Privacy policy

This policy explains how MowerBlades.eu – Spare Parts for Lawn Mowers processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and — for customers in the European Economic Area — Regulation (EU) 2016/679 (GDPR).

1. Controller

The controller is MowerBlades.eu – Spare Parts for Lawn Mowers.

2. What we process, why and on what basis

• Processing orders (name, address, phone, e-mail, order details) — performance of a contract.
• Customer account — performance of a contract; you may delete the account at any time.
• Payment — transmission to the payment provider; we never store card details.
• Newsletter and marketing e-mails — your separate consent (PECR), which you can withdraw at any time.
• Back-in-stock notification (e-mail address and product) — a single message sent at your request when the product is available again; basis: steps taken at your request before entering a contract.
• Accounting and tax obligations — compliance with a legal obligation.
• Security of the website (logs, anti-abuse limits) — our legitimate interest.

3. Recipients

Data may be shared with our order management system, payment providers, the e-mail delivery provider, carriers and the hosting provider, under data processing agreements. Our order management system and warehouse are located in Poland (EEA). Transfers between the UK and the EEA rely on the UK adequacy regulations and the EU adequacy decision for the UK; other transfers rely on the UK International Data Transfer Agreement or standard contractual clauses.

4. Security

Communications are encrypted (TLS), data is segregated per shop, access is restricted and exchanges with the order management system are signed (HMAC). No card data is processed or stored on our servers.

5. Retention

Order data: for as long as required by accounting and tax law. Account data: until you delete the account or after 3 years of inactivity (we notify you beforehand). Marketing data: until you withdraw consent. Back-in-stock requests: at most 180 days from the request, or until you remove your address using the link in the message.

6. Your rights

• access to your data and data portability,
• rectification and erasure,
• restriction of and objection to processing,
• withdrawal of consent at any time,
• the right to complain to the Information Commissioner’s Office (ICO), ico.org.uk, or — if you live in the EEA — to your local supervisory authority.

You can export and delete your account in your customer area: My details.

7. Cookies

We use strictly necessary cookies (basket, sign-in session, form security). Analytics and marketing cookies are set only with your consent, in line with the Privacy and Electronic Communications Regulations 2003.

8. No automated decision-making

We do not make decisions with legal effects based solely on automated processing or profiling.