Privacy policy

1. Who is responsible for your data

The data controller is the business set out below. You can contact us about anything in this policy through the contact page.

Trading name

The Bandsaw Store

Legal name

THE BANDSAW BLADE STORE LTD

Company number

17337048

Registered office

3 Durrant Road, Bournemouth, Dorset, BH2 6NE

Email

sales@thebandsawstore.co.uk

VAT number

GB355975213

2. What we collect

• Orders. Your name, email address, phone number if you give one, billing and delivery addresses and the items you order, including blade lengths.
• Enquiries. What you write in the contact, trade account and product enquiry forms, with your name, email address, phone number and company if you give them.
• Accounts. If you create an account: your name, email address and the company and phone number if you give them, a password kept only as a hash and never as readable text, your saved addresses and your order history.
• Live quotes. The blades, lengths and quantities you price or put in your basket on this site, grouped by a random quote id kept with your basket, so our team can see what is being quoted and help. The quote carries no name or contact details until you sign in or submit your details at checkout, when it joins your customer record. You can switch live quotes off on the cookie policy page.
• Usage counts. Page views and a few actions such as searches, blade wizard runs, adding to the basket and starting or completing checkout. These carry no name, email address or account details and use no cookies or browser storage.
• Technical data. Your IP address, used to limit repeated requests to forms and sign-in and to keep the site secure, and the standard technical data our host handles to deliver pages.

We never see or store your full card details. Payment happens on Stripe's payment page, and Stripe tells us that the payment went through, not your card number.

3. Why we use it, and our lawful bases

• Performance of a contract: taking payment, making and delivering your order and putting right anything that goes wrong with it.
• Legal obligation: keeping the accounting and tax records the law requires of a UK company.
• Legitimate interests: answering enquiries, running accounts, preventing fraud and abuse, counting visits and grouping the prices you build into a live quote so we can see what the site is used for, help with what you are pricing and improve the service, and keeping the site working and secure.
• Consent: only where we ask for it explicitly. We do not currently send marketing email. The emails you receive are the ones an order or account needs: the order confirmation, confirming your email address and resetting your password.

4. Who processes data for us

We use a small number of providers, each for one job. This list is the whole of it.

• Stripe takes card payments. Your card details go to Stripe directly and never touch our servers.
• Resend sends the emails described above, so it receives the recipient's email address and the content of each message.
• Kabaido is the order management system we use. It holds orders, quotes (including the live quotes built on this site), customer records, enquiries and customer accounts, and the website content.
• Vercel hosts this website, so it handles the technical data of every request.
• The supplier and the courier. The supplier that makes and dispatches your order and the courier that delivers it receive the details they need to do so, such as the items, the lengths and the delivery address.

We do not sell personal data or share it with advertisers. Beyond the providers above we share it only where the law requires it.

5. Transfers outside the UK

Some of these providers are based outside the UK or process data there. Where personal data leaves the UK, the transfer is covered by the safeguards UK data protection law requires.

6. How long we keep it

Order and payment records are kept for as long as UK tax and company law requires. Enquiries are kept while they are needed to answer you and for a reasonable time afterwards. Account details are kept until you ask us to close the account. A live quote with no activity for 30 days is closed. Usage counts carry nothing that identifies you.

7. Cookies and similar storage

The site sets one cookie, which keeps you signed in, and keeps your basket and its random quote id in your browser's local storage. It sets no advertising cookies. The cookie policy lists everything the site stores in your browser and has the switch for live quotes.

8. Your rights

Under UK data protection law you can ask us to:

• tell you what personal data we hold about you and give you a copy
• correct data that is wrong
• erase data we no longer need to keep
• restrict or object to particular processing
• hand your data over in a portable format

To use any of these rights, send a message through the contact page. We will respond within the time UK data protection law allows.

9. Complaints

If you think we have handled your data badly, tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

10. Changes to this policy

We will update this page if the way we handle data changes. If a new provider is added, it is named here.