This notice explains how personal information is handled when you browse Barrier Shop, ask for product guidance or a quotation, create an account, place an order, or arrange manufacture, delivery and installation.
Effective date: 11 August 2026
The controller
Height Barriers Ltd, operating Barrier Shop, is the data controller. The company is registered in England and Wales under number 14309958 at Unit 5, Vastre Industrial Estate, Newtown, Powys, SY16 1DZ. Privacy enquiries can be sent to info@barriershop.co.uk or made by calling 01686 213370.
Information we may hold
- Contact and identity information: name, organisation, role, email, phone and billing or delivery address.
- Enquiry and project information: measurements, product requirements, drawings, photographs, quantities, vehicle details, requested dates and correspondence.
- Account and order records: login information, preferences, quotations, purchases, delivery history, invoices, returns and support.
- Payment status: amounts, method, settlement and refund records. Complete card credentials are intended to be handled by the payment provider, not stored by this website.
- Technical data: IP address, browser, device, server and security logs, pages used, referrals and cookie preferences.
- Marketing choices: whether you want product or company updates and how you prefer to receive them.
Purposes and legal bases
- To answer an enquiry, prepare specifications or pricing and take requested steps before a contract.
- To accept and fulfil orders, manufacture products, provide installation or delivery, manage accounts and deal with after-sales issues under a contract.
- To keep tax, accounting, safety and legal records and comply with lawful requests.
- To operate and secure the website, prevent misuse, maintain accounts and diagnose faults under our legitimate interests.
- To improve product information and plan services using legitimate interests and, where practical, aggregated data.
- To send marketing where consent has been given or electronic-marketing law permits relevant contact with an existing business customer. An opt-out is provided.
- To use optional analytics or advertising technologies only on the basis of consent where consent is required.
Sources and sharing
Information comes directly from you, from website and server activity, and where relevant from payment providers, carriers, installers, professional advisers and public business sources. We do not sell personal information. Necessary data may be shared with hosting and IT providers, ecommerce services, checkout providers, couriers, installers, communications suppliers, accountants, insurers, advisers, regulators, courts and law-enforcement bodies.
Service providers must protect information and use it only for the agreed service. Where information is transferred outside the UK, an appropriate UK safeguard is used when required, such as adequacy regulations or approved contractual clauses.
Retention
- Core contract, transaction and invoice records are usually retained for six years after the relevant relationship or transaction.
- General enquiries and quotations that do not proceed are normally reviewed after 24 months.
- Account information remains while the account is active, subject to transaction-retention duties.
- Optional live-basket contents are retained for up to 30 days after the last activity, then removed when the record is archived. Summary status, value and timing information may remain for aggregate reporting until it is no longer required.
- Marketing data is kept until opt-out or it is no longer useful; a minimal suppression record may remain to honour an opt-out.
- Routine server and security logs are normally retained for up to 12 months unless an incident requires longer investigation.
Cookies and similar technologies
Necessary cookies support security, login, the shopping basket, checkout and your privacy choice. WooCommerce basket cookies remember selected products and normally last for the browser session or up to two days. The bd_cookie_consent cookie stores whether optional analytics were accepted or rejected for six months. These technologies are required to provide features you request and cannot be switched off through our preference control.
Optional analytics and basket-activity technologies run only after you accept them. Jetpack Stats, WooCommerce Analytics and WooCommerce order attribution may then measure page and product views, additions to or removals from the basket, checkout activity, referrals and basic device information. Live Carts for WooCommerce records a random basket ID, products, quantities, value, coupons, activity times, conversion status and, for a signed-in customer, their account ID. We have disabled its collection of IP addresses, visited URLs and full basket revision histories. This information helps us understand and improve the website. Analytics information may be processed by Automattic and WordPress.com as service providers; see the Automattic Privacy Notice.
You can accept, reject or customise optional cookies when the notice first appears, and change your decision later using the Cookie settings button displayed on every page. Withdrawing consent stops optional tracking on subsequent page loads. Browser controls can also limit cookies, although blocking necessary cookies may prevent basket, account or checkout functions from operating.
Your rights
Depending on the situation, UK data-protection law may let you request access, correction, erasure, restriction or portability; object to legitimate-interest processing or direct marketing; and withdraw consent. Rights are not absolute and record-keeping duties may continue. We may verify identity before responding.
You may complain to the Information Commissioner’s Office at ico.org.uk. We would welcome the opportunity to resolve the concern first.
Security, children and updates
We use proportionate access, encryption, maintenance, backup and monitoring controls, described further in the Security Policy. This trade website is not intended for children and we do not knowingly seek their information. This notice may be updated as providers, services or legal requirements change; the effective date will be revised on this page.