Privacy Policy

The data controller is AEC600 LTD (trading as aectec), a company registered in England and Wales (company number 16446779) with its registered office at 124-128 City Road, London, England, EC1V 2NX. For anything relating to your personal data, contact us at sebs@aec600.co.uk.

• Account data — your name, email address and password (stored as a secure hash) if you create an account.
• Order data — your name, email address, phone number (optional), delivery and billing addresses, and the items you order.
• Contact data — the contents of emails and messages you send us.

Payment card details are entered directly with Stripe, our payment provider, and never pass through or get stored on our servers.

• To take payment, fulfil and deliver your orders, and provide your account (performance of a contract).
• To keep financial and tax records (compliance with legal obligations).
• To secure the website, prevent fraud and diagnose errors (legitimate interests).

We do not sell your personal data or use it for advertising.

We use a small number of service providers who process data on our behalf:

• Supabase — database and authentication.
• Stripe — payment processing.
• Vercel — website hosting.
• Sentry — error monitoring and session replay: a masked recording of a sample of browsing sessions, and of sessions where an error occurs. Text and form inputs are masked and media is blocked before the recording leaves your browser.

Our distribution partners, who dispatch orders directly to you, receive your name and delivery address solely to fulfil your order. We may also disclose data where required by law.

We use only functional cookies — those needed to keep you signed in, remember your cart and region, and operate checkout securely. We do not use advertising cookies and we do not sell or share your data with advertisers. Our error-monitoring and session-replay provider (see section 4) stores a session identifier in your browser so a recording can be tied to a single visit; it is not a cookie and is not used for advertising.

Order and financial records are kept for six years from the end of the relevant financial year, as required for tax purposes. Account data is kept until you ask us to delete your account. Where we are legally required to retain financial records, we anonymise rather than delete the associated personal data.

Under the UK GDPR you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data rectified;
• have your data erased (subject to legal retention obligations);
• restrict or object to certain processing;
• data portability for data you provided to us.

To exercise any of these rights, email sebs@aec600.co.uk. If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.