1. Introduction
BuyFires (“we”, “us” or “our”) is committed to protecting and respecting your privacy. This Policy explains how we collect, use, store and share your personal data when you:
Visit and browse our website https://buyfires.co.uk
Place an order for goods or services
Sign up for our newsletter or create an account
Contact us for support or enquiries
By using our site or placing an order, you agree to the processing described below.
2. Who We Are
Data controller:
BuyFires
Email: sales@buyfires.co.uk
3. What Personal Data We Collect
When you browse
IP address, device/browser type, pages viewed, referral URL, date/time stamps (via cookies and server logs)
When you place an order or register
Name, billing & delivery addresses, email address, telephone number
Payment details (collected securely by our payment provider – we do not store full card details)
When you sign up for marketing
Email address (only if you tick “subscribe”)
When you contact us
Any personal data you voluntarily include in your enquiry
4. How We Use Your Personal Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Processing & fulfilling your order | Name, address, email, phone, payment info | Contract performance |
| Customer service & support | Contact details and any info you provide | Legitimate interests (service) |
| Marketing communications (optional) | Email (if you opt in) | Consent |
| Website analytics & improvements | IP address, browsing data | Legitimate interests (optimisation) |
| Fraud prevention & legal compliance | Order data, payment info | Legal obligation / Legitimate interests |
5. Cookies & Tracking
We use cookies and similar technologies:
Essential cookies – enable core site functions.
Analytics cookies (e.g. Google Analytics) – help us understand how you use the site.
Marketing cookies – track your preferences to show relevant offers.
You can manage or opt out of non-essential cookies via your browser settings. For details, see our Cookie Policy.
6. Sharing Your Data
We may share your personal data with:
Delivery carriers to fulfil orders
Payment processors (e.g. Stripe, PayPal) to process payments
IT service providers (hosting, email delivery, analytics)
Professional advisers (legal, accounting) if required by law
We do not sell or rent your personal data to third parties.
7. International Transfers
Some of our service providers (e.g. analytics, email) may transfer data outside the UK/EEA. Where we do, we ensure appropriate safeguards (e.g. Standard Contractual Clauses) are in place.
8. Data Retention
We keep your personal data only as long as necessary to:
Fulfil orders & warranty requirements
Comply with legal obligations (e.g. tax)
Defend legal claims
Maintain a record of any marketing consents
Generally, order and account data are retained for 7 years, then anonymised or deleted.
9. Your Rights
Under UK GDPR you have:
Access to the data we hold about you
Correction of any inaccuracies
Erasure (“right to be forgotten”) in certain circumstances
Restriction of processing in limited cases
Portability of your data to another provider
Object to direct marketing or profiling
Withdraw consent at any time (for marketing)
To exercise any right, please email sales@buyfires.co.uk or write to us at our registered address above.
10. Security
We implement appropriate technical and organisational measures (e.g. SSL encryption, access controls) to protect your data against accidental loss, misuse or unauthorised access.
11. Third-Party Links
Our site may contain links to other websites. This Policy does not cover their practices—please review their own Privacy Policies.
12. Changes to This Policy
We may update this Policy from time to time. The “Last updated” date above will be revised. Continued use of our site signifies acceptance of any changes.
13. Contact Us
If you have any questions or concerns, please contact our Data Protection Officer:
Email: sales@buyfires.co.uk