Privacy Policy

MILITARY PLUMBING AND HEATING LTD, trading as Warmwell("we", "us"), is the data controller for personal data processed through milplumbheat.shop. You can reach us at:

• 84 Malcolm Road Peterculter, AB14 0XB, Scotland
• Email: support@milplumbheat.shop
• Phone: +44 7550583200

We collect only what we need to run the shop and deliver your order:

• Order & fulfilment data you provide at checkout: name, email, phone, shipping address (delivery address, city, postal code and country) and the items in your order. This shipping address is used solely for order fulfilment and delivery.
• Contact & enquiry data you submit through our contact and wholesale forms: name, email, phone, country, subject and message.
• Account & membership data if you subscribe to Comfort Club: email and subscription status.
• Payment & billing data handled by Stripe. We receive confirmation and limited billing details (such as name, billing country and the last four digits of the card) — never your full card number.
• Technical data: essential cookies and basic, aggregated analytics such as pages viewed and device type.

Collection sources. Our collection sources are as follows. We collect this personal data from the following sources: (1) directly from you when you place an order, create a Comfort Club subscription, or submit a contact or wholesale form; (2) from our payment processor (Stripe) when an order or subscription is completed, which returns confirmation and limited billing details; and (3) automatically from your device through essential cookies and aggregated analytics when you browse the site.

When you buy a comfort set, we process your order and fulfilment information so we can complete the purchase and get it to you:

• Shipping address — the delivery address, city, postal code and country you enter at checkout, used only to pack and deliver your parcel.
• Order fulfilment records — the items purchased, order reference, order status and dispatch details we keep to fulfil the order, handle returns and meet accounting and tax duties.
• Carrier hand-off — for order fulfilment we share your name and shipping address with the postal or courier carrier delivering your parcel, and nothing more.
• Billing data — Stripe processes card payment and returns limited billing information; we never receive or store your full card number.

• To fulfil your order and deliver it — performance of a contract.
• To take payment and handle refunds/disputes — performance of a contract and legal obligation.
• To answer enquiries and provide support — legitimate interests and, where you contact us, your request.
• To retain incomplete checkout details for follow-up — consent (the GDPR checkbox at checkout and on our forms).
• To keep accounting and tax records — legal obligation.
• To keep the site secure and prevent fraud — legitimate interests.

We do not sell your personal data. We share it only with processors who help us operate:

• Payment: Stripe (checkout, subscriptions, refunds, disputes).
• Hosting: Vercel (website hosting and delivery).
• Database & storage: Supabase (orders, enquiries and membership records).
• Delivery: the postal and courier carriers that deliver your parcel, who receive your name and delivery address only.
• Email: our email provider, used to send order and support messages.

We may also disclose data where legally required, or to protect our rights and safety.

Some processors are located outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses or an adequacy decision. You can contact us for more detail on a specific transfer.

• Order and delivery records: kept as needed to fulfil the order and to meet accounting/tax obligations.
• Contact and wholesale enquiries and incomplete-checkout leads: retained for no more than 24 months, then deleted.
• Membership records: for the life of the subscription plus the period required for accounting.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data or complete incomplete data.
• Delete your data ("right to be forgotten").
• Restrict or object to processing, including direct marketing.
• Data portability.
• Withdraw consent at any time, without affecting prior processing.
• For California residents: know, delete, correct, and opt out of "sale" or "sharing" of personal information, and not be discriminated against for exercising these rights.

To exercise any right, email support@milplumbheat.shop.

We do not sell your personal information and we do not share it for cross-context behavioural advertising. If our practices ever change, we will update this policy and provide a clear opt-out mechanism before doing so.

We use essential cookies to run the cart and checkout, and limited, privacy-respecting analytics to understand general usage. See our Cookie Policy for details and choices. We do not store long-term marketing cookies without consent.

Our Comfort Finder gives suggestions only; it does not make decisions with legal or similarly significant effects, and a human is always available via support. See the Comfort Finder notice.

Warmwell is intended for adult purchasers. Accounts are not available to anyone under 13, and customers aged 13–17 should only use the site with the involvement of a parent or guardian. We do not knowingly collect data from children under 13; if you believe a child has provided data, contact us and we will delete it.

We use technical and organisational measures — encryption in transit, access controls and a payment boundary that keeps card numbers with Stripe — to protect your data. No method is perfectly secure, but we work to keep your information safe.

If you have a concern, contact us first at support@milplumbheat.shop. UK/EU customers also have the right to complain to their data protection authority (in the UK, the Information Commissioner's Office).