Privacy and Cookie Notice

Last updated: 24 July 2026

This Privacy and Cookie Notice explains how Tinkerer Ltd collects, uses, stores and shares personal information when you visit our website, create an account, make a purchase, contact us, request support or otherwise interact with us.

We respect your privacy and only use personal information where we have a proper reason and lawful basis for doing so.

1. Who we are

Tinkerer Ltd is the controller responsible for the personal information described in this notice.

Tinkerer Ltd
Company number: 10096007
Registered office: 53 Henshaw Road, Wellingborough, Northamptonshire, United Kingdom, NN8 2AY
Website: https://tinkerer.co.uk/
Email: info@tinkerer.co.uk
Telephone: +44 (0) 19333 22243

In this notice, “Tinkerer”, “we”, “us” and “our” refer to Tinkerer Ltd. “You” and “your” refer to a website visitor, customer, prospective customer, supplier contact or other person who interacts with us.

2. The personal information we collect

The information we collect depends on how you interact with us. It may include the following categories.

Identity and contact information

Your name and, where applicable, job title or department.
Your company or organisation name.
Billing, delivery and business addresses.
Email address and telephone number.
VAT number, company number or other business identifiers you provide.

Account information

Your customer account details and account preferences.
Your encrypted account password or other authentication information.
Saved addresses, wish lists, baskets and order history.
Your selected language, currency and website preferences.

Order and transaction information

Products ordered, quantities, prices and order dates.
Delivery instructions and shipment information.
Invoices, credit notes, refunds and payment status.
Returns, cancellations, warranty claims and repair information.
Correspondence relating to an order or transaction.

Payment information

Payments may be processed by third-party payment service providers. We ordinarily receive confirmation of payment, payment status, payment method type and transaction references rather than complete card details.

Where payment information is entered into a payment provider’s hosted form, that provider processes the information under its own privacy notice and security arrangements.

Communications

Emails, telephone calls, contact-form submissions and online messages.
Customer-service, technical-support and sales enquiries.
Feedback, complaints and product reviews.
Your marketing and communication preferences.

Technical and website information

Internet Protocol address.
Browser type, device type, operating system and language.
Approximate location derived from your IP address.
Pages viewed, links selected, searches, referring pages and session activity.
Cookie identifiers and similar online identifiers.
Website security, error, access and fraud-prevention logs.

Business-customer information

When dealing with a company, public authority, educational establishment or other organisation, we may process the professional contact information of its employees, directors, procurement contacts and authorised representatives.

Information supplied by another person

A customer may give us another person’s name, address or telephone number so that we can deliver an order or communicate about the delivery. The customer should ensure that they are authorised to provide those details.

3. How we collect your information

We may collect personal information:

directly from you when you browse, register, order or contact us;
from your employer or another organisation on whose behalf you act;
from payment providers, banks and fraud-prevention providers;
from delivery companies and fulfilment partners;
from suppliers or manufacturers involved in fulfilling an order or warranty;
from publicly available business registers and company websites;
through cookies, pixels, logs and similar website technologies; and
from marketplaces or platforms where you have asked us to handle an enquiry or transaction.

4. How and why we use personal information

Purpose	Information commonly used	Lawful basis
Creating and managing your customer account	Identity, contact, account and technical information	Performance of a contract or taking steps at your request before entering into a contract
Processing, supplying and delivering your order	Identity, contact, order, transaction, payment-status and delivery information	Performance of a contract and compliance with legal obligations
Processing payments, refunds and credit notes	Identity, contact, transaction, payment-status and order information	Performance of a contract, legal obligations and our legitimate interests in administering transactions
Providing invoices and maintaining tax and accounting records	Identity, business, billing, order and transaction information	Compliance with legal obligations
Handling delivery enquiries and tracking shipments	Contact, order, delivery and communication information	Performance of a contract and our legitimate interests in providing customer service
Managing cancellations, returns, repairs and warranties	Identity, contact, order, product, serial-number, fault and communication information	Performance of a contract, legal obligations and legitimate interests
Answering enquiries and providing customer support	Identity, contact, account, order and communication information	Performance of a contract, steps requested before a contract, or our legitimate interests in responding to customers
Preventing fraud, abuse, cyberattacks and unauthorised access	Identity, transaction, device, IP address, account and security-log information	Our legitimate interests in protecting customers, our business and our systems; and compliance with legal obligations
Establishing, exercising or defending legal claims	Relevant account, transaction, communication and technical information	Our legitimate interests and, where applicable, compliance with legal obligations
Improving our website, catalogue and customer experience	Website activity, technical information, feedback and aggregated statistics	Consent where required for analytics technologies; otherwise our legitimate interests
Measuring advertising and understanding campaign performance	Cookie identifiers, device information, website activity and conversion events	Consent
Sending requested service and order communications	Contact, account, order and delivery information	Performance of a contract and our legitimate interests in keeping you informed
Sending promotional emails or other direct marketing	Identity, contact, purchase history and marketing preferences	Consent or, where permitted by law, our legitimate interests and the existing-customer marketing rules
Managing suppliers and commercial relationships	Professional identity, contact, company and communication information	Performance of a contract and our legitimate interests in managing business relationships

