This notice explains how personal information is handled when you browse Barrier Shop, ask for product guidance or a quotation, create an account, place an order, or arrange manufacture, delivery and installation.
Effective date: 19 July 2026
The controller
Height Barriers Ltd, operating Barrier Shop, is the data controller. The company is registered in England and Wales under number 14309958 at Unit 5, Vastre Industrial Estate, Newtown, Powys, SY16 1DZ. Privacy enquiries can be sent to sales@heightbarriers.co.uk or made by calling 01686 213370.
Information we may hold
- Contact and identity information: name, organisation, role, email, phone and billing or delivery address.
- Enquiry and project information: measurements, product requirements, drawings, photographs, quantities, vehicle details, requested dates and correspondence.
- Account and order records: login information, preferences, quotations, purchases, delivery history, invoices, returns and support.
- Payment status: amounts, method, settlement and refund records. Complete card credentials are intended to be handled by the payment provider, not stored by this website.
- Technical data: IP address, browser, device, server and security logs, pages used, referrals and cookie preferences.
- Marketing choices: whether you want product or company updates and how you prefer to receive them.
Purposes and legal bases
- To answer an enquiry, prepare specifications or pricing and take requested steps before a contract.
- To accept and fulfil orders, manufacture products, provide installation or delivery, manage accounts and deal with after-sales issues under a contract.
- To keep tax, accounting, safety and legal records and comply with lawful requests.
- To operate and secure the website, prevent misuse, maintain accounts and diagnose faults under our legitimate interests.
- To improve product information and plan services using legitimate interests and, where practical, aggregated data.
- To send marketing where consent has been given or electronic-marketing law permits relevant contact with an existing business customer. An opt-out is provided.
- To use optional analytics or advertising technologies only on the basis of consent where consent is required.
Sources and sharing
Information comes directly from you, from website and server activity, and where relevant from payment providers, carriers, installers, professional advisers and public business sources. We do not sell personal information. Necessary data may be shared with hosting and IT providers, ecommerce services, checkout providers, couriers, installers, communications suppliers, accountants, insurers, advisers, regulators, courts and law-enforcement bodies.
Service providers must protect information and use it only for the agreed service. Where information is transferred outside the UK, an appropriate UK safeguard is used when required, such as adequacy regulations or approved contractual clauses.
Retention
- Core contract, transaction and invoice records are usually retained for six years after the relevant relationship or transaction.
- General enquiries and quotations that do not proceed are normally reviewed after 24 months.
- Account information remains while the account is active, subject to transaction-retention duties.
- Marketing data is kept until opt-out or it is no longer useful; a minimal suppression record may remain to honour an opt-out.
- Routine server and security logs are normally retained for up to 12 months unless an incident requires longer investigation.
Cookies
Necessary cookies support security, login, basket, checkout and your privacy choices. Optional analytics or marketing cookies should be used only after the required choice has been recorded. Browser settings can also limit cookies, although blocking necessary cookies may prevent account or checkout functions from operating.
Your rights
Depending on the situation, UK data-protection law may let you request access, correction, erasure, restriction or portability; object to legitimate-interest processing or direct marketing; and withdraw consent. Rights are not absolute and record-keeping duties may continue. We may verify identity before responding.
You may complain to the Information Commissioner’s Office at ico.org.uk. We would welcome the opportunity to resolve the concern first.
Security, children and updates
We use proportionate access, encryption, maintenance, backup and monitoring controls, described further in the Security Policy. This trade website is not intended for children and we do not knowingly seek their information. This notice may be updated as providers, services or legal requirements change; the effective date will be revised on this page.