Privacy Policy

1. Introduction

ControlValv ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website controlvalv.com and use our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

2. Information We Collect

We may collect the following types of information:

3. How We Use Your Information

We use the information we collect to:

• Process and fulfil your orders and inquiries
• Manage your account and provide customer support
• Send transactional emails (order confirmations, shipping updates)
• Send marketing communications where you have opted in
• Improve our website, products, and services
• Comply with legal obligations and prevent fraud
• Analyse website usage to enhance user experience

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases: Contract (to fulfil orders), Legitimate Interests (to improve our services and prevent fraud), Legal Obligation (to comply with applicable laws), and Consent (for marketing communications, which you may withdraw at any time).

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data with:

• Payment processors (Stripe) to handle secure payment transactions
• Logistics partners to fulfil and ship your orders
• IT service providers who support our website infrastructure
• Legal authorities where required by law or court order

All third-party service providers are required to take appropriate security measures to protect your personal data.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Order and transaction records are typically retained for 7 years in compliance with UK tax law. Account data is retained while your account is active and for a reasonable period thereafter.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at [email protected].

8. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. We use essential cookies (required for the website to function), analytical cookies (to understand how visitors use our site), and functional cookies (to remember your preferences). You can control cookie settings through your browser preferences.

9. Security

We implement appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. All payment transactions are encrypted using SSL technology and processed through PCI-DSS compliant payment processors.

10. International Transfers

Some of our external third parties are based outside the UK. Where we transfer your personal data outside the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: the country has been deemed to provide an adequate level of protection, or we use specific contracts approved for use in the UK.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, or wish to exercise your rights, please contact us: