Privacy policy

Privacy Policy

Last updated: June 2026

Questrom Ltd ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard the information you provide when using our website at www.questorm.co.uk.

Questrom Ltd is the data controller for the personal data collected through this website. We are registered in England and Wales (Company No. 11469680) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What Information We Collect

We may collect and process the following personal data:

  • Contact and account information: name, email address, phone number, and billing/delivery address when you place an order or contact us.
  • Transaction data: details of products purchased, payment method type (we do not store full card details), and order history.
  • Technical data: IP address, browser type and version, time zone, location, operating system, and other technology identifiers on the devices you use to access our website.
  • Usage data: information about how you use our website, products, and services.
  • Marketing preferences: your preferences for receiving marketing from us.

2. How We Use Your Information

We use your personal data for the following purposes:

  • To process and fulfil your orders and manage your account.
  • To communicate with you about your orders, including delivery updates and after-sales support.
  • To comply with our legal and regulatory obligations.
  • To improve our website, products, and services.
  • To send you marketing communications where you have opted in or where we have a legitimate interest to do so (you can opt out at any time).

3. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

  • Contract: to fulfil orders and provide our services to you.
  • Legal obligation: to comply with applicable laws and regulations.
  • Legitimate interests: to improve our business and send relevant marketing (where you have not opted out).
  • Consent: where you have provided explicit consent (e.g. for certain marketing communications).

4. Sharing Your Information

We do not sell your personal data. We may share your data with:

  • Delivery and logistics partners (e.g. DPD, DHL, Royal Mail) to fulfil your orders.
  • Payment processors to process card transactions securely.
  • IT and platform providers (e.g. Shopify) who host and support our website.
  • Professional advisors (e.g. accountants, lawyers) where necessary.
  • Regulatory authorities where required by law.

All third parties we work with are required to handle your data securely and in compliance with applicable data protection law.

5. Cookies

Our website uses cookies to improve your browsing experience and to help us understand how visitors use our site. Cookies are small text files placed on your device. You can control cookies through your browser settings. For more information, visit www.allaboutcookies.org.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Order data is typically retained for 7 years for tax and legal compliance purposes.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • The right to access your personal data.
  • The right to correct inaccurate or incomplete data.
  • The right to erasure (the "right to be forgotten") in certain circumstances.
  • The right to restrict processing of your data.
  • The right to data portability.
  • The right to object to processing based on legitimate interests.
  • The right to withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, please contact us at sales@questorm.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website uses SSL encryption for data transmission. However, no internet transmission is completely secure, and we cannot guarantee the absolute security of data sent to us online.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies before providing any personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We recommend checking this page periodically to stay informed about how we protect your data.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact our Data Controller:
Email: sales@questorm.co.uk
Phone: 01744 520110
Address: 26 Daleside, Gerrards Cross, SL9 7JE
Monday to Friday, 9am to 5pm