Privacy Policy

HamTEK Ltd (“we”, “us”, “our”) is the data controller responsible for your personal data. We are registered in England and Wales with company number 13218485. Our registered address is Coombe Cottage, Coombe Lane, Cradley, Malvern, Herefordshire, WR13 5JF.

If you have any questions about this privacy policy or how we handle your personal data, please contact us.

This privacy policy explains how we collect, use, store, and share your personal data when you:

• visit our website;

• place an order with us;

• contact us by telephone, email, post, or through our website;

• register for an account on our website; or

• interact with us in any other way.

This policy should be read alongside our Terms and Conditions and our Cookie Policy, both of which are available on our website.

We may collect and process the following categories of personal data about you:

• Name, postal address, email address, and telephone number.

• Details of products you have ordered from us, payment information (though we do not store full payment card details — these are processed securely by our payment provider), and your order history.

• If you register an account on our website: your username, password (stored in encrypted form), and account preferences.

• IP address, browser type and version, operating system, time zone setting, pages you have visited on our website, and how you arrived at our website. This data is collected through cookies and similar technologies — see our Cookie Policy for full details.

• Records of correspondence if you contact us, including emails, telephone call notes, and messages sent through our website.

• If you use our repair service: details of the equipment submitted for repair, fault descriptions, repair history, and any relevant technical information you provide.

We do not collect any special category data about you (such as information about your race, ethnicity, religious beliefs, political opinions, health, sexual orientation, or criminal convictions).

We collect personal data from you in the following ways:

• Directly from you: when you place an order, create an account, contact us, submit equipment for repair, or fill in forms on our website.

• Automatically: when you browse our website, certain technical data is collected automatically through cookies and similar technologies. See our Cookie Policy for details.

• From third parties: we may receive personal data from analytics providers (such as Google), advertising networks, and payment service providers.

Under UK data protection law, we must have a lawful basis for processing your personal data. The table below sets out the purposes for which we use your data and the lawful basis we rely on in each case.

• What we do: Process your orders, arrange delivery, process payments, and provide our repair service.

• Lawful basis: Performance of a contract with you (Article 6(1)(b) UK GDPR).

• What we do: Create and manage your website account, maintain your order history, and provide account-related communications.

• Lawful basis: Performance of a contract with you.

• What we do: Respond to your questions, handle complaints, and deal with correspondence.

• Lawful basis: Performance of a contract with you (where the enquiry relates to an order) or our legitimate interests in providing good customer service.

• What we do: Send you information about products, services, and offers we think may be of interest to you.

• Lawful basis: Consent (where you have opted in to receive marketing) or our legitimate interests in marketing to existing customers about similar products (in accordance with the “soft opt-in” under the Privacy and Electronic Communications Regulations 2003). You can opt out of marketing at any time — see section 9.

• What we do: Analyse how you use our website to improve its functionality, content, and user experience.

• Lawful basis: Our legitimate interests in improving our products and services, or consent (where cookies are used for non-essential analytics — see our Cookie Policy).

• What we do: Keep records required for tax, accounting, and regulatory purposes.

• Lawful basis: Compliance with a legal obligation (Article 6(1)(c) UK GDPR).

We may share your personal data with the following categories of recipients:

• Payment processors: to process your payments securely. Your payment card details are handled directly by our payment provider and are not stored by us.

• Delivery and courier services: to deliver your orders.

• IT and hosting providers: who provide and support our website, email, and business systems (including our Odoo platform).

• Analytics providers: such as Google Analytics, to help us understand how our website is used.

• Professional advisers: including accountants, lawyers, and auditors, where necessary.

• Group companies: any subsidiaries, holding companies, or their subsidiaries (as defined in section 1159 of the UK Companies Act 2006).

• Business transfers: if we sell or buy any business or assets, we may disclose your personal data to the prospective buyer or seller.

• Law enforcement and regulatory bodies: where we are required to do so by law or in connection with the investigation of unlawful activities.

We do not sell your personal data to any third party. We require all third parties with whom we share personal data to respect the security of your data and to treat it in accordance with the law.

Some of the third-party services we use (for example, Google Analytics) may process your data outside the United Kingdom. Where your personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect it, including:

• transfers to countries that the UK Government has determined provide an adequate level of data protection; or

• the use of standard contractual clauses approved by the UK Information Commissioner’s Office (ICO); or

• other legally recognised transfer mechanisms.

If you would like further information about the specific safeguards applied to any international transfer of your data, please contact us.

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected. The retention periods we apply are:

• Order and transaction data: 6 years from the date of the transaction (to comply with tax, accounting, and legal obligations).

• Customer account data: for as long as your account remains active, and for 2 years after you close your account or your last order (whichever is later).

• Repair service records: 6 years from the date the repair is completed.

• Marketing and communications data: until you unsubscribe or withdraw consent, after which we will retain only the minimum data necessary to record your opt-out preference.

• Website analytics data: in accordance with our Cookie Policy and the retention settings of the relevant analytics provider.

• Enquiry and correspondence records: 2 years from the date of the last communication, unless the correspondence relates to an order or repair (in which case the relevant retention period above applies).

When your personal data is no longer required, we will securely delete or anonymise it.

Under UK data protection law, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data we hold about you.

• Right to rectification: You can ask us to correct any personal data that is inaccurate or incomplete.

• Right to erasure: You can ask us to delete your personal data in certain circumstances (for example, where it is no longer necessary for the purpose for which it was collected).

• Right to restrict processing: You can ask us to limit how we use your personal data in certain circumstances.

• Right to data portability: You can request that we provide your personal data in a structured, commonly used, machine-readable format, or that we transfer it to another controller.

• Right to object: You can object to our processing of your personal data where we are relying on legitimate interests as our lawful basis, or where we are processing your data for direct marketing purposes.

• Right to withdraw consent: Where we rely on your consent to process your personal data, you can withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew your consent.

To exercise any of these rights, please contact us using the details in section 1. We will respond to your request within one month. We will not charge a fee for handling your request unless it is clearly unfounded or excessive.

Opting out of marketing: You can opt out of receiving marketing emails from us at any time by clicking the “unsubscribe” link in any marketing email, or by contacting us directly. You do not need to give a reason.

If you are unhappy with how we have handled your personal data, we would ask that you contact us first so that we can try to resolve the issue.

However, you have the right at any time to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection:

• ICO website: https://ico.org.uk

• ICO helpline: 0303 123 1113

• ICO postal address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Our website uses cookies and similar technologies to provide essential functionality and to help us improve your experience. Full details of the cookies we use, their purposes, and how you can manage your cookie preferences are set out in our Cookie Policy, available on our website.

We take the security of your personal data seriously. We have implemented appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised access, disclosure, or other unlawful processing. These measures include:

• storing personal data on secure, password-protected systems with access restricted to authorised personnel only;

• using encryption for data transmitted over the internet; and

• regularly reviewing our information security practices and procedures.

While we take all reasonable precautions, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your data transmitted to us via the internet.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO without undue delay and, where required, notify you directly.

Our website may contain links to third-party websites, plug-ins, and applications (for example, links to eBay or Amazon where our products are also listed). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child under 16, please contact us immediately and we will take steps to delete it.

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page with an updated revision date. Where changes are significant, we will make reasonable efforts to notify you (for example, by email or by placing a prominent notice on our website).

We encourage you to review this policy periodically. Your continued use of our website after any changes are posted constitutes your acceptance of the updated policy.

This privacy policy was last updated on 27th February 2026.