5. Our legitimate interests

Where we rely on legitimate interests, we consider whether our use of personal information is necessary and proportionate and whether your interests or fundamental rights override our interests.

Our legitimate interests may include:

operating and improving our ecommerce business;
responding to enquiries and providing customer service;
maintaining accurate records;
protecting our website, customers, staff and business from fraud or misuse;
recovering debts and enforcing our contractual rights;
understanding product demand and business performance;
maintaining relationships with customers and suppliers; and
establishing, exercising or defending legal claims.

6. Order communications and marketing

Service communications

We may contact you about an order, payment, delivery, return, product recall, warranty, account-security matter or other service issue. These are transactional communications and are not marketing communications.

Marketing communications

We may send marketing where you have consented or where the law otherwise permits us to contact an existing customer about similar products or services.

You can stop receiving marketing at any time by:

using the unsubscribe link in a marketing email;
changing the relevant preferences in your account, where available; or
emailing info@tinkerer.co.uk.

Opting out of marketing will not stop essential order, account, warranty or service communications.

7. Who we share personal information with

We do not sell personal information. We may share information only where reasonably necessary with the following categories of recipients.

Payment providers

We share transaction information with the payment provider selected during checkout so that it can authorise, process or refund a payment and undertake fraud and security checks.

Delivery and logistics providers

We may provide your name, delivery address, telephone number, email address, order reference and delivery instructions to postal operators, couriers, freight providers, customs agents and logistics partners.

Suppliers, distributors and manufacturers

Where necessary to fulfil an order, arrange direct delivery, confirm product availability, process a return or administer a warranty, we may share relevant order and contact information with an authorised supplier, distributor, manufacturer or service centre.

Technology and professional-service providers

These may include providers of:

website hosting and content-delivery services;
ecommerce, inventory and order-management systems;
email, communications and customer-support tools;
accounting, payment and fraud-prevention services;
website security, backup, maintenance and technical support;
analytics, advertising and conversion measurement, where consented to;
legal, tax, audit, insurance and professional advice; and
debt recovery and dispute-resolution services.

Service providers acting as our processors may only use personal information for the services they provide to us and in accordance with our instructions, contractual safeguards and applicable law.

Authorities and other lawful recipients

We may disclose information to courts, law-enforcement bodies, tax authorities, regulators, customs authorities or other organisations where required by law, necessary to protect rights or safety, or necessary to investigate suspected fraud or unlawful activity.

Business transfers

If all or part of our business or assets is sold, transferred, reorganised or merged, relevant personal information may be disclosed to professional advisers, prospective purchasers and the resulting organisation, subject to appropriate confidentiality and data-protection safeguards.

8. International deliveries and international data transfers

Because we sell and deliver products internationally, order information may need to be shared with couriers, customs authorities, logistics providers, suppliers or manufacturers located outside the United Kingdom.

Some of our technology and service providers may also process information in other countries.

Where personal information is transferred outside the United Kingdom, we use an appropriate lawful transfer mechanism where required. This may include:

a UK adequacy regulation;
the UK International Data Transfer Agreement;
the UK Addendum to approved standard contractual clauses;
another legally recognised safeguard; or
a specific legal exception where applicable.

Where the EU GDPR applies, we also use an appropriate EU transfer mechanism where required.

You may contact us for more information about the safeguards relevant to your information.

9. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, warranty, fraud-prevention and dispute-resolution requirements.

