Privacy policy
Last updated: 4 November 2026
This policy explains how Radiators.co.uk collects, uses and protects your personal information when you visit our website, buy from us, contact us or sign up to hear from us. It also explains your rights and how to use them.
Who we are
Radiators.co.uk is a trading name of Bumford Heating Limited, a company registered in England (company number 1725290, VAT number 173 1239 79).
Our address is Unit 2D, Shortwood Court, Shortwood Business Park, Hoyland, Barnsley, S74 9LH.
Bumford Heating Limited is the controller of your personal information. This means we decide how and why it is used, and we are responsible for looking after it under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
If you have any questions about this policy or your information, please contact us:
- Email: sales@radiators.co.uk
- Phone: 01226 369631
- Post: Data Protection, Bumford Heating Limited, Unit 2D, Shortwood Court, Shortwood Business Park, Hoyland, Barnsley, S74 9LH
What information we collect
When you place an order
- Your name, billing and delivery address, email address and phone number.
- What you ordered, prices paid, delivery choices and any notes you add.
- Payment details. Card and wallet payments are handled by our payment providers; we do not see or store your full card number.
- Information about returns, cancellations, damage reports and refunds, including any photos you send us.
When you create an account
- Your name, email address, saved addresses and order history with us.
When you contact us
- Your name, contact details and anything you tell us by email, phone, our contact form or live chat where it is available.
When you sign up for emails
- Your email address, the date and way you signed up, and your email preferences.
- Whether you open or click our emails, so we can see what is useful and stop emailing people who are no longer interested.
When you use our website
- Technical information such as your IP address, browser and device type, pages viewed and the website that referred you.
- Information collected through cookies and similar technologies. See "Cookies" below.
Information from others
- If you pay with PayPal, PayPal tells us whether the payment succeeded and the name, email and address linked to the payment.
- Delivery companies and the manufacturers who deliver your order may tell us about delivery progress or problems.
Why we use your information and our lawful basis
Data protection law requires us to have a lawful basis for each use of your information.
| What we do | Lawful basis |
|---|---|
| Take, process, deliver and support your order, including returns, refunds and warranty claims | Contract (we need it to fulfil our agreement with you) |
| Run your customer account | Contract |
| Keep accounting, VAT and tax records | Legal obligation |
| Deal with your enquiries before or after you buy | Legitimate interests (answering the questions you send us), or contract where it relates to an order |
| Prevent fraud and keep our website and checkout secure | Legitimate interests (protecting our customers and our business), and legal obligation where it applies |
| Improve our website, products and service | Legitimate interests |
| Send you marketing emails | Consent |
| Use non-essential cookies (analytics and marketing) | Consent |
| Handle legal claims and comply with regulators | Legal obligation or legitimate interests (defending our legal rights) |
Where we rely on legitimate interests, we have weighed our interests against yours and only proceed where they are not overridden by your rights. You can ask us for more detail.
Marketing
We only send marketing emails if you have opted in, for example through our email sign-up form or the tick box at checkout. Sign-ups through our website form are confirmed by email before you are added to our list. We do not rely on the "soft opt-in" for existing customers. Some of our marketing emails are triggered by what you do on our website, such as leaving items in your basket, and these are only sent if you have subscribed.
You can unsubscribe at any time using the link in every email or by contacting us. Unsubscribing does not affect emails about an order you have placed.
We do not sell your personal information, and we do not pass it to other companies for their own marketing.
Who we share your information with
We share your information only where we need to, with organisations that help us run our business. Those acting on our behalf (processors) may only use it on our instructions and must keep it secure.
- Shopify: our website, online shop, checkout and customer accounts platform.
- Payment providers: Shopify Payments (card payments and digital wallets such as Apple Pay and Google Pay) and, where offered at checkout, PayPal and the other payment options shown at checkout. PayPal acts as an independent controller for the payments it handles, under its own privacy policy.
- Klaviyo: sends our marketing emails and manages email sign-ups and preferences.
- Sage and Zynk: Sage is our accounts and order processing system; Zynk connects our online shop to Sage so that orders can be processed.
- Manufacturers, suppliers and delivery companies: most orders are delivered directly by the manufacturer or our supplier (for example Stelrad, Myson or Zehnder), and smaller items may be sent from our Barnsley depot by courier. We give them your name, delivery address, phone number and email address so they can deliver your order and contact you about delivery.
- Trustpilot: shows our customer reviews on our website. If you choose to leave a review, Trustpilot handles that under its own privacy policy.
