Privacy Policy

Who is responsible for your data

ELEVATOR REPAIR SPECIALISTS LTD is the data controller for personal data processed through elevrepairs.shop. You can reach us at support@elevrepairs.shop, by phone on +44 7174711947, or by post at 80 High Street Coleshill, B46 3AH, England.

What we collect

• Order and delivery data: name, email, phone (optional), and the shipping address (street address, city, postal code and country) you enter at checkout so we can complete order fulfilment and delivery.
• Account and membership data: if you subscribe to a membership plan, your email and subscription status.
• Payment data: billing details you enter on Stripe's secure checkout. We receive confirmation of payment and limited card metadata (for example, card brand and last four digits) — we never receive or store your full card number.
• Support and enquiry data: the details you send through our contact and trade forms, including your message.
• Fix Finder and browsing data: the answers you give the Fix Finder and cart contents, which are stored in your browser and, if you check out, associated with your order.
• Technical data: IP address, device and browser information, and essential logs needed to run and secure the site.

Collection sources — where the data comes from

Our collection sources are:

• Directly from you: the details you provide when you shop, check out, subscribe, use the Fix Finder or contact us.
• Automatically from your device: technical data (IP address, device and browser information) collected by our hosting and security providers as you use the site.
• From our payment processor: payment confirmation and limited card metadata returned by Stripe after you pay.
• From delivery carriers: delivery and tracking status updates relating to your order.

Why we use it and our legal bases

• To fulfil your order and deliver kits — performance of a contract with you.
• To manage memberships and process payments — performance of a contract and compliance with legal (tax and accounting) obligations.
• To provide support and respond to enquiries — legitimate interests and, for consented enquiries, your consent.
• To keep records for returns, refunds and disputes — legal obligation and legitimate interests.
• To secure the site and prevent fraud — legitimate interests.
• To send order updates — performance of a contract. Any optional marketing is sent only with your consent, which you can withdraw at any time.

Payment provider boundary

Card payments are handled by Stripe, a PCI-DSS compliant payment processor. When you pay, your card details are entered on Stripe's hosted checkout and are transmitted directly to Stripe. Steadwell does not see, receive or store your full card number, CVC or full card data. Where we later offer PayPal, the same boundary applies: full card and account credentials are handled by the payment provider, not by us.

Who we share it with

We share personal data only with processors that help us run the store, under contract and only as needed:

• Hosting and delivery infrastructure — Vercel (application hosting and content delivery).
• Payments — Stripe (checkout, subscriptions, refunds and disputes).
• Database and lead storage — Supabase (order, account and enquiry records).
• Shipping and delivery carriers — the couriers who deliver your order receive the name and delivery address needed to complete delivery.
• Email — transactional email providers used to send order confirmations and replies.

We do not sell your personal data.

International transfers

Some of our processors operate outside the UK and EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum, EU Standard Contractual Clauses, or an adequacy decision, so your data stays protected to the same standard.

How long we keep it

• Order and transaction records: retained for up to 6 years to meet tax and accounting requirements.
• Checkout leads and enquiry data: retained for up to 24 months, then deleted or anonymised.
• Membership records: for the life of the membership and up to 6 years afterward for accounting.
• Support correspondence: up to 24 months after your query is resolved.

How we protect it

We use encryption in transit (HTTPS), access controls, and reputable processors with their own security programmes. Payment card data is isolated within the payment provider. No system is perfectly secure, but we take reasonable steps to protect your information and will notify you and the relevant regulator of a qualifying breach.

Your rights (UK GDPR and EU GDPR)

You have the right to: access your data; correct inaccurate data; erase data; restrict or object to processing; data portability; and to withdraw consent at any time. To exercise any right, email support@elevrepairs.shop. We respond within one month.

Your rights (CCPA / California)

If you are a California resident, you may request access to and deletion of your personal information, and details of the categories we collect and disclose. You have the right to be free from discrimination for exercising these rights. We do not sell personal information and do not share it for cross-context behavioural advertising.

Do Not Sell or Share

Steadwell does not sell your personal data and does not share it for targeted advertising. There is nothing to opt out of on this basis, but you can still contact us with any privacy request at support@elevrepairs.shop.

Cookies and analytics

We use essential cookies and local storage to keep your cart and session working. Any analytics we use are privacy-respecting and limited to understanding aggregate site performance. See our Cookie Policy for details and choices.

Automated decisions and children

We do not carry out solely automated decision-making that produces legal or similarly significant effects. The Fix Finder is a simple recommendation aid, not an automated decision about you. Our store is not directed at children: it is not for use by anyone under 13, and customers aged 13–17 must have a parent or guardian's consent to place an order.

Order fulfilment, shipping address and billing data specifics

For order fulfilment we process your name, contact details and shipping address (street address, city, postal code and country), and we pass the shipping address to the delivery carrier so your kit can be dispatched and tracked. For returns, exchanges and refunds our customer support team processes your order reference, shipping address and the reason for return to arrange collection or replacement. Billing data for the payment itself is handled by Stripe; we retain the order total, currency (USD), and payment status for accounting and dispute handling. We do not receive or store your full card number.

Complaints

If you have a concern, please contact us first at support@elevrepairs.shop. You also have the right to complain to the UK Information Commissioner's Office (ICO), or to your local EU data protection authority if you are in the EEA.

Changes and contact

We may update this policy and will change the "last updated" date above. For any privacy question, contact ELEVATOR REPAIR SPECIALISTS LTD at support@elevrepairs.shop or 80 High Street Coleshill, B46 3AH, England. Governing law for this policy is England and Wales.