Type of information	Typical retention period
Orders, invoices, payments, refunds and accounting records	Normally six years after the end of the relevant accounting period, or longer where required by tax or other applicable law
Customer-service and order correspondence	Normally up to six years after completion of the relevant transaction, depending on the nature of the correspondence and any potential claim
Returns, repairs and warranty records	For the warranty period and normally up to six years afterwards where needed to handle disputes or legal claims
Uncompleted enquiries and quotations	Normally up to two years after the last meaningful communication
Customer accounts	While the account remains active and for a reasonable period afterwards, unless earlier deletion is requested and no legal reason requires retention
Marketing records	Until consent is withdrawn, an objection is made or the information is no longer needed. We may keep a limited suppression record to ensure that an opt-out continues to be respected
Cookie-consent records	For as long as reasonably needed to demonstrate and manage your consent choices
Website security and access logs	Normally for a limited period appropriate to security and troubleshooting, unless an incident requires longer retention

Retention periods may be extended where information is relevant to an actual or anticipated complaint, chargeback, investigation, legal claim, regulatory matter or law-enforcement request.

When information is no longer required, we delete it, anonymise it or securely restrict its use.

10. How we protect your information

We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, unauthorised access, disclosure or destruction.

Measures may include:

encrypted connections between your browser and our website;
access controls and account-authentication measures;
restricted staff and service-provider access;
security monitoring, logging, backup and system maintenance;
contractual confidentiality and data-protection obligations; and
procedures for identifying and responding to security incidents.

No internet transmission or electronic storage system can be guaranteed to be completely secure. You should use a strong, unique password and keep your account credentials confidential.

11. Your data-protection rights

Depending on the circumstances and the law that applies, you may have the right to:

Access: request a copy of the personal information we hold about you.
Rectification: ask us to correct inaccurate or incomplete information.
Erasure: ask us to delete information where there is no lawful reason for us to continue using it.
Restriction: ask us to restrict the use of information in certain circumstances.
Objection: object to processing based on legitimate interests or to the use of your information for direct marketing.
Data portability: receive certain information in a structured, commonly used and machine-readable format or ask us to transfer it to another organisation.
Withdraw consent: withdraw consent at any time where our processing relies on consent.
Complain: make a complaint to us or to the relevant data-protection regulator.

These rights are not absolute. We may need to retain or continue using information where permitted or required by law, including for tax records, fraud prevention, contractual enforcement or legal claims.

How to exercise your rights

Please email info@tinkerer.co.uk and clearly describe your request.

We may ask for reasonable evidence of identity before disclosing or changing personal information. This is to protect your information against unauthorised access.

We normally respond within one month, although the law may permit additional time for a complex request. We do not normally charge a fee, but the law permits a reasonable fee or refusal in limited circumstances, such as where a request is manifestly unfounded or excessive.

12. Complaints

Please contact us first if you have a concern about how we use your personal information. We will investigate and respond to your complaint.

Privacy enquiries and complaints

Email: info@tinkerer.co.uk
Telephone: +44 (0) 19333 22243
Post: Tinkerer Ltd, 53 Henshaw Road, Wellingborough, Northamptonshire, United Kingdom, NN8 2AY

You also have the right to complain to the UK Information Commissioner’s Office.

Information Commissioner’s Office
Website: ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113

Customers in the European Economic Area may also have the right to complain to the data-protection supervisory authority in the country where they live, work or believe an infringement occurred.

13. Children’s information

Our website and products are intended for businesses and adult consumers. They are not directed at children, and we do not knowingly use the website to collect personal information from children for marketing or profiling.

A parent or guardian who believes that a child has provided personal information to us should contact info@tinkerer.co.uk.

14. Automated decision-making

Payment and fraud-prevention providers may use automated systems to assess transaction risk, detect suspicious activity or decide whether a payment can be authorised.

Tinkerer Ltd does not ordinarily make decisions based solely on automated processing that produce legal or similarly significant effects on customers. Contact us if you have concerns about a payment or order decision.

15. Third-party websites

Our website may contain links to manufacturers, payment providers, delivery companies or other third-party websites. Those organisations are responsible for their own websites and privacy practices.

This notice does not apply to a third party’s independent processing. You should read the privacy notice provided by the relevant third party.

16. Cookies and similar technologies

What cookies are

Cookies are small text files stored on your browser or device. Similar technologies include pixels, tags, local storage, scripts and device identifiers.

