Privacy Policy
01Who we are
TRISTARFS LIMITED, trading as TristarFS, is the data controller for the personal information described here. We are registered in England and Wales under company number 17443856, with our registered office at Unit 9, Drayton Industrial Estate, Drayton, Norwich, Norfolk, NR8 6RL.
For anything about your information, contact us by email at crew@tristarfs.co.uk, by telephone on 01603 244 205, or by post at Unit 9, Drayton Industrial Estate, Drayton, Norwich, Norfolk, NR8 6RL.
This notice covers tristarfs.co.uk and everything we do with information about customers, enquirers and site visitors.
02What we collect
We only collect what we need. We do not collect special category data (health, religion, biometrics and similar) and we do not knowingly collect information from children. Our products are sold to adults and to businesses.
| Where it comes from | What it includes |
|---|---|
| Placing an order | Name, billing and delivery address, email, telephone, company name and VAT number if given, what you bought, and the order value. Card details are entered directly with our payment provider and are never seen or stored by us. |
| Contact form and enquiries | Name, email, telephone, company, and whatever you write in the message. |
| Booking an evaluation | Contact details, site address, and details of the premises and risks you describe to us. |
| An account, if you create one | Login details, saved addresses and order history. |
| Newsletter sign-up | Email address, and name if you give it. |
| Using the website | IP address, browser and device type, pages viewed, how you arrived, and cookie identifiers. See our cookie policy. |
03Why we use it, and our lawful basis
UK GDPR requires us to have a lawful basis for each use. Ours are set out below.
| What we do | Lawful basis |
|---|---|
| Take and fulfil your order, deliver, install, commission and handle returns | Contract — we need this to do what you have asked |
| Answer enquiries and arrange evaluations | Legitimate interests — responding to someone who contacted us |
| Keep records of sales, VAT and guarantees | Legal obligation — tax and accounting law |
| Handle a guarantee claim or a safety issue with a product | Legal obligation and legitimate interests — product safety |
| Email marketing to existing customers about similar products | Legitimate interests, relying on the soft opt-in in PECR — see section 04 |
| Email marketing to anyone else | Consent |
| Advertising cookies and pixels | Consent |
| Website analytics | See our cookie policy — this depends on how the analytics is configured |
| Keeping the website secure and preventing fraud | Legitimate interests |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights and concluded it is not. You can object at any time — see section 10 — and we will stop unless we have compelling grounds to continue.
04Marketing
If you have bought from us or asked us for a quote, we may email you about similar fire safety products and services under the “soft opt-in” in the Privacy and Electronic Communications Regulations. We gave you the chance to refuse when we collected your address, and every email we send has a one-click unsubscribe.
If you have not bought from us or enquired, we only email marketing with your consent.
You can stop marketing at any time — use the unsubscribe link in any email, or tell us at crew@tristarfs.co.uk. We act on it straight away. We will still send messages about an order you have placed, because those are not marketing.
We do not sell your information, and we do not share it with anyone else for their own marketing.
07Sending data outside the UK
Some of the organisations above are based outside the United Kingdom, or store data there — Google and Meta in particular.
Where information leaves the UK we make sure it is protected to the same standard, by relying on UK adequacy regulations for that country, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment.
Ask us at crew@tristarfs.co.uk if you would like details of the safeguards for a particular transfer.
08How long we keep it
We keep information only as long as we need it, then delete it or make it anonymous.
| What | How long | Why |
|---|---|---|
| Order and payment records | 7 years from the end of the accounting period | HMRC requirements |
| Marketing list | Until you unsubscribe, then a suppression record indefinitely | So we do not email you again by mistake |
09Keeping it secure
The site runs over an encrypted connection. Access to order and customer records is limited to people who need it, and protected by individual accounts and strong passwords. Payment card details never reach our systems.
No system is perfectly secure. If a breach happens that is likely to put your rights and freedoms at risk, we will tell the ICO within 72 hours and tell you without undue delay.
10Your rights
Under UK data protection law you have the right to:
- Be informed — which is what this notice is for.
- Access a copy of the information we hold about you.
- Rectification — have anything inaccurate corrected.
- Erasure — ask us to delete it, where we have no continuing reason to keep it.
- Restrict processing — ask us to pause using it while something is sorted out.
- Data portability — receive information you gave us in a machine-readable form.
- Object — including an absolute right to object to direct marketing, which we always honour.
- Withdraw consent at any time, where we relied on it.
To exercise any of these, email crew@tristarfs.co.uk. It is free, and we respond within one month. We may ask you to confirm your identity first. If a request is complex we may extend by two further months and will tell you why.
11Complaints
If you are unhappy with how we have handled your information, please tell us first at crew@tristarfs.co.uk so we can put it right.
You also have the right to complain to the Information Commissioner’s Office at any time. Telephone 0303 123 1113, or visit ico.org.uk/make-a-complaint. Since June 2025 the ICO expects you to have raised it with us first.
12Changes to this notice
We review this notice at least once a year and whenever we change how we use information. The version and date at the top of this page tell you which one is current. If we make a significant change we will say so on the website, and tell you directly where it affects you.