Privacy policy

Last updated: 1 October 2026

This policy explains what personal data we collect when you use floodandwaterpumps.co.uk or buy from us, how we use it, who we share it with and the rights you have.

1. Who we are

Flood & Water Pumps is a trading name of Flood Protection Solutions Ltd, a company registered in England and Wales (company number 08252543). Our address is Unit 36, Criftin Enterprise Centre, Oxton Road, Epperstone, Nottinghamshire NG14 6AT, United Kingdom.

Flood Protection Solutions Ltd is the controller of the personal data described in this policy. We are registered with the Information Commissioner's Office (registration number 00012618505).

For any question about your personal data, email enquiries@floodprotectionsolutions.co.uk, or write to us at the address above marked "Data protection".

2. The personal data we collect

Information you give us:

  • your name, delivery and billing addresses, email address and phone number, when you place an order, create an account or contact us;
  • your company name and job title, if you buy for a business;
  • your order details, including what you bought and how you paid;
  • what you tell us in emails, calls and our online forms, including the troubleshooting, warranty and complaints forms, and any photos or videos you send;
  • reviews you write about us or our products.

You enter your card details directly with our payment providers, Shopify Payments and PayPal. We do not see or store your full card number.

Information collected when you use our website:

  • your IP address, device and browser type, and the pages you visit;
  • your basket, and the country and currency you choose;
  • information from cookies and similar technologies (see section 7).

Information from others:

  • delivery updates from our couriers;
  • fraud checks from our payment providers;
  • contact details given to us by a business that orders on your behalf.

3. How we use your data, and our legal basis

  • Taking, delivering and supporting your order, including returns, refunds and warranty claims. Legal basis: contract (we need it to carry out our contract with you).
  • Answering your questions before you order. Legal basis: steps you ask us to take before a contract, or our legitimate interest in replying to people who contact us.
  • Keeping accounting, tax and VAT records. Legal basis: legal obligation.
  • Preventing fraud and keeping our website and systems secure. Legal basis: legitimate interests.
  • Asking you to review your purchase. Legal basis: legitimate interests. You can opt out at any time.
  • Sending marketing emails about our products. Legal basis: your consent. For existing customers, we may email you about similar products, with an unsubscribe link in every email.
  • Showing our adverts to people who have visited our website (remarketing), and measuring how our adverts perform. Legal basis: your consent, given through our cookie banner.
  • Understanding how our website is used, so we can improve it (analytics). Legal basis: your consent, given through our cookie banner.
  • Dealing with complaints and legal claims. Legal basis: legitimate interests, or legal obligation.

We do not make decisions about you by automated means that have legal or similarly significant effects.

4. Who we share it with

We only share personal data where we need to. We share it with:

  • Shopify, which runs our online shop and checkout;
  • our payment providers, Shopify Payments and PayPal;
  • our couriers, such as DHL, DPD, Parcelforce and Royal Mail, so they can deliver your order;
  • manufacturers and suppliers, where they deliver an order to you directly or need details to handle a warranty claim;
  • apps and service providers that help us run the shop, for example for online forms, delivery rates, invoices, product reviews (Judge.me and Trustpilot), shopping feeds and email (Shopify Messaging);
  • Google, for website analytics and our Google Shopping listings;
  • advertising platforms such as Google, when we advertise with them, for remarketing and to measure how our adverts perform, but only if you accept advertising cookies;
  • our professional advisers, such as accountants, lawyers and insurers;
  • the police, HMRC, courts or other authorities, where the law requires it.

We do not sell or rent your personal data.

5. Transfers outside the UK

Some of our providers, such as Shopify, Google, PayPal and advertising platforms, process data outside the UK, including in Canada, the USA and the European Economic Area. Where they do, the transfer is covered by UK adequacy regulations, such as those for the EEA and Canada, or for US companies certified under the UK-US data bridge. Otherwise it is covered by contract terms approved for UK transfers, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

6. How long we keep it

  • Orders, invoices and warranty records: a minimum of seven years, to meet our accounting requirements.
  • Enquiries that do not lead to an order: we operate a tiered data retention policy based on the nature of the enquiry and our ongoing business need to retain the information.

    We may retain enquiry and quotation information where it remains relevant to the services or products originally discussed. This is particularly important in relation to flood risk and flood protection, where customers may make an initial enquiry and then return to us months or years later, for example following significant rainfall, a flood event, a change in circumstances or progression of a project. Retaining the previous enquiry can help us understand the background and provide continuity when they contact us again.

    Retention periods vary depending on the nature and extent of the enquiry, including whether a quotation was provided, technical information was exchanged or advice was given. Records are reviewed periodically and personal data is deleted or reduced when there is no longer a reasonable business, legal or regulatory need to retain it.

  • Marketing preferences: until you unsubscribe. After that, we keep a note that you unsubscribed so we do not email you again.
  • Website analytics: 14 months, the retention period set in Google Analytics.
  • Remarketing lists: for the membership period set in each advertising platform, after which you are removed automatically.
  • Customer accounts: until you ask us to close your account. After that, your order records are kept as above.

7. Cookies

We use cookies and similar technologies on our website.

  • Essential cookies make the basket, checkout, country and currency selector and security features work. These do not need your consent.
  • Analytics cookies (Google Analytics) help us understand how people use the site. We only set them if you accept them in our cookie banner.
  • Advertising cookies: from time to time we advertise online, for example with Google. When we do, these cookies let us show our adverts to people who have visited our website (remarketing) and see whether our adverts lead to sales. Remarketing lists can be built from the pages you visited, how long you spent on them, your general location, your device and browser type, and whether you bought something. We only set these cookies if you accept them in our cookie banner.

You can change your choice at any time using the cookie settings link at the bottom of every page, or by clearing cookies in your browser. You can also turn off personalised adverts in your Google account and in the settings of other advertising platforms.

8. Your rights

You have the right to:

  • ask for a copy of the personal data we hold about you;
  • ask us to correct data that is wrong or incomplete;
  • ask us to delete your data, where we no longer need it or you withdraw your consent;
  • ask us to restrict how we use your data, or object to us using it, including for direct marketing at any time;
  • ask for the data you gave us in a format you can reuse;
  • withdraw your consent at any time, where we rely on it.

We will reply within one month, or tell you if a complex request needs longer. We may need to confirm your identity first. To make a request, email enquiries@floodprotectionsolutions.co.uk.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. If you live in Ireland, you can complain to the Data Protection Commission at dataprotection.ie.

9. Keeping your data safe

Our website uses an encrypted (HTTPS) connection. Payments are handled by providers that meet the PCI DSS card security standard. Only staff who need your details to do their job can see them.

10. Children

Our website and products are intended for adults. We do not knowingly collect personal data from children.

11. Other websites

Our website links to other sites, such as manufacturers, review platforms and YouTube. Their own privacy policies apply when you visit them.

12. Changes to this policy

We will update this policy when the way we use personal data changes. The date at the top shows when it last changed.