These technologies can help a website:

operate securely;
remember a shopping basket or login;
remember language, currency and consent choices;
understand how visitors use the website;
measure performance and diagnose errors; and
measure or personalise advertising, where consent has been given.

Cookie categories

Category	Purpose	Consent required?
Strictly necessary	Required for core functions such as security, fraud prevention, checkout, shopping baskets, login, load balancing and recording privacy choices	Normally no, where the technology falls within a legal exception
Preference or functional	Remembers selected settings such as language, currency, display preferences or other optional functions	Consent will be requested where required by law
Analytics or performance	Helps us understand visits, navigation, website performance, errors and how visitors interact with our content	We request consent except where a specific legal exception applies and all conditions for that exception are met
Advertising or marketing	Measures advertising campaigns, records conversions, limits repeated advertising and may help providers select more relevant advertising	Yes

Cookies and storage used for essential website functions

Our Magento ecommerce website may use cookies or browser storage with names similar to the following. The precise name and duration can change when the website or its extensions are updated.

Cookie or storage item	Typical purpose	Type
PHPSESSID	Maintains a user session as you move between website pages	Strictly necessary
form_key	Helps protect website forms and requests against forgery	Strictly necessary
private_content_version	Helps the website display current customer-specific content	Strictly necessary
section_data_ids	Supports customer-specific website sections such as baskets and account information	Strictly necessary
X-Magento-Vary	Supports website caching and delivery of the correct page version	Strictly necessary
mage-cache-sessid	Helps manage browser caching and customer-specific content	Strictly necessary
mage-cache-storage	Stores website information locally to support navigation and page loading	Strictly necessary
mage-cache-storage-section-invalidation	Helps refresh cached customer information when it changes	Strictly necessary
mage-messages	Allows the website to display service messages and notifications	Strictly necessary
product_data_storage	Supports recently viewed or compared product functions where enabled	Functional
recently_viewed_product	Supports the recently viewed products function where enabled	Functional
recently_compared_product	Supports product comparison functions where enabled	Functional
store	Remembers the selected store view or language	Functional
currency	Remembers the selected website currency	Functional
cookie consent record	Records your cookie categories and privacy choices	Strictly necessary

Some cookies listed above will only be used where the corresponding Magento function is enabled. Cookies may be session cookies, which expire when the browser session ends, or persistent cookies, which remain for a defined period.

Analytics

Where enabled and accepted, analytics technologies may collect pseudonymous information about website visits, such as pages viewed, approximate location, device type, browser, referring website, interactions and transaction events.

We use this information to understand website performance, improve navigation and measure the effectiveness of our content. Analytics technologies that require consent will not be intentionally activated before you give that consent.

Advertising and conversion pixels

Where enabled and accepted, we may use advertising pixels, tags or similar technologies supplied by advertising platforms. These may record events such as:

viewing a product or category;
adding a product to a basket;
starting checkout;
completing a purchase; and
the value, currency or reference associated with a conversion.

Advertising providers may combine information collected through their technologies with information they already hold, subject to their own privacy notices and your account or advertising settings with those providers.

Advertising and conversion technologies will only be activated where you have given the required consent.

How to manage your cookie choices

When you first visit our website, you should be offered controls to:

accept all optional cookies;
reject non-essential cookies; or
manage individual cookie categories.

You may withdraw or change your consent at any time by using the Cookie Settings link or control displayed on our website. Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

Important: rejecting optional cookies should not prevent you from browsing products or completing an order, although some optional functions may be unavailable.

Browser controls

You can also use your browser settings to delete or block cookies. Blocking all cookies may prevent essential ecommerce features, such as login, baskets or checkout, from working correctly.

Cookie duration and current details

Cookie names, providers and durations can change as our website, extensions and service providers are updated. The cookie-management tool shown on the website should provide the most current information available about optional cookie providers and durations.

17. Changes to this notice

We may update this Privacy and Cookie Notice to reflect changes in our business, website, service providers or legal obligations.

The latest version will be published on this page and identified by the “Last updated” date. Where a change materially affects how we use personal information, we will take reasonable steps to draw attention to it.

18. Contact us

Please contact us with any questions about this notice, your personal information or your privacy rights.

Tinkerer Ltd
53 Henshaw Road
Wellingborough
Northamptonshire
United Kingdom
NN8 2AY

Email: info@tinkerer.co.uk
Telephone: +44 (0) 19333 22243