Privacy Policy - VacAir Superstore

Privacy Policy – VacAir Superstore

Last updated: March 2026

1. Who we are

This website is operated by KMP (UK) Limited, trading as VacAir Superstore (“we”, “us”, “our”). We are the Data Controller responsible for your personal data.

Email: info@kmp-uk.com
Telephone: +44 (0) 113 2088509
Address: Unit 7 Techno Trading Estate, Station Road, Morley, Leeds, LS27 8JR, United Kingdom

2. What personal data we collect

We may collect and process the following personal data:

Information you provide directly: Name, company name, billing/delivery addresses, email, telephone number, and details of your enquiry or order.
Payment information: Card details provided over the telephone (see Section 4).
Technical and usage data: IP address, browser type, device type, and website activity (pages visited).
Marketing preferences: Email subscription preferences and communication history.

3. How we use your data (lawful basis)

We only process personal data where we have a lawful basis under the UK GDPR:

Contract: To respond to enquiries, process/fulfil orders, and manage deliveries.
Legitimate Interests: To improve our website, monitor website performance, and prevent fraud.
Consent: To send marketing communications (where you have opted in) and to use non-essential tracking cookies.
Legal Obligation: To comply with accounting, tax, and regulatory requirements.

4. Payments (PCI DSS compliant processing)

We do not process payments directly through our website. Payments are taken over the telephone and processed securely using our payment provider, TakePayments.

All transactions are handled in accordance with the Payment Card Industry Data Security Standard (PCI DSS).
We do not store full card details. Payment information is entered directly into secure systems and is not retained after the transaction is completed.

5. How we share your data

We only share personal data with trusted third parties where necessary to run our business:

Service providers: Payment processors (TakePayments), courier/delivery companies, and IT/hosting providers.
Analytics and marketing providers: Google Analytics (to understand website usage) and Meta Platforms (for advertising and remarketing).

These providers are contractually required to keep your data secure and only use it on our instructions.

6. International data transfers

Some third-party providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK-approved International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs).

7. How long we keep your data

We only retain personal data for as long as necessary:

Customer enquiries: 12–24 months.
Order and transaction records: 6–7 years (to comply with UK tax laws).
Marketing data: Until you withdraw consent or unsubscribe.

8. Your rights

Under UK GDPR, you have the right to access, correct, or request deletion of your data, restrict/object to processing, data portability, and the right to withdraw consent. To exercise these rights, please contact us using the details in Section 1.

9. Cookies and tracking

We use cookies to improve your experience.

Essential cookies: Required for core website functionality.
Analytics & Marketing cookies: Used only with your consent to understand website usage and for advertising. You can accept, reject, or manage your preferences via our website cookie banner.

10. Marketing communications

We may send you marketing communications if you have given explicit consent, or if you are an existing customer and the communication relates to similar products or services (under the PECR “soft opt-in”). You can unsubscribe at any time using the link in our emails.

11. Data security

We take appropriate technical and organisational measures to protect your personal data, including secure systems, encryption, and restricted access controls.

12. Third-party links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

13. Complaints

If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) (www.ico.org.uk).