Privacy Policy

NorthWest Patriots is a trading name of Heimdell Tech Ai Ltd, a company registered in England & Wales (company number 16478408), registered office Preston, PR1 9DJ. We are the data controller for the personal data described here and are registered with the Information Commissioner's Office (ICO), registration number ZC079121. Contact us about your data at support@support-your-local-patriot.online. 1. What we collect - When you order: your name, email address, phone number, delivery address, the items you buy and your order history. Your card details go straight to our payment provider, Stripe. We never see or store them. - If you create an account: your name, email address and saved addresses. Your password is stored scrambled (hashed), so we can't read it. - If you contact us: your name, email address, phone number if you give it, and your message. - If you join our mailing list: your email address. - If you leave a review: the name and email address you give, and your review. - If you use our chat assistant: your questions. Questions it can't answer are saved without your name so we can improve our answers. Please don't type personal details into the chat. - When you use the site: technical information such as your IP address and browser, which our server uses for security, for example to stop repeated login attempts. 2. Why we use it and our lawful basis - To make, deliver and support your order, including returns and refunds, and to contact you about it: to perform our contract with you. - To answer your messages and complaints: our contract with you, or our legitimate interest in helping our customers. - To send you news and offers by email, only if you've signed up: your consent, which you can withdraw at any time. - To keep the site and payments secure and prevent fraud: our legitimate interests. - To keep tax and accounting records: our legal obligations. 3. Who we share it with We only share what each provider needs to do their job, and we never sell your data: - Stripe, to take payments. - Our web hosting provider, whose servers are in the UK and store the site and its database. - Resend, an email service we may use to send ourselves notifications about new orders and sign-ups. These emails contain your order and contact details. - Delivery couriers, who receive your name, address and, where needed, phone number. - Professional advisers such as accountants, and authorities where the law requires it. We don't use advertising or analytics tracking at the moment. If we add it, it will only run with your consent (see our Cookie Policy). 4. International transfers Stripe, and Resend where we use it, may process data in the United States. Where data leaves the UK, it's protected by approved safeguards such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Agreement. 5. How long we keep it - Orders and related records: 6 years after the end of the financial year they relate to, as required for tax. - Accounts: until you ask us to close your account, apart from order records. - Messages to us: up to 2 years after we've dealt with them. - Mailing list: until you unsubscribe. - Reviews: while they're shown on the site. 6. Your rights You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, object to us using it, or send it to you or someone else in a portable format. Where we rely on your consent, you can withdraw it at any time. Email us to make a request. We'll reply within one month. We don't make decisions about you using only automated processing. 7. Security The site uses encrypted connections (HTTPS), admin access is password-protected and limited, passwords are hashed, and card details never reach our servers. 8. Children Our shop isn't aimed at children. 9. Complaints If you're unhappy with how we've handled your data, please contact us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. 10. Changes We'll update this page if anything changes. The date at the top shows when it was last updated.