Data Protection & GDPR

At Boiler-m8.com we take data protection seriously, in line with current UK law:

• Boiler-m8.com 

  ARE 

  registered with the Information Commissioner's Office as a data handler, processor & controller;
• Our systems

  ARE

   encrypted and regularly tested by

  Trustwave

  ;
• We only hold the

  MINIMUM

   information required to process your order and maintain statutory records for tax and accounting purposes;
• We 

  NEVER 

  share your information with any third parties for marketing purposes;
• We 

  DO 

  share limited information with delivery service providers to enable them to process your order;
• We 

  DO NOT 

  hold your credit card or PayPal details on our systems;
• We only hold the last 

  FOUR

  digits of your card number for order identification and fraud management;
• We only keep your information on file for the

  MINIMUM

  period required by either law; or to fulfil our customer service and/or guarantee/warranty obligations.

The General Data Protection Regulations (GDPR) come in to effect on the 25th May 2018, superceding the Data Protection Act (DPA). Boiler-m8.com are both a data 'Processor' & 'Controller', and use your information as described above and in our Privacy Policy.

If you have any concerns or to request a copy of the information we hold about you, please contact:

Right to be Forgotten (GDPR)

Under the General Data Protection Regulations (GDPR), you can write to us at the above address to exercise your right to be forgotten - in that we will remove and destroy all data regarding you and your dealings with us as permissible by current Law. As described above, we DO NOT under any circumstances use your personal data for marketing purposes, or pass your data to any third parties for this purpose. If you write to us to excercise your right to be forgotten, we will remove from our systems all basic details relating to your account as soon as practicably possible. Information that we are legally required to hold for a specific period, such as by the HMRC, will be removed only once the statutory period has lapsed.

You can follow the link below to discover about how the Data Protection Act, General Data Protection Regulations and the work of the ICO affect you:

Our Trustwave certification can be validated below: