Privacy policy

Last updated: 15 September 2026

This privacy policy explains what personal data Winston Supplies collects when you visit winstonsupplies.co and when you order or contact us, why we use it, who we share it with and which rights you have.

Who We Are

Winston Supplies is run by Novaro, the controller of your personal data under the UK GDPR and the EU General Data Protection Regulation.

Store name: Winston Supplies
Company name: Novaro
Company number: 92668550 (KvK, Netherlands Chamber of Commerce)
VAT number: NL003447642B43
Address:
Dorine Verschureplein 6a
Elsloo 6181 AS
Netherlands
Email: support@winstonsupplies.co

Data We Collect

  • Device and connection details, such as your IP address, browser, device type and time zone, and the pages you view
  • Order details you give at checkout: your name, email address, phone number, delivery and billing address, and what you ordered
  • Payment details, which our payment providers handle; we never see or store your full card number
  • Anything you send us yourself, for example by email or through the contact form

How We Use Your Data

We only use your data where the law gives us a basis for it:

  • To process, deliver and support your order, including returns (to perform our contract with you)
  • To answer your questions (to perform our contract, or our legitimate interest in helping you)
  • To keep the shop secure and prevent fraud (our legitimate interest)
  • To keep order and invoice records (a legal obligation under tax law)
  • To measure how the shop is used and show you content that fits your interests (your consent, given in the cookie banner)
  • To measure our advertising and show you our ads on other websites, for example through Google (your consent, given in the cookie banner)
  • To remind you by email about a checkout you did not finish, with an unsubscribe link in every email (our legitimate interest)
  • To send marketing emails, only if you signed up for them (your consent, which you can withdraw at any time)

Sharing Your Data

We share personal data only with partners who need it to do their part:

  • Payment providers, to take your payment securely
  • Our supplier in China, which prepares and sends out your order, and the carriers that deliver it
  • Technical partners, Shopify among them, which hosts our shop and checkout
  • Advertising and analytics partners such as Google, only where you have given consent in the cookie banner
  • Authorities and professional advisers, where the law requires it

We never sell or rent your personal data.

Cookies

We use cookies and similar technologies to:

  • Keep your basket, the checkout and the shop's security working (strictly necessary)
  • Remember your choices and preferences
  • Measure how the shop performs and show content that fits your interests

Strictly necessary cookies are always on. For visitors in the United Kingdom, all other cookies are only set after you accept them in our cookie banner. You can change or withdraw your choice at any time through the Cookie preferences link at the bottom of every page. The basket and checkout do not work without the strictly necessary cookies.

Your Rights

You have the right to:

  • Find out what personal data we hold about you, and get a copy
  • Have it corrected or erased
  • Restrict how we use it
  • Receive it in a portable format
  • Object to our use of it, including for direct marketing
  • Withdraw your consent at any time, for example by unsubscribing from our emails

Send your request to support@winstonsupplies.co with a short note of which right you want to use. We reply within one month and may ask you to confirm your identity first. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk or to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl in the Netherlands. We would welcome the chance to put things right first.

Children's Privacy

Our shop is for adults, and you must be 18 or over to place an order. We do not knowingly collect data from anyone under 18. If we find that we have, we delete it, unless we have to keep an order record for tax reasons.

International Data Transfers

We are based in the Netherlands and serve customers in the United Kingdom. Some of our partners process data in other countries, including countries outside the UK and the European Economic Area: Shopify and our payment providers, and our supplier in China, which receives your name, delivery address and order details to send out your order. Every transfer between countries is protected by the safeguards data protection law requires, such as an adequacy decision or standard contractual clauses.

Data Security and Retention

Our shop and checkout run over encrypted connections, and only the people who need order data for their work can see it. We keep personal data only as long as we need it for the purposes above. Order and invoice records are kept for seven years, because Dutch tax law requires it. Other data is deleted or anonymised once we no longer need it to answer questions or settle a dispute.

Updates to This Policy

We update this policy when our shop or the law changes. The date at the top shows when it last changed, and the version on this page is always the one that applies.

Contact Us

Questions about this policy or about your data are welcome:

Store name: Winston Supplies
Company name: Novaro
Company number: 92668550 (KvK, Netherlands Chamber of Commerce)
VAT number: NL003447642B43
Address:
Dorine Verschureplein 6a
Elsloo 6181 AS
Netherlands
Email: support@winstonsupplies.co