This policy explains how Colin’s Total Safety Limited collects, uses, and protects your personal data when you visit colinstotalsafety.com, place an order, apply for a trade account, or otherwise contact us. It’s written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Colin’s Total Safety Limited (“we”, “us”, “our”) is the data controller for the personal data described in this policy.
- Company number: 17410859
- Registered office: Unit 20 Apex Court, Woodlands, Bradley Stoke, Bristol, BS32 4JT
- Website: colinstotalsafety.com
2. What personal data we collect
We collect the following categories of personal data:
- Contact details you give us: name, email address, phone number, delivery and billing address.
- Order details: products ordered, order value, order history, and payment confirmation from PayPal (we do not receive or store your full card or PayPal account details ourselves).
- Trade account details: business name, business address, contact name, and order volume, where you apply for a trade account.
- Enquiry details: anything you tell us through the contact form or a team kit-out quote request, including company name, team size, and what you’re ordering.
- Technical and usage data: IP address, browser and device type, pages viewed, and how you arrived at the site, collected through cookies (see section 5).
3. How we use your data, and our legal basis
We only use your personal data where we have a lawful basis to do so:
- Performance of a contract – to process and deliver your order, manage your trade account, and handle cancellations and returns under our Delivery and Returns Policy.
- Legitimate interests – to keep our site secure, prevent fraud, understand how the site is used, and improve our products and service. We balance this against your right to privacy.
- Consent – where you’ve agreed to analytics or marketing cookies, or to receive marketing communications. You can withdraw this consent at any time.
- Legal obligation – to keep the records HMRC and other authorities require of us, such as accounting and tax records.
4. Sharing your data
We share personal data with the following categories of recipient, and only as far as each needs it to do its job:
- PayPal – to process payments. PayPal acts as a separate data controller for the payment data it collects; see PayPal’s own privacy policy.
- Our delivery and courier partner(s) – to deliver your order to you.
- Google (Google Analytics, Google Ads) – to understand site usage and measure advertising performance.
- Meta (Facebook/Instagram Pixel) – to measure and manage advertising on Meta platforms.
- We Do Your Group Limited – our group IT, hosting, and information security provider, which supports the infrastructure this site and our systems run on, under the Group’s ISO 27001-certified information security management system.
- Professional advisers, regulators, and law enforcement – where we’re required to by law, or to establish, exercise, or defend legal claims.
We do not sell your personal data to third parties.
5. Cookies
Our site uses a cookie banner so you can choose which categories of cookies to accept, beyond the ones needed to make the site work:
- Necessary – required for the site and checkout to function; these can’t be switched off.
- Analytics – Google Analytics, to help us understand how the site is used.
- Marketing – Meta (Facebook/Instagram) Pixel and Google Ads remarketing, to measure and personalise advertising.
You can change your cookie choices at any time through the cookie settings link on the site. For more detail, see our Cookie Policy.
6. Trade accounts and business customers
If you apply for a trade account, we collect your business name, address, and contact details to assess and manage the account, including the 30-day payment terms we offer. Rather than a credit reference agency check, we ask you to provide two trade references, which we may contact to verify your trading history.
7. International transfers
Some of the third parties in section 4 (including Google and Meta) may process data outside the UK. Where this happens, we rely on the safeguards they provide, such as UK-recognised standard contractual clauses or an adequacy decision, to make sure your data stays protected to UK standards.
8. How long we keep your data
We keep order and account records for as long as needed to fulfil the order, handle any returns, and meet our accounting and tax obligations, which is typically 6 years after the end of the relevant financial year. We keep marketing preferences until you withdraw consent, and enquiry details for as long as reasonably needed to respond to and follow up on your enquiry.
9. Your rights
Under UK GDPR, you have the right to:
- Ask for a copy of the personal data we hold about you.
- Ask us to correct inaccurate or incomplete data.
- Ask us to delete your data, where there’s no good reason for us to keep it.
- Object to, or ask us to restrict, certain processing.
- Ask us to move your data to another organisation, in a portable format.
- Withdraw consent at any time, where we rely on consent.
To exercise any of these rights, contact us using the details in section 11.
10. Keeping your data secure
We use appropriate technical and organisational measures to protect your data, in line with the information security management system operated across the We Do Your Group, which is independently certified to ISO 27001.
11. Contact us
If you have a question about this policy or how we handle your data, contact:
- Colin Flowers
- Email: [email protected]
- Post: Colin’s Total Safety Limited, Unit 20 Apex Court, Woodlands, Bradley Stoke, Bristol, BS32 4JT
12. How to complain
If you’re unhappy with how we’ve handled your data, we’d like the chance to put it right, contact us first using the details above. You also have the right to complain to the Information Commissioner’s Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
13. Changes to this policy
We may update this policy from time to time, for example if we change what data we collect or which third parties we work with. We’ll post any changes on this page with a new effective date.
This policy was last updated on 11 September 2026.
Version History
| Version | Date | Author | Status |
| 1.0 | 11 September 2026 | Jody Morrow | Document Finalised |