- Google: we use Google Search Console to see how our website performs in Google search. This uses summary search data and does not identify you.
- Our professional advisers, such as accountants, auditors, lawyers and insurers, where needed.
- The police, HMRC, regulators or courts where the law requires us to, or to protect our rights or prevent fraud.
If our business, or part of it, is sold or reorganised, your information may pass to the new owner, who must use it in line with this policy.
International transfers
Some of our service providers store or access information outside the UK. In particular, Shopify and Klaviyo may process data in Canada, the United States, the European Economic Area and other countries, and PayPal and Trustpilot may process data outside the UK.
Where information leaves the UK, we make sure it is protected by at least one recognised safeguard: a UK government adequacy decision for the country concerned (for example Canada or the European Economic Area), the UK Extension to the EU-US Data Privacy Framework where the US provider is certified, or the UK International Data Transfer Agreement or Addendum to the standard contractual clauses. You can contact us for more information about these safeguards.
How long we keep your information
We keep information only for as long as we need it for the purposes above.
- Orders, invoices, payments and returns: 6 years from the end of the financial year in which the order was placed, to meet tax, VAT and accounting rules and to deal with warranty or legal claims.
- Customer accounts: until you close your account, or after 3 years without any login or order, after which order records are kept as above.
- Enquiries that do not lead to an order: 2 years from our last contact with you.
- Email marketing: until you unsubscribe or ask us to delete your details. We keep a record of your email address on a "do not contact" list so we do not email you again by mistake.
- Live chat transcripts, where live chat is used: 2 years from our last contact with you.
- Cookies: for the periods shown in our cookie banner and by your browser settings.
If you bought from our previous website, we keep those order records for the same periods.
Your rights
You have the following rights over your personal information:
- Access: you can ask for a copy of the information we hold about you. This is free of charge in most cases.
- Rectification: you can ask us to correct information that is wrong or incomplete.
- Erasure: you can ask us to delete your information, unless we need to keep it, for example for tax records.
- Restriction: you can ask us to limit how we use your information while a concern is looked into.
- Objection: you can object to us using your information on the basis of legitimate interests, and you can always object to direct marketing.
- Portability: you can ask for information you gave us, which we hold electronically under contract or consent, in a commonly used format, or for it to be sent to another organisation.
- Withdrawing consent: where we rely on your consent, such as for marketing emails or non-essential cookies, you can withdraw it at any time. This does not affect anything we did before you withdrew it.
To use any of these rights, please contact us using the details above. We may need to confirm your identity first. We will reply within one month, which may be extended by up to two further months for complex requests; if so, we will tell you why.
Complaints
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.
Cookies
Cookies are small text files placed on your device when you visit a website. We and our service providers use cookies and similar technologies (such as pixels and local storage) on our website.
When you first visit, our cookie banner lets you accept or reject cookies that are not strictly necessary. Non-essential cookies are not set until you agree. The categories are:
- Strictly necessary: needed for the website and checkout to work, such as keeping items in your basket, keeping you signed in and remembering your cookie choices. These do not need your consent.
- Preferences: remember choices you make, such as your region or recently viewed items.
- Analytics: help us understand how visitors use the website so we can improve it.
- Marketing: used to measure our advertising and to tailor marketing to you, including on other websites.
Third-party features, such as the Trustpilot reviews box on our website, and live chat where it is available, may set their own cookies. We only load these where your cookie choices allow.
Changing your cookie choices
You can change your choices at any time using the cookie or privacy preferences link at the bottom of every page. You can also block or delete cookies in your browser settings, although parts of the website, such as the basket and checkout, may then not work properly.
Keeping your information secure
We take appropriate technical and organisational measures to protect your information. Payments are processed by our payment providers over encrypted connections, and access to customer information within our business is limited to staff who need it. No website or system can be completely secure, so please keep your account login details private.
Children
Our website and products are intended for adults. We do not knowingly collect personal information from children under 18. If you believe a child has given us their information, please contact us and we will delete it.
Links to other websites
Our website may link to other websites, such as manufacturers' sites or Trustpilot. We are not responsible for their privacy practices, so please read their privacy policies.
Changes to this policy
We may update this policy from time to time, for example when we change the services we use. The latest version will always be on this page, with the date it was last updated. If we make significant changes, we will tell you where appropriate.
Contact us
Bumford Heating Limited, trading as Radiators.co.uk
Unit 2D, Shortwood Court, Shortwood Business Park, Hoyland, Barnsley, S74 9LH
Email: sales@radiators.co.uk
Phone: 01226 369631