosting, fraud prevention, accounting and invoicing, and internal business operations.

We do not sell your personal data to anyone, ever.

6. International transfers

Some of our partners are based outside the UK or EEA (including some providers based in the United States). When your data is transferred to these countries, we rely on: - Adequacy decisions issued by the UK government (where applicable) - Standard Contractual Clauses (SCCs) approved by the European Commission and recognised by the UK - The UK Data Bridge to the United States (US Privacy Framework)

All partners we use have public privacy commitments and security certifications appropriate to their role.

7. Cookies

We use cookies and similar technologies to make the site work, remember your preferences, analyse traffic, and (with your consent) show you relevant ads.

Essential cookies — always on

Needed for the site to function (shopping cart, checkout, security). No consent required.

Functional cookies — optional

Remember your preferences (currency, language, recently viewed). You can disable these in our cookie banner.

Analytics cookies — optional

Anonymous traffic measurement. Consent required and asked for via the cookie banner.

Marketing cookies — optional

Used to show you relevant advertising. Consent required and asked for via the cookie banner. You can opt out at any time.

You can change your cookie preferences any time via the cookie banner (bottom of every page) or your browser settings.

8. How long we keep your data

Data type	Retention period
Order records	6 years (HMRC requirement)
Customer account	Until you ask us to delete it, then 30 days for safety
Marketing email list	Until you unsubscribe + 30 days
Website analytics	14 months
Sales call recordings	2 years for quality assurance
Quote drafts	1 year (then auto-archived)
Email correspondence	3 years

9. Your rights under UK GDPR

You have the right to:

Access — request a copy of all personal data we hold about you
Rectify — correct any inaccurate or incomplete data
Erase — ask us to delete your data ("right to be forgotten")
Restrict processing — ask us to limit how we use your data
Data portability — receive your data in a machine-readable format
Object — to direct marketing or to legitimate-interest processing
Withdraw consent — at any time, for any consent-based processing
Lodge a complaint — with the UK Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113

To exercise any of these rights, email info@omnitub.co.uk. We respond within 30 days.

10. Children's data

Our products are not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us and we will delete it.

11. Security

We use industry-standard security measures including HTTPS encryption, access controls, encrypted databases, and regular security audits. No system is 100% secure, but we apply best-practice safeguards to protect your data and notify you within 72 hours if a breach affects your personal data.

12. Updates to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. For material changes (new data uses, new partners), we will notify you via email or a banner on the site.

13. Contact us

For any privacy question, request, or complaint:

Email: info@omnitub.co.uk
Phone: +44 1934 751200
Post: Omnitub Ltd, Unit 6 Works 22, Bennett Road, Highbridge, Somerset TA9 4PW

If we cannot resolve your concern, you have the right to complain to the UK Information Commissioner's Office:

ICO website: https://ico.org.uk/make-a-complaint
ICO phone: 0303 123 1113