Privacy Policy

Last updated: 12 June 2026

This policy explains what personal data we collect when you use poolpro.co.uk or buy from us, why we collect it, who we share it with, and the rights you have over it. We have written it in plain English. If anything is unclear, just ask.

1. Who we are

PoolPro Hampshire Ltd ("Pool Pro", "we", "us") is a pool and spa supplies business based in Hampshire. We run the website at poolpro.co.uk and the store at Southwick Road, North Boarhunt, Hampshire, PO17 6JH. For the personal data described here, we are the data controller.

2. What we collect

Depending on how you use the site, we may collect:

• Account and contact details: your name, email address, delivery and billing address, and phone number.
• Order information: the products you buy, order value, and order history.
• Payment information: taken securely by our payment providers. We do not see or store your full card number on our own systems.
• Communications: messages, emails and calls between you and our team, including water-testing or product enquiries.
• Reviews and feedback: any product reviews, ratings or survey responses you choose to leave.
• Marketing preferences: whether you have opted in to our emails.
• Technical and usage data: your IP address, device and browser type, and how you use the site, collected through cookies and similar technology (see our Cookie Policy).

You can browse the site without giving us personal details. Some things, like placing an order or opening an account, need certain information to work.

3. How we collect it

• Directly from you, when you create an account, place an order, sign up to emails, leave a review, or contact us.
• Automatically, through cookies and similar technology when you use the site.
• From third parties we work with, such as our payment providers (confirming a payment) and couriers (delivery updates).

4. How we use it, and our lawful bases

Under UK data protection law we must have a lawful basis for using your personal data. Here is what we do and why.

What we do	Lawful basis
Process, fulfil and deliver your orders, and manage your account	Performance of our contract with you
Take payment and help prevent fraud	Contract, and our legitimate interest in protecting against fraud
Answer your questions and provide customer service and water-testing advice	Contract, and our legitimate interest in helping our customers
Send marketing emails (if you have opted in, or to existing customers about similar products)	Your consent, or our legitimate interest under the soft opt-in rules. You can unsubscribe at any time.
Keep accounting, tax and transaction records	Our legal obligations
Run, secure and improve the website	Our legitimate interest in a safe, working website
Manage reviews and ratings	Your consent, or our legitimate interest in honest feedback

Where we rely on legitimate interests, we have checked that this does not unfairly override your rights. Where we rely on consent, you can withdraw it at any time.

5. Who we share it with

We do not sell or rent your personal data. We share it only with the providers we need to run the business, and only with the information they need. These include:

• Payment providers, to take and secure your payment (for example PayPal and our card payment provider). [Confirm exact providers.]
• Couriers, to deliver your order and give you tracking updates (for example APC Overnight). [Confirm.]
• Email and review platforms, to send order updates, run our mailing list, and collect reviews. [Confirm providers.]
• IT, hosting and website providers, who keep the site and our systems running.
• Analytics providers, who help us understand how the site is used (for example Google Analytics). [Confirm.]
• Our accountants and professional advisers, and HMRC or other authorities where the law requires it.

We only allow these providers to use your data for the purposes we set, and to keep it secure.

6. How long we keep it

We keep personal data only as long as we need it.

• Order and transaction records: six years after the order, to meet HMRC and accounting rules.
• Account details: for as long as your account is open. You can ask us to close it at any time.
• Marketing data: until you unsubscribe or ask us to stop.

When we no longer need your data, we delete it or make it anonymous.

7. Transfers outside the UK

Some of our providers may process data outside the UK. Where they do, we make sure there are appropriate safeguards in place (such as a UK adequacy decision or standard contractual clauses) so your data has a similar level of protection. [Confirm whether any providers are outside the UK or EEA.]

8. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data, where there is no reason for us to keep it;
• ask us to restrict or stop using your data in certain cases;
• object to us using your data, including for marketing;
• ask us to transfer your data to you or another provider;
• withdraw your consent at any time, where we rely on it.

To use any of these rights, email [email protected] or write to us at the address above. We will respond within one month. There is normally no charge.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would always prefer the chance to put things right first, so please do contact us.

9. Cookies

We use cookies and similar technology to run the site, remember your basket and preferences, and understand how the site is used. You can control cookies through your browser. For the full detail, see our Cookie Policy.

10. How we keep it safe

We use appropriate measures to protect your data against loss, misuse and unauthorised access. Information you send to the site is encrypted over a secure (SSL) connection, and card payments are handled to PCI DSS security standards by our payment providers.

11. Children

The site is intended for adults. We do not knowingly collect data from children under 16. If you believe a child has given us their data, please contact us and we will remove it.

12. Changes to this policy

We may update this policy from time to time. When we make a significant change, we will update the date at the top of this page. Please check back occasionally so you know how we look after your data.

13. How to contact us

For any question about this policy or your personal data, contact us: