Privacy policy

Last updated: 6 September 2026

Express Matting Services Ltd., trading as Spill Safe Storage, operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Spill Safe Storage (spillsafestorage.co.uk) is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in it.

Who we are

For the purposes of the UK GDPR and the Data Protection Act 2018, the data controller for personal data collected through this website is:

Express Matting Services Ltd., trading as Spill Safe Storage
Unit 1B, Summit Works
Manchester Road
Burnley, Lancashire
BB11 5HG
United Kingdom

Registered in England and Wales, company number 07000887.
VAT registration number GB987256073.
Email: sales@spillsafestorage.co.uk
Telephone: +44 1282 270214 (Monday to Friday, 08:30 – 17:00 UK time)

Personal information we collect or process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from it, depending on how you interact with the Services and as permitted or required by applicable law:

  • Contact details including your name, address, billing address, shipping address, phone number and email address.
  • Business details where you order on behalf of a company, including company name, VAT number and the name of the person placing the order.
  • Financial information including credit card, debit card and financial account numbers, payment card information, transaction details, form of payment, payment confirmation and other payment details. We do not see or store your full card number — payments are processed by Shopify Payments and the card networks.
  • Account information including your username, password, security questions, preferences and settings.
  • Transaction information including the items you view, put in your basket, add to your wishlist, or purchase, return, exchange or cancel, and your past transactions.
  • Communications with us including the information you include in emails, telephone calls and contact form messages, for example when sending a customer support enquiry.
  • Device information including information about your device, browser or network connection, your IP address, and other unique identifiers.
  • Usage information including information about your interaction with the Services, including how and when you navigate them.

We do not knowingly collect special category data (such as health, biometric or political data), and we ask that you do not send it to us.

Where we get your personal information

  • Directly from you — when you create an account, place an order, use the Services, or communicate with us.
  • Automatically through the Services — from your device when you visit the website, and through cookies and similar technologies.
  • From our service providers — when we engage them to provide technology or to process personal information on our behalf, for example payment processors and delivery carriers.
  • From our partners or other third parties — for example fraud-prevention services.

How and why we use your personal information

Depending on how you interact with us, we use personal information for the following purposes:

  • Providing the Services. To perform our contract with you: to process your payments, fulfil and deliver your orders, remember your preferences, send order notifications, process returns, exchanges and refunds, and create and manage your account.
  • Customer support. To answer your questions, deal with complaints, and maintain our relationship with you.
  • Marketing and advertising. To send marketing and promotional communications by email, text message or post, and to show you online advertisements, where you have consented or where we are otherwise permitted to do so. You can opt out at any time.
  • Security and fraud prevention. To authenticate your account, provide a secure payment and shopping experience, and to detect, investigate or act on possible fraudulent, illegal, unsafe or malicious activity.
  • Improving the Services. To understand how the website is used and to make it work better.
  • Legal and regulatory reasons. To comply with our legal obligations (including keeping VAT and accounting records), to respond to valid legal process, and to establish, exercise or defend legal claims.

Our lawful bases under the UK GDPR

  • Performance of a contract — processing your order, taking payment, arranging delivery, handling returns and refunds.
  • Legal obligation — keeping records required by tax, accounting and consumer protection law.
  • Legitimate interests — running and improving our business, preventing fraud, keeping the website secure, and contacting existing customers about similar products. We balance these interests against your rights and freedoms.
  • Consent — where you have opted in to marketing, and for non-essential cookies. You can withdraw consent at any time.

How we disclose personal information

In certain circumstances we may disclose your personal information to third parties for legitimate purposes, subject to this Privacy Policy. These may include:

  • With Shopify, and with vendors and other third parties who perform services on our behalf — for example IT management, payment processing, data analytics, customer support, cloud storage, order fulfilment and delivery.
  • With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalised advertising with third-party services. Our business and marketing partners use your information in accordance with their own privacy notices. Depending on where you live, you may have a right to tell us not to share information about you for targeted advertising.
  • Where you direct, request or otherwise consent to disclosure to a third party, such as to ship you products or through your use of social media widgets or login integrations.
  • With our professional advisers, such as accountants and lawyers, where necessary.
  • In connection with a business transaction such as a merger, acquisition or insolvency; to comply with applicable legal obligations (including responses to court orders and similar requests); to enforce our terms or policies; and to protect or defend the Services, our rights, and the rights of our users or others.

