Privacy Policy

Who is responsible

STC REACTIVE LTD, at 20 The Meads, Bricket Wood, United Kingdom, AL2 3QJ, is the data controller for personal information collected through stcreactive.shop. Questions and privacy requests can be sent to support@stcreactive.shop or made by telephone at +44 7188306169.

What we collect and collection sources

Collection sources include information provided by you when you place an order, submit a form, contact support or request a return. Technical information is collected by our hosting, security and analytics technologies. Delivery status may come from an order fulfilment partner or carrier.

• Contact details you provide, including name, email address and telephone number.
• Order and fulfilment details, including products, quantities, shipping address, billing address, order value and transaction references.
• Support and returns information, including messages, photographs you choose to provide, delivery issues and refund records.
• Bulk enquiry details, including organisation, industry, estimated quantity, USD budget, setting, timeline and delivery region.
• Technical information produced when you use the site, such as IP address, browser type, device information, pages viewed, referring page and cookie choices.
• Payment status and limited billing information supplied by the payment processor. We do not receive or store full card numbers or card security codes.

Why we use it and our legal bases

• Contract: to create checkout sessions, take payment, confirm orders, deliver goods, provide tracking, process returns and issue refunds.
• Legitimate interests: to answer product questions, prevent fraud, secure the site, maintain transaction records, improve navigation and understand aggregate store performance.
• Legal obligation: to keep tax, accounting, consumer-rights and payment records and to respond to lawful requests.
• Consent: for non-essential analytics or marketing cookies and for optional communications where consent is required. Consent can be withdrawn at any time.

Payment provider boundary

Card checkout is processed by Stripe. If PayPal is presented and selected at checkout, PayPal processes that payment within its own environment. These providers collect payment credentials under their own privacy notices. We receive transaction status, amount, currency, payer contact details where supplied, and a processor reference; we do not receive the complete card number or card security code.

Who we share it with

We do not sell personal information. We do not share personal information for cross-context behavioural advertising.

• Hosting and infrastructure providers that deliver and secure the website.
• Stripe and, where selected at checkout, PayPal, for payment processing, fraud checks, disputes and refunds.
• Email and customer-support providers used to send confirmations and answer enquiries.
• Fulfilment partners and postal or parcel carriers that need the recipient name, delivery address, contact details and parcel information.
• Analytics and cookie providers only according to your choices and our Cookie Policy.
• Professional advisers, insurers, banks, regulators, courts or law-enforcement bodies where reasonably necessary or legally required.

International transfers

Some processors may handle data outside the United Kingdom or European Economic Area. Where restricted transfers occur, we use an applicable adequacy decision, the UK International Data Transfer Agreement or Addendum, Standard Contractual Clauses, or another lawful safeguard, together with appropriate technical and organisational measures.

How long we keep it

• Order, payment reference, refund and accounting records: generally six years after the relevant financial year, unless a longer period is required for a dispute or legal obligation.
• Support and returns correspondence: generally up to three years after the matter closes.
• Unconverted contact and bulk enquiries: generally up to twenty-four months.
• Security logs: normally up to twelve months, unless needed to investigate an incident.
• Cookie and consent records: for the lifetime stated in the Cookie Policy or until consent is withdrawn.

Security

We use access controls, encrypted transport, restricted server credentials and payment-provider checkout pages. No internet service is risk-free, but we limit access to people and processors who need the information for the purposes described here.

UK and EU GDPR rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent. Email support@stcreactive.shop with enough information for us to verify and respond to the request. You may complain to the UK Information Commissioner’s Office or, where applicable, your local EEA supervisory authority.

California and other US privacy rights

California residents may request access to categories and specific pieces of personal information, correction, deletion and information about disclosures, subject to legal exceptions. We do not sell personal information and do not share it for cross-context behavioural advertising, so no sale or sharing opt-out is required for our current practices. We will not discriminate for exercising applicable rights.

Cookies

Strictly necessary storage supports cart contents, security and admin authentication. Non-essential analytics or preference technologies are used only where permitted and according to your choices. Details, purposes and lifetimes are listed in our Cookie Policy.

Automated decisions and children

We do not make decisions with legal or similarly significant effects using solely automated processing. Our shop is intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children.

Contact and complaints

Contact STC REACTIVE LTD at support@stcreactive.shop, +44 7188306169, or 20 The Meads, Bricket Wood, United Kingdom, AL2 3QJ. We aim to acknowledge privacy requests promptly. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.