Privacy and Cookie Policy

Version 2.2. Effective from 18 October 2026. This policy explains how Tiny Build Electrics uses your personal data and how we use cookies on our website.

1. Who We Are

Tiny Build Electrics Ltd (company number 13337413, registered office Unit 6 Mill Farm Yard, Sonning Eye, Reading, Berkshire, RG4 6TR) is the controller of your personal data. Contact: Tom Alderdice, [email protected], or by post to Workshop 1, Moss Howe Farm, Witherslack, Cumbria, LA11 6SA. We are registered with the Information Commissioner’s Office, registration number ZB234814.

We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

2. What We Collect

  • Contact details: name, email address, phone number, billing and delivery addresses, and any safe place or delivery instructions you give us.
  • Account details: if you create a customer account, your login details and order history. Your password is stored in encrypted form and we cannot see it.
  • Order, booking and payment records: what you bought or booked, invoices and payment status. Card payments are handled by Stripe; we do not see or store your full card details.
  • Project information: vehicle or building details, registration, photographs, system specifications, loads, and information from booking forms, free calls, consultations and power audits.
  • Communications: emails, messages (including WhatsApp), call and video consultation notes.
  • System data: where you give us access for remote commissioning or support, data from your Victron VRM installation (for example, battery and charging data, and location if enabled).
  • Website data: IP address, device and browser information, pages visited, and cookie data (see Section 8).

3. How We Use It and Our Lawful Bases

  • To quote for, supply, deliver, install, commission and support your order, to run your customer account, and to send you service messages such as order, dispatch, delivery and booking emails (performance of a contract, or steps before a contract).
  • To keep accounting, tax and certification records (legal obligation).
  • To run and improve our business, prevent fraud, resolve delivery and warranty issues and handle complaints or legal claims (legitimate interests).
  • To reply to enquiries you send us by email, web form or WhatsApp, including enquiries from outside the UK about kits and remote support (legitimate interests, or steps before a contract).
  • To send marketing emails: to existing customers about similar products and services, with an unsubscribe option in every email, or otherwise with your consent.
  • To send up to three reminder emails if you start a checkout but don’t finish it: we save the email address and basket you entered at checkout (legitimate interests). Every reminder has an opt-out link, and we delete this data after 30 days.
  • To measure how our website is used and how well our adverts work, using analytics and marketing cookies (consent, see Section 8).

4. Who We Share It With

We share personal data only as needed with service providers acting for us, including: payment processing (Stripe); accounting (Xero); email, documents and calendar (Google Workspace); email marketing (Mailchimp); online forms, booking and workflow tools (such as Fillout and Zapier); messaging (WhatsApp Business, provided by Meta); website analytics and advertising (Google Analytics, Google Ads and Meta), only where you have consented; our website host; couriers (FedEx, Royal Mail and pallet delivery networks such as Pallex) and our UK warehouse partners, to deliver your order; Victron Energy (VRM portal) for remote support; and professional advisers, insurers and certification bodies where required. We may also disclose data where the law requires. We do not sell your personal data.

5. International Transfers

Some providers store data outside the UK (for example, in the USA or the EEA). Where they do, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.

6. How Long We Keep It

Order, invoice and accounting records: 6 years after the end of the financial year they relate to. Installation, inspection and certification records, and Project records: 7 years after completion, so we can deal with warranty and safety matters. Customer accounts: until you ask us to close your account, subject to the order records above. Enquiries that do not lead to an order: up to 2 years after last contact. Abandoned checkout data: 30 days. Marketing data: until you unsubscribe.

7. Your Rights

You have the right to access your data; to have it corrected; to have it erased or its use restricted in some circumstances; to object to processing based on legitimate interests and to direct marketing; to data portability; and to withdraw consent at any time. To exercise these rights, email [email protected]. We will respond within one month.

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

8. Cookies

Cookies are small files stored on your device. When you first visit our website, a banner headed “Cookies on Tiny Build Electrics” asks for your choice. You can choose Accept all, Deny, or Choose to pick categories and then Save choices. You can change your mind at any time with the Manage consent button on the website, or by clearing cookies in your browser. Analytics and marketing tags do not run until you consent.

  • Functional (always active): needed to run the website, basket, checkout and customer account, keep the site secure, and remember your cookie choice. These do not need consent. Examples: WooCommerce basket and session cookies (woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_*), the WordPress login cookie for account holders, Stripe fraud-prevention cookies at checkout (__stripe_mid, __stripe_sid), spam protection on forms (Google reCAPTCHA), and our consent cookies (cmplz_*).
  • Preferences: remember choices you make on the site. Used only with your consent.
  • Statistics: Google Analytics 4 (cookies such as _ga and _ga_*), which shows us how visitors use the site so we can improve it. Used only with your consent.
  • Marketing: the Meta Pixel (cookies such as _fbp) and Google Ads (cookies such as _gcl_au), which measure how our adverts on Facebook, Instagram and Google perform and help show our adverts to people likely to be interested. Used only with your consent.

Some pages include content from other services, such as YouTube or Vimeo videos, Fillout booking forms, Victron VRM demo data and Google reviews. These services may set their own cookies when you play a video or use the form; their own privacy policies apply. Most cookies last for the browsing session or up to 2 years, depending on the service.

9. Children

Our goods and services are not aimed at children, and you must be 18 or over to order from us.

10. Security

We use appropriate technical and organisational measures to protect your data, including encrypted (SSL) connections, access controls and reputable service providers.

11. Changes

We may update this policy. The current version and its date are always shown on this page.