Last updated: 27 August 2026
1. Who we are
This website, alphaair.co.uk, is operated by Alpha Air Ventilation Supplies Ltd (“Alpha Air”, “we”, “us”, “our”). We are the data controller for the personal information described in this policy.
- Registered/trading address: 72 Cannock Street, Thurmaston, Leicester LE4 9HR, United Kingdom
- Phone: 0116 246 0031
- Email: sales@alphaair.co.uk
- Company registration number: 08447300 (registered in England & Wales)
- ICO registration number: ZC230153
We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We may update this policy from time to time; changes will be posted on this page with a revised “last updated” date.
2. Information we collect
2.1 When you place an order
When you buy from us we collect the information needed to process and deliver your order:
- Your name and, where applicable, company name
- Billing and delivery addresses
- Email address and telephone number
- Details of the products you order, including any bespoke specifications (e.g. custom sizes)
- Order history and order notes
2.2 When you create a customer account
If you register for an account on our website we store your name, email address, password (stored as a secure hash — we cannot see it), saved addresses, and your order history so you can track orders and reorder more easily. You can view and update this information at any time under My Account, or ask us to delete your account (see “Your rights” below).
2.3 When you contact us or subscribe to our newsletter
Our contact and newsletter forms collect the details you enter — typically your name, email address, telephone number and the content of your enquiry. Form submissions are sent to us by email.
If you subscribe to our newsletter we use your email address to send you occasional updates about our products and services. We do not currently use any third-party marketing automation platform. You can unsubscribe at any time using the link in any email or by contacting us.
2.4 Payment information
Payments on our website are processed by Stripe. This includes card payments and, where offered, Apple Pay, Google Pay, Link, PayPal, Klarna and Clearpay, all processed through Stripe.
Your full card details are never stored on our servers. Card and payment details are sent directly to Stripe, which returns a secure token to confirm payment. If you choose to save a payment method for faster checkout, it is stored by Stripe — we only see a reference such as the card type, last four digits and expiry date, which you can delete from your account at any time.
Stripe acts as a processor on our behalf for payment processing and as an independent controller for some purposes (such as fraud prevention and regulatory compliance). See Stripe’s privacy policy at stripe.com/gb/privacy.
If you pay using Klarna, Klarna will process your personal data as an independent data controller in order to carry out credit and affordability assessments and to manage your repayments. See Klarna’s privacy notice at klarna.com/uk/privacy-policy. Similarly, PayPal, Clearpay, Apple and Google act as independent controllers for payments made through their services.
2.5 Information collected automatically
When you visit our website our hosting servers automatically record technical information including your IP address, browser type, device type, the pages you visit, and date/time stamps. We use this information for site security, fraud screening, error diagnosis and to understand how the website is used. Server logs are kept only as long as necessary for these purposes.
3. Cookies
Our website uses cookies — small data files placed on your device. We use two kinds: essential cookies, which are always on because the website cannot work without them, and optional cookies, which are only set if you consent via the cookie banner.
Essential cookies (always active):
- Basket and checkout cookies — remember the contents of your basket and keep your checkout session active. These typically expire within 48 hours.
- Login cookies — keep you signed in to your customer account.
- Preference cookies — for example, a cookie remembering whether you prefer metric or imperial product sizes.
- Consent cookies — set by our consent management tool (CookieYes) to record the cookie choices you have made, so we do not ask you on every visit.
Optional cookies (only with your consent):
- Analytics cookies — Google Analytics, which helps us understand how visitors find and use the website (pages visited, time on site, approximate location). This information is aggregated and does not directly identify you.
- Advertising cookies — Google Ads conversion measurement, which tells us whether our advertising led to a visit or purchase. Data collected by Google is processed in accordance with Google’s privacy policy.
When you first visit, the cookie banner lets you accept all, reject all, or choose categories. Optional cookies are not set until you consent, and you can change or withdraw your consent at any time using the cookie settings icon shown on every page. You can also delete or block cookies through your browser settings, but parts of the website (such as the basket and checkout) may not work without essential cookies.
4. How and why we use your information
| Purpose | Data used | Lawful basis (UK GDPR) |
|---|---|---|
| Processing and delivering your order, handling returns and refunds | Order, contact and delivery details | Performance of a contract |
| Taking payment and preventing fraud | Payment tokens, order and device information | Performance of a contract; legitimate interests (fraud prevention) |
| Providing your customer account | Account details, order history | Performance of a contract |
| Responding to enquiries | Contact form details | Legitimate interests; steps prior to a contract |
| Inviting feedback or a review on your order (one email, ~10 days after completion) | Email address, order details | Legitimate interests / soft opt-in (opt out any time \u2014 at checkout, by reply, or by contacting us) |
| Sending our newsletter | Email address | Consent (withdraw any time) |
| Keeping accounting and tax records | Order and invoice records | Legal obligation |
| Website security, debugging and service improvement | Server logs, technical data | Legitimate interests |
| Service emails about your order (confirmation, dispatch) | Email address, order details | Performance of a contract |
We do not sell your personal data. We do not currently carry out profiling or automated decision-making that produces legal or similarly significant effects. (If you choose Klarna, Klarna performs its own automated credit assessment as an independent controller — see section 2.4.)
5. Who we share your information with
We share personal data only where necessary, with:
- Stripe (and, where you choose them, PayPal, Apple Pay, Google Pay, Link, Klarna or Clearpay) — to process payments
- Delivery couriers — currently DX Delivery and DPD — your name, delivery address, email address and contact number so they can deliver your order and send delivery updates
- Our website hosting provider — which stores the website database, including customer and order records
- Email service providers — to send order and enquiry emails
- Professional advisers (accountants, legal advisers, insurers) where necessary
- HMRC, regulators or law enforcement where we are legally required to do so
All processors act under contracts requiring them to protect your data and use it only on our instructions.
6. International transfers
We store your data in the United Kingdom. Some of our service providers (for example Stripe) may process data in the United States or other countries. Where data is transferred outside the UK, we rely on UK adequacy regulations, the UK International Data Transfer Agreement/Addendum or other safeguards approved under UK GDPR.
7. How long we keep your information
- Order, invoice and payment records: at least 6 years from the end of the financial year they relate to, as required by UK tax and company law.
- Customer accounts: for as long as your account remains open. You may request deletion at any time; we will retain only what we must keep for legal reasons (e.g. past order records).
- Contact form enquiries: up to 24 months after the enquiry is resolved.
- Newsletter subscriptions: until you unsubscribe.
- Server logs: typically 30–90 days, per our hosting provider’s policy.
8. How we protect your information
The website is served over HTTPS (TLS encryption). Payment details are handled entirely by Stripe, which is PCI-DSS Level 1 certified. Access to customer data is restricted to staff who need it, and the website and its software are kept up to date.
9. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you (a “subject access request”)
- Rectify inaccurate or incomplete data
- Erase your data (“right to be forgotten”), subject to legal retention requirements
- Restrict or object to processing, including any direct marketing
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time where processing is based on consent (e.g. the newsletter)
To exercise any of these rights, contact us at sales@alphaair.co.uk or 0116 246 0031. We will respond within one month. We may need to verify your identity before acting on a request.
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk / 0303 123 1113. We would appreciate the chance to resolve your concern first.
10. Children
Our website sells commercial and industrial ventilation products and is not intended for use by children. We do not knowingly collect personal data from anyone under 16.
11. Contact us
Questions about this policy or your personal data:
Alpha Air Ventilation Supplies Ltd
72 Cannock Street, Thurmaston, Leicester LE4 9HR
Phone: 0116 246 0031
Email: sales@alphaair.co.uk