Privacy policy

Last reviewed: 17 October 2026.

Who looks after your information

All Sorts Supply Limited (company number 17425304) is responsible for personal information used to operate this shop. Contact orders@allsortssupply.co.uk or write to our registered office shown below.

What we collect and why

When you enquire, we use your name, email address, message and any product or order reference to answer you. Our contact form opens your email application; it does not submit a message until you send it.

For orders, returns and delivery we need contact details, the delivery address, products, quantities, prices, payment status, order references and correspondence. Providing these details is necessary to arrange a purchase or resolve an order issue. We use contract and pre-contract steps as our lawful basis, legal obligations for required records and consumer rights, and legitimate interests for general enquiries, fraud prevention and service security.

Hosting services may process your IP address, browser information, request time and error information to deliver and protect the website. We do not ask you to send card or bank details in enquiries. Stripe handles payment details on its checkout; our order records contain payment references and status, not your full card number, security code or bank account details.

Who receives information

Microsoft Azure hosts the shop and order records, and Microsoft 365 handles our email. Stripe processes checkout and payments. When a parcel is booked, the carrier (normally Evri) receives the contact and delivery information needed to deliver it. Product images hosted by other websites may send your browser's IP address and request information to those hosts when loaded. We may also disclose information where required by law or to professional advisers dealing with a specific business or legal matter. We do not sell customer information.

These providers have their own privacy information: Microsoft, Stripe and Evri.

International processing

Our Azure deployment is currently in East US 2, United States. Microsoft and Stripe may also process information in other countries. Provider terms describe their international transfer arrangements. Contact us for information about the arrangements applying to your data.

Browser storage

The basket is stored locally in your browser so it can remain available between visits. You can empty it or clear site data in your browser settings. Signing into the administrator area uses authentication cookies; sandbox checkout also stores a temporary attempt reference. These support the functions you request. We do not currently run advertising trackers on the shop. Stripe checkout operates separately and explains its own cookie use.

Product reviews

If you choose to submit an invited review, we use your publication consent to display your chosen name, rating and text. Private order links and moderation records help verify purchases, prevent duplicate/fake reviews and handle appeals. We apply the same checks to positive and negative feedback. Invitation links expire after 60 days. Withdraw a review using the original valid invitation or contact us after expiry. Do not include contact details, addresses or sensitive information. See how reviews work. Customer review requests are not sent automatically by the current system.

Product view totals

We keep a simple total of product-page opens for each shop item to understand product interest. This counter does not use cookies, browser storage or customer accounts. Its records contain only the product identifier and total. You can exclude this browser from shop statistics through Analytics preferences. This remembers only an on/off preference in local browser storage; it also applies after signing out. Ordinary page refreshes, admin visits and recognised automated crawlers are excluded where possible. Hosting technical logs are separate from these totals.

Optional visitor analytics

With your consent, we use Google Analytics to understand visits, popular pages and products, traffic sources, devices and approximate locations. Google receives technical information such as your IP address to provide the service; our analytics events do not include customer names, email addresses, postal addresses, order or refund references, form contents or full URL query strings. We disable Google signals and advertising personalisation in our tag configuration. Analytics is optional and does not load until you choose Allow analytics.

You can decline or withdraw consent through Analytics preferences in the footer. Your preference is remembered for up to 180 days, and our configured Analytics cookies last up to 90 days. Withdrawal stops future collection and removes accessible Analytics cookies from this site; it does not automatically erase information already processed by Google. Google may process information internationally: see Google privacy information. Your basket and checkout remain available if you decline.

Our Google Analytics user-level and event-level data retention is set to two months, with resetting user retention on new activity disabled. This setting does not limit most standard reports based on aggregated data.

How long we keep information

We keep enquiries while responding and resolving follow-up questions, and review closed enquiries for deletion when no longer needed. Order and financial records may need to be retained for six years from the end of the relevant financial year. Complaints, disputes and legal requirements can require longer retention. Technical logs follow the hosting service's configured retention. We restrict access and review information rather than retaining everything indefinitely.

Your rights and complaints

Depending on the circumstances, you can ask to access, correct or erase your information, restrict its use, object to processing based on legitimate interests, or obtain a portable copy. Some records must be kept to meet legal obligations. Contact us using the email above; we may need to check your identity and normally respond within one month, subject to the applicable rules.

You can raise concerns with us and complain to the Information Commissioner's Office (ICO).

Changes

We update this notice when our services or processing change. Customer payments are currently disabled while checkout is tested.