Who is responsible
CUSTOM SOLAR (MK) LIMITED is the data controller for this store and the Solivio brand. Our registered contact details are: CUSTOM SOLAR (MK) LIMITED, 8 Denbigh Hall Industrial Estate, Denbigh Hall Drive, Bletchley, Milton Keynes, MK3 7QT, United Kingdom. Email support@custtomsolarmk.shop; telephone +44 7850299930.
For privacy requests, use support@custtomsolarmk.shop with the subject “Privacy request”. We operate from the United Kingdom and apply UK GDPR and the Data Protection Act 2018. We also honour applicable EU GDPR and California consumer rights where they apply.
What we collect and collection sources
We collect information you give us: name, email, telephone, shipping address, billing address, country, order contents, membership choice, support messages, bulk-order details, return reasons and guardian contact where relevant. We receive transaction status, processor customer references and limited payment metadata from payment processors, but never receive or store your full card number, security code or online-payment credentials.
Collection sources: information comes directly from you when you browse, order, create an account or contact us; automatically from your device and use of the store; and from service providers involved in payment, authentication, email and delivery. Automatically collected data includes IP address, browser, pages visited, consent choices, fraud signals and checkout events. Carriers provide tracking and delivery status, our identity provider provides account authentication status, and our email processor provides message delivery status.
Why we use it and legal bases
- Contract: take payment, fulfil physical orders, deliver quarterly Studio goods, provide membership benefits, manage returns and answer order questions.
- Legal obligation: tax, accounting, consumer rights, product safety, fraud prevention and lawful authority requests.
- Legitimate interests: secure the store, prevent misuse, keep accurate stock and support records, improve navigation and recover an incomplete checkout where permitted.
- Consent: optional marketing, non-essential analytics and the contact permissions stated on a form. Consent may be withdrawn without affecting earlier lawful processing.
We do not use special-category data for this store and ask customers not to include it in free-text messages.
Payment, order fulfilment, delivery and return data
Stripe processes card checkout and billing. PayPal may process wallet payments where selected. Each provider acts under its own privacy terms and sends us payment status, transaction references, payer contact and billing details needed for the order. Neither provider gives us your complete card number. We do not sell payment credentials.
Shipping address and order fulfilment: we use the recipient name, shipping address, telephone, ordered items and parcel details to validate the destination, prepare and dispatch the order, provide tracking, manage delivery problems and complete returns. We disclose only the delivery details needed by fulfilment partners and carriers. Carriers return tracking, attempted delivery and delivery status. Return and refund records may include product condition photographs, parcel references and correspondence needed to assess the request.
International transfers
Worldwide ordering may require information to be processed outside the United Kingdom or European Economic Area. Where a destination lacks an adequacy decision, we use appropriate safeguards such as the UK International Data Transfer Addendum, standard contractual clauses, provider transfer commitments and data minimisation. Delivery details necessarily travel to the destination carrier.
How long we keep it
- Checkout leads and ordinary support or bulk enquiries: up to 24 months after the last interaction.
- Orders, payments, refunds and tax records: generally 6 years after the relevant financial year where UK recordkeeping law applies.
- Account and membership data: while active and up to 24 months after closure, except records required for tax, disputes or fraud prevention.
- Delivery tracking: up to 24 months after delivery; product-safety records may be kept longer where necessary.
- Consent and security logs: for the period needed to demonstrate consent, investigate abuse and meet limitation periods.
We delete or anonymise information when its purpose and legal retention need end.
UK GDPR, EU GDPR and California rights
Depending on location, you may ask for access, correction, deletion, restriction, portability, objection or withdrawal of consent. UK/EU users may complain to the supervisory authority for their jurisdiction; in the UK this is the Information Commissioner’s Office. California residents may request to know, correct or delete personal information and may not be discriminated against for exercising rights. We verify requests proportionately and may retain data where law permits.
Email support@custtomsolarmk.shop. We normally respond within one month under UK/EU law or within the period required by applicable California law.
Do Not Sell or Share
We do not sell personal information and do not share it for cross-context behavioural advertising. A request may still be sent to support@custtomsolarmk.shop; we will record and honour it. Essential disclosures to payment, hosting, security, email and delivery processors are service-provider disclosures, not sales.
Security
We use access controls, server-only secrets, encryption in transit, restricted database credentials, payment-provider boundaries, webhook verification, anti-spam controls, logging and retention limits. No online system is risk-free; suspected account or payment misuse should be reported promptly to support@custtomsolarmk.shop.
Automated decisions and children
Sun Finder is a transparent product-matching rule based on answers about place, sunlight, mode and budget. It does not make legal or similarly significant decisions, and we do not use customer content to train a model.
The store is not for children under 13. Customers aged 13–17 require parent or guardian consent; purchases must be completed by an adult or under adult supervision. Small parts are unsuitable for children under 3 and require supervision.
Complaints and contact
Contact CUSTOM SOLAR (MK) LIMITED, 8 Denbigh Hall Industrial Estate, Denbigh Hall Drive, Bletchley, Milton Keynes, MK3 7QT, United Kingdom. Email support@custtomsolarmk.shop; telephone +44 7850299930. We will investigate privacy complaints fairly. UK users may also complain to the Information Commissioner’s Office, and EU users to the supervisory authority for their jurisdiction.
Material policy changes will be posted here with a revised date and, where required, communicated directly.
If you need this policy in another accessible format, contact customer support.