Privacy policy
What personal data we collect when you shop with us, why, who we share it with, how long we keep it, and your rights.
Last updated 22 September 2026
Who is responsible for your data
ECG HOME IMPROVEMENTS LIMITED, trading as ECG HOME, is the controller of the personal data described here. Contact us about anything in this policy at support@ecghomeimprove.shop. Our registration details are on the Legal information page.
We follow the UK General Data Protection Regulation and the Data Protection Act 2018, and, for customers in the European Union, the EU General Data Protection Regulation.
What we collect
| Data | When | Why |
|---|---|---|
| Name, delivery and billing address, email, phone number | When you place an order | To fulfil and deliver your order and contact you about it |
| Order details: items, amounts, currency, dates | When you place an order | To fulfil the order, handle returns and refunds, and keep accounting records |
| Payment confirmation (not your full card number) | When you pay | To confirm payment and handle refunds or disputes |
| Account email and password (stored encrypted) | If you create an account | To let you sign in and see your orders |
| Messages you send us | When you email or call | To answer you and keep a record of what was agreed |
| Technical data: IP address, browser, pages requested | When you visit | To run, secure and protect the website (server logs) |
We do not use advertising or analytics tracking, we do not build marketing profiles, and we do not sell your data. We only send you emails about your orders and any questions you raise.
Legal bases
- Contract: processing your order, delivery, returns and account.
- Legal obligation: keeping accounting and tax records, and dealing with consumer-law requests.
- Legitimate interests: keeping the site secure, preventing fraud, and handling complaints and legal claims.
Who we share it with
- Our supplier partners, who pack and dispatch your order. They receive your name, delivery address, phone number and the items ordered. Some are located outside the UK and the European Economic Area.
- Couriers and postal services that deliver your parcel, and customs authorities where the law requires.
- The payment provider that processes your payment, which receives your payment details directly and acts under its own privacy policy.
- Our website hosting and email providers, who store data on our behalf.
- Professional advisers and authorities, such as accountants, or where we are required by law.
International transfers
Because orders are dispatched by supplier partners and couriers in other countries, your order details may be transferred outside the UK and the EEA. Where that happens we rely on safeguards recognised by UK and EU law, such as standard contractual clauses, or on the transfer being necessary to perform your contract with us.
How long we keep it
- Order and payment records: 6 years after the end of the financial year of the order, for tax and accounting.
- Customer messages: up to 2 years after the matter is closed.
- Accounts: until you ask us to delete yours; order records are then kept as above.
- Server logs: up to 30 days.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or send it to you or another organisation in a portable format. Email support@ecghomeimprove.shop; we reply within one month. We may need to confirm your identity first.
If you are unhappy with how we have used your data, please tell us. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or, in the EU, to the data protection authority in your country.
Children
This shop is not intended for children, and we do not knowingly collect data from anyone under 16.
Cookies
See Cookies for the small number of cookies this site uses.
Changes
If we change this policy, we update this page and the date at the top.