We do not sell your personal information.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you.

In addition, to help protect, grow and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants and with Shopify. In these circumstances, Shopify is responsible for the processing of that personal information, including for responding to your requests to exercise your rights over its use. To learn more about how Shopify uses your personal information and any rights you may have, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Cookies

We and our service providers use cookies and similar technologies to make the website work, to remember your basket and preferences, to measure how the site is used, and — where you have consented — for advertising. Essential cookies are needed for the site to function and cannot be switched off. You can control non-essential cookies through the cookie banner where one is shown, and you can block or delete cookies in your browser settings, although parts of the site may then not work properly.

Third-party websites and links

The Services may link to websites or other online platforms operated by third parties, including manufacturers' sites and safety data sheets. If you follow links to sites we do not control, you should review their privacy and security policies and other terms. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of information found on them. Our inclusion of a link does not, by itself, imply endorsement.

Children's data

The Services are not intended to be used by children, and we do not knowingly collect personal information about children. You must be at least 18 years old to place an order. If you are the parent or guardian of a child who has provided us with their personal information, please contact us using the details below and we will delete it.

Security and retention of your information

We take appropriate technical and organisational measures to protect your personal information. However, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security". Any information you send to us may not be secure while in transit. We recommend that you do not use unsecured channels to send us sensitive or confidential information.

How long we keep your personal information depends on why we hold it. As a guide:

  • Order and transaction records — 7 years from the end of the relevant accounting period, to meet HMRC and Companies Act requirements.
  • Account information — for as long as your account is open, and for a reasonable period afterwards.
  • Customer support correspondence — normally up to 3 years.
  • Marketing contact details — until you unsubscribe or ask us to delete them.

Where we no longer need your personal information, we delete it or anonymise it.

Your rights and choices

Under the UK GDPR you have the following rights in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and in some cases we may decline a request as permitted by law.

  • Right of access. You may request a copy of the personal information we hold about you.
  • Right to rectification. You may ask us to correct inaccurate or incomplete personal information.
  • Right to erasure. You may ask us to delete personal information we hold about you.
  • Right to restrict processing. You may ask us to limit how we use your personal information.
  • Right to object. You may object to processing based on our legitimate interests, and you may object to direct marketing at any time.
  • Right to data portability. You may ask to receive a copy of certain personal information in a machine-readable format, or to have it transferred to another controller.
  • Right to withdraw consent. Where we rely on consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.
  • Rights relating to automated decision-making. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
  • Managing marketing preferences. We may send you promotional emails; you can opt out at any time using the unsubscribe link in any of them. If you opt out, we may still send you non-promotional messages such as those about your account or orders.

To exercise any of these rights, contact us using the details below. We will respond within one month, as required by law. We may need to verify your identity before we act on a request. You may appoint an authorised agent to make a request on your behalf; before accepting such a request, we will require proof that you have authorised them, and we may need to verify your identity directly with you. We will not treat you less favourably for exercising any of these rights.

To learn more about how Shopify uses your personal information and any rights you may have in relation to data processed by Shopify, visit privacy.shopify.com.

Complaints

If you have a complaint about how we process your personal information, please contact us first using the details below and we will try to resolve it.

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint

If you are located in the European Economic Area, you may instead complain to your local data protection authority; a list is available from the European Data Protection Board.

International transfers

We may transfer, store and process your personal information outside the United Kingdom, including by our service providers such as Shopify. Where we transfer personal information out of the United Kingdom or the European Economic Area, we rely on recognised safeguards — such as an adequacy decision, the UK International Data Transfer Agreement or Addendum, or the European Commission's Standard Contractual Clauses — unless the transfer is to a country that has been determined to provide an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date, and provide notice as required by applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or you would like to exercise any of your rights, please contact us:

Express Matting Services Ltd., trading as Spill Safe Storage
Unit 1B, Summit Works
Manchester Road
Burnley, Lancashire
BB11 5HG
United Kingdom

Email: sales@spillsafestorage.co.uk
Telephone: +44 1282 270214
Monday to Friday, 08:30 – 17:00 UK time

Registered in England and Wales, company number 07000887. VAT registration number GB987256073.

For the purposes of applicable data protection law, we are the data controller of your personal information.