Privacy policy
Privacy Policy
This policy explains what personal information AirGearPro collects when you visit our website, place an order, contact us, or sign up to our marketing communications, and how we use and protect that information. It is written for UK customers and applies under the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
Effective date: 28 May 2026.
1. Who we are and how to contact us
The data controller for personal information collected through this website is AirGearPro. You can contact us about this policy or about your personal data at support@airgearpro.com.
Full company information is set out in our Legal Notice.
2. What personal data we collect
We collect the following categories of personal information about you:
Information you give us
• Identity and contact details: name, billing and delivery address, email address, phone number.
• Order details: items you buy, order history, payment information (we receive payment confirmation but do not store full card details — see Section 4).
• Account information: if you create an account, your password (encrypted) and account preferences.
• Correspondence: messages you send us through our contact form, customer service emails, or social media.
• Marketing preferences: whether you have opted in to receive marketing emails, and your engagement with them.
Information we collect automatically
• Technical data: IP address, browser type and version, time zone setting, device identifiers, operating system.
• Usage data: pages you visit on our site, time spent on each page, items added to or removed from your cart, abandoned carts.
• Cookie data: see Section 8 for our cookies disclosure.
Information we receive from third parties
• Payment confirmation and fraud-check results from payment processors.
• Delivery status updates from shipping carriers.
• Marketing platform engagement data (email opens, clicks) from our email service provider.
3. How we use your personal data and the lawful bases
Under UK GDPR, we must have a lawful basis for each way we use your personal data. The main ways we use your data and our lawful bases are:
• To process your order, take payment, and deliver your goods. Lawful basis: performance of a contract with you.
• To handle returns, refunds, and customer service queries. Lawful basis: performance of a contract with you.
• To send order confirmations, dispatch notifications, and other transactional emails. Lawful basis: performance of a contract with you.
• To detect and prevent fraud, and to comply with our legal obligations (tax, anti-money laundering, product safety). Lawful basis: legal obligation, and our legitimate interest in protecting our business and customers from fraud.
• To send you marketing emails about products and offers. Lawful basis: your consent (you can withdraw consent at any time — see Section 7).
• To improve our website, products, and customer service. Lawful basis: our legitimate interest in running and improving our business, balanced against your privacy rights.
• To run analytics and understand how customers use our site. Lawful basis: your consent (where required for non-essential cookies — see Section 8), or our legitimate interest where consent is not required.
4. Who we share your personal data with
We share your personal data with the following recipients, who act either as our processors (handling data on our instructions) or as separate controllers in their own right:
• Shopify Inc. — our e-commerce platform provider. Shopify hosts our website, processes orders, and stores customer and order data on our behalf.
• Payment processors. Shopify Payments (powered by Stripe) and PayPal. These providers process your payment information directly and we do not store your full card details.
• Shipping carriers. Royal Mail, DPD, Evri, DHL, and other carriers as appropriate to your delivery address. Carriers receive your name, delivery address, phone number, and email to deliver your order and provide delivery updates.
• Klaviyo. Our email marketing platform. Used to send marketing emails to subscribers and certain transactional emails.
• Google Analytics 4 and Meta Pixel. Analytics providers we use to understand site usage. They may set cookies and receive technical data about your visit.
• Google Ads and Meta Ads. Advertising platforms. If you have consented to advertising cookies, we may share limited data with these platforms to measure ad campaigns and show you relevant ads on other sites.
• Professional advisers, regulators, and law enforcement. We may share data with our accountants, auditors, lawyers, HM Revenue & Customs, the UK ICO, or other authorities where required by law.
We do not sell your personal data to third parties.
5. International transfers
Some of our processors and service providers are based outside the UK, including in the United States and the European Economic Area. When we transfer your personal data outside the UK, we ensure it is protected by one of the following mechanisms:
• UK adequacy regulations — where the destination country has been determined to provide an adequate level of protection (e.g. EEA countries, certain other jurisdictions).
• UK Addendum to the EU Standard Contractual Clauses — for transfers to other countries, supplemented where necessary by additional safeguards.
• The UK Extension to the EU-US Data Privacy Framework — where the recipient is a certified participant.
6. How long we keep your personal data
We keep your personal data only for as long as we need to for the purposes set out in this policy. The main retention periods are:
• Order and transaction records: 7 years from the date of the order, to meet HMRC and accounting record-keeping obligations.
• Customer account information: until you close your account, plus 1 year for fraud prevention.
• Marketing preferences and email subscribers: until you unsubscribe, plus a short period to confirm and record the unsubscribe.
• Customer service correspondence: 2 years from the last contact.
• Analytics and cookie data: as set out in our cookie policy (Section 8).
Where personal data is no longer needed, we securely delete or anonymise it.
7. Your rights
Under UK GDPR you have the following rights in relation to your personal data:
• Right of access. You can ask for a copy of the personal data we hold about you.
• Right to rectification. You can ask us to correct inaccurate or incomplete data.
• Right to erasure. You can ask us to delete your personal data in certain circumstances (sometimes called the "right to be forgotten").
• Right to restrict processing. You can ask us to stop processing your data temporarily, in certain circumstances.
• Right to data portability. You can ask us to provide your data in a structured, commonly used, machine-readable format, or to transfer it to another controller.
• Right to object. You can object to us processing your data for direct marketing (which we will always honour) or, in certain circumstances, on grounds relating to your particular situation.
• Right to withdraw consent. Where we rely on your consent (for example, marketing emails or non-essential cookies), you can withdraw it at any time.
• Right not to be subject to automated decision-making. We do not make decisions about you using purely automated means that produce legal or similarly significant effects.
To exercise any of these rights, contact us at support@airgearpro.com. We will respond within one calendar month. We may ask you to verify your identity before we act on your request. We will not charge you for exercising your rights in most cases.
8. Cookies and similar technologies
Our website uses cookies and similar technologies (such as pixels and local storage) to provide essential site functionality, remember your preferences, analyse site usage, and — with your consent — show you relevant advertising.
When you first visit our site, you will see a cookie banner allowing you to accept or reject non-essential cookies. You can change your preferences at any time via the cookie preference link in our website footer.
The categories of cookies we use are:
• Strictly necessary cookies. Required for the site to function (cart, checkout, account login). Cannot be switched off.
• Functional cookies. Remember your preferences (language, currency, recently viewed products). Set only with your consent where non-essential.
• Analytics cookies. Help us understand how visitors use the site (Google Analytics 4). Set only with your consent.
• Advertising and tracking cookies. Used to measure ad campaigns and show relevant ads on other sites (Meta Pixel, Google Ads). Set only with your consent.
9. Marketing
We will only send you marketing emails if you have given us your consent (typically when you create an account, place an order, or subscribe via our newsletter form, and opt in to marketing).
You can unsubscribe at any time using the link at the bottom of every marketing email, or by emailing us. Withdrawing consent does not affect transactional emails (order confirmations, dispatch notices) which we will continue to send because they are necessary to perform our contract with you.
10. Children
Our website and products are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Security
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. This includes encryption in transit (HTTPS across the whole site), encryption at rest with our cloud providers, access controls, and regular security reviews. No system can be guaranteed 100% secure — we will notify you and the ICO of any personal data breach where required by law.
12. Changes to this policy
We may update this policy from time to time. The "Effective date" at the top will reflect the date of the most recent version. If we make material changes, we will notify you by email (if you have an account or subscribe to marketing) and post a prominent notice on our website before the changes take effect.
13. Complaints to the ICO
If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO), the supervisory authority for data protection in the UK. Their website is ico.org.uk.
Last reviewed: 28 May 2026.
