Last updated 02 August 2026
The short version. We collect what we need to take your order and support you, name, contact details, address, order history. We do not sell your data. Card numbers never touch our servers; Stripe and PayPal handle those. You can ask us for a copy of your data or ask us to delete it.
1. Scope
This policy explains how AeroFlow03 handles personal information collected through this website. It applies to visitors, account holders, and customers. It forms part of our Terms of Service.
2. What We Collect
2.1 Information you give us
- Order details, name, email address, phone number, billing and shipping address, and any order notes you write.
- Account details, if you create an account: your name, email address, and a securely hashed password. We never store your password itself.
- Messages. Anything you send through our contact form or by email, including the message body.
2.2 Information collected automatically
- Essential cookies. A login session cookie if you sign in, and your shopping cart, which is stored in your browser's local storage rather than on our servers.
- Server logs, standard technical records such as IP address, browser type, and pages requested, used to keep the site running and secure.
2.3 What we deliberately do not collect
- Payment card numbers. Checkout is handled by Stripe and PayPal. Card details go directly to them and never reach our servers. We store only an order reference and a payment confirmation identifier.
- Health information. We do not ask for, and ask that you do not send us, details of any medical condition, diagnosis, or treatment. We are an equipment retailer, not a healthcare provider, and we are not equipped to hold that kind of information.
3. Why We Use It
| Purpose | What it covers |
|---|---|
| Fulfilling your order | Taking payment, shipping, sending confirmations and receipts |
| Customer support | Answering questions, handling returns and warranty claims |
| Account access | Letting you sign in and view your order history |
| Legal compliance | Tax and accounting records, and evidence of your agreement to our Terms |
| Security | Preventing fraud and abuse, and protecting the site |
We do not sell, rent, or trade your personal information. We do not use it for behavioural advertising.
4. Who We Share It With
Only the service providers needed to run the shop, and only the minimum each one needs:
- Stripe and PayPal, payment processing. They receive your name, email, and order amount, and are independent controllers of that data under their own privacy policies.
- Shipping carriers. Your name, address, and phone number, so they can deliver.
- Our email provider. Your email address and order contents, to send receipts and replies.
- Our manufacturer, only where a warranty claim requires it, and only the details needed to process that claim.
We may also disclose information where required by law, court order, or a valid legal request, or to protect our rights, safety, or property.
If our business is sold or merged, your information may transfer as part of that transaction. You will be notified.
5. How Long We Keep It
- Order records, retained for at least seven years, as tax and accounting law requires.
- Account details, until you ask us to delete your account.
- Contact messages, up to three years, then deleted.
- Terms acceptance records, kept as long as the associated order, since they evidence the agreement.
6. Security
Passwords are hashed with bcrypt and never stored in readable form. Login sessions use signed, HTTP-only cookies. Payment provider API keys are encrypted at rest. Access to customer data is restricted to those who need it to run the business.
No system is perfectly secure. We cannot guarantee absolute security, and you share information with us at your own risk.
7. Your Rights
Depending on where you live, you may have the right to:
- Access, request a copy of the personal information we hold about you;
- Correct, have inaccurate information fixed;
- Delete, request erasure, subject to records we must keep by law;
- Port, receive your data in a portable format;
- Object or restrict, limit certain processing;
- Opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of.
California residents have these rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. EU and UK residents have equivalent rights under the GDPR.
To exercise any of these, contact us through our contact form. We will verify your identity before acting, and respond within the period your law requires.
8. Cookies
We use only what the site needs to function:
- Session cookie, keeps you signed in. Set only when you log in.
- Cart storage. Your basket, held in your browser rather than on our servers.
Payment providers may set their own cookies during checkout, governed by their policies. You can block cookies in your browser, but sign-in and checkout will stop working.
9. Children
Our website is not directed at anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.
10. International Visitors
We operate in the United States, and your information is processed there. If you are outside the US, you consent to that transfer. US privacy law may differ from the law where you live.
11. Changes to This Policy
We may update this policy. The revised version takes effect when posted, with an updated date at the top. Material changes will be announced on the website.
12. Contact Us
Questions about privacy, or want to exercise a right above? Use our contact form or the details in the footer.