Privacy Policy.
What we collect, why, and the control you have over it — under both GDPR and CCPA/CPRA.
Last updated: 23 June 2026
Data controller
The data controller is MULGRAVE HEATING LIMITED (Mulgraveheat is a trading name of MULGRAVE HEATING LIMITED. Registered in England & Wales, company number 04655729), registered at 55 Mulgrave Road, Sutton, Surrey, SM2 6LR, United Kingdom. For any privacy request, contact support@mulgraveheat.shop.
What we collect
- Identifiers: name, email, phone, shipping & billing address
- Order & commercial information: items purchased, order history
- Payment confirmation data (card details are handled by Stripe, not stored by us)
- Technical & usage data: IP address, device, pages viewed, via cookies
- Communications: messages you send us through forms or email
Why we use it & legal bases (GDPR)
- To fulfil your order — performance of a contract
- Customer support — legitimate interest / contract
- Fraud prevention & security — legitimate interest / legal obligation
- Analytics to improve the store — consent (via the cookie banner)
- Marketing emails — only with your consent, opt-out anytime
Who we share data with
We share data only with processors who help us run the store:
- Stripe — payment processing
- Shipping carriers — delivery
- Email & hosting providers — order confirmations and site delivery
- Analytics providers — only if you accept analytics cookies
We never sell your personal information for money.
International transfers & retention
As a global store, your data may be processed outside your country, protected by appropriate safeguards (such as Standard Contractual Clauses). We keep order records for as long as needed to meet legal, tax and accounting obligations, then delete or anonymise them.
Your GDPR rights
If you are in the UK or EEA, you have the right to:
- Access a copy of your data
- Correct inaccurate data
- Erase your data (“right to be forgotten”)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise any right, email support@mulgraveheat.shop. You may also complain to your local data protection authority (in the UK, the ICO).
California rights (CCPA / CPRA)
If you are a California resident, in the past 12 months we may have collected the categories above (identifiers, commercial information, internet activity, geolocation inferred from IP). You have the right to know, access, correct and delete your personal information, and to be free from discrimination for exercising these rights.
We do not sell your personal informationfor money, and we do not knowingly share it for cross-context behavioural advertising. To opt out of any analytics sharing, choose “Essential only” on our cookie banner or email support@mulgraveheat.shopwith the subject “Do Not Sell or Share My Personal Information”.
Cookies
We use essential cookies to run the store and, with your consent, analytics cookies to improve it. Manage your choice anytime — see our Cookie Policy for the full list and how to change your preferences.
Children
Our store is intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
Changes & contact
We may update this policy; the date above reflects the latest version. Questions or requests: support@mulgraveheat.shop or 55 Mulgrave Road, Sutton, Surrey, SM2 6LR, United Kingdom.