Privacy policy

Privacy policy

Last updated: 25 September 2026

1. Who we are

Fusion Flow is a trading name of Tech Fusion Products, 10 South Way, Alderbury, Salisbury SP5 3AA, United Kingdom.

Tech Fusion Products is the data controller for the personal data described in this policy. Questions about this policy, or about how personal data is handled, should be sent to info@fusionflow.store.

We have not appointed a Data Protection Officer, as we are not required to do so. Enquiries are handled by the business owner.

2. What we collect, why, and on what basis

Data Purpose Lawful basis Retained for
Name, delivery and billing address, email address, telephone number Processing and delivering an order, and providing support relating to it Performance of a contract 6 years from the end of the relevant tax year
Order and transaction records Meeting accounting and tax obligations Legal obligation 6 years from the end of the relevant tax year
Payment card details Taking payment Performance of a contract Not retained by us. See section 4
Email address supplied to the mailing list Sending the sizing guide, new guides and news of new products Consent Until you unsubscribe, or 24 months without engagement
Tank measurements, pump model and related details you send us Advising on which model fits, and reducing incorrect orders Legitimate interests 24 months
Correspondence with us Answering enquiries and keeping a record of what was agreed Legitimate interests 24 months from the last contact, or 6 years where it relates to an order
Website usage data collected by cookies Operating the site, understanding how it is used, and measuring our advertising Consent for non-essential cookies. Strictly necessary cookies require no consent See section 8

Where we rely on legitimate interests, those interests are the efficient operation of a small business: answering enquiries accurately, keeping records of what was agreed, and reducing the number of products returned because the wrong size was ordered. We have considered whether this processing could reasonably be expected and whether it prejudices your interests, and consider that it does not. You may object to processing on this basis at any time. See section 9.

3. How we collect it

Personal data reaches us in three ways. You provide it directly, when you place an order, join the mailing list, or contact us. It is generated by your use of the site, through cookies and similar technologies. And it is passed to us by our payment provider in the form of confirmation that a payment has succeeded, together with the last four digits and card type.

4. Payment

We do not see, handle or store full payment card details. Payments are processed by Shopify Payments, and by PayPal or Klarna where you select them at checkout. Those providers are independent data controllers for the payment data they hold, and their own privacy policies apply.

5. Who we share it with

We do not sell personal data. We share it with the following service providers, only to the extent needed for them to perform their function:

  • Shopify Inc. — the platform the store runs on, including hosting, order management, order notifications and emails to the mailing list
  • Shopify Payments, PayPal and Klarna — payment processing
  • Royal Mail — delivery, which requires your name and address
  • Apple Inc. — email hosting for the address published on this site

Where you have accepted analytics or marketing cookies, the following also receive information about your visit, such as the pages you view, the products you look at, and the device and browser you use:

  • Google — Google Analytics, Google Ads and Google Merchant Center, to understand how the site is used and how our adverts and product listings perform
  • Meta — the Meta Pixel, to measure our adverts on Facebook and Instagram and to show them to people likely to be interested
  • Rokt — advertising technology loaded on this site through Shopify's Shop integration

Google, Meta and Rokt act as independent data controllers for the information they collect in this way, and their own privacy policies apply. You may refuse these cookies, or withdraw consent at any time, through the cookie preferences link in the footer. See section 8.

We will also disclose personal data where we are required to by law, or where it is necessary to establish or defend a legal claim.

6. Transfers outside the United Kingdom

Some of the providers listed above are based outside the UK, including in the United States. Where personal data is transferred outside the UK, it is protected either by UK adequacy regulations covering the destination country, or by the International Data Transfer Agreement or the UK Addendum to the European Commission's standard contractual clauses.

7. Security

The store operates over an encrypted connection, and payment data is handled entirely by PCI DSS compliant providers. Access to order data is limited to the business owner and protected by two-factor authentication. No transmission over the internet can be guaranteed completely secure, and personal data is provided to us at your own risk.

8. Cookies

Strictly necessary cookies keep the site working — they remember the contents of your basket and keep your session secure. These are set without consent, because the site cannot function without them.

Analytics and marketing cookies are only set where you have consented through the banner shown on your first visit. You may change or withdraw that consent at any time through the cookie preferences link in the footer.

9. Your rights

Under UK data protection law you have the right to:

  • be informed about how your personal data is used, which is the purpose of this policy
  • request a copy of the personal data we hold about you
  • have inaccurate data corrected
  • request erasure of your data, where we have no continuing lawful reason to keep it
  • restrict processing in certain circumstances
  • data portability — receive the data you gave us in a machine-readable format
  • object to processing carried out on the basis of legitimate interests
  • withdraw consent at any time, where consent is the basis on which we rely

To exercise any of these rights, email info@fusionflow.store. We will respond within one month. There is no charge, unless a request is manifestly unfounded or excessive.

Some data cannot be erased on request. Records of completed transactions are kept for six years to meet HMRC requirements, and that obligation takes precedence over a request for erasure.

10. Marketing

Mailing list emails are sent only with your consent, or to existing customers about products similar to those they have already bought. Every message contains an unsubscribe link, and unsubscribing takes effect immediately. Unsubscribing does not affect emails about an order you have placed, which we are obliged to send in order to fulfil the contract.

11. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal effects or similarly significant effects.

12. Children

This site is not directed at children, and we do not knowingly collect personal data from anyone under 16. Where we become aware that we have done so, the data will be deleted.

13. Changes to this policy

This policy may be updated from time to time. The current version is always published at this address, and the date at the top shows when it last changed. Where a change materially affects how personal data is used, we will notify affected individuals directly.

14. Complaints

If you are unhappy with how we have handled your personal data, please contact us first at info@fusionflow.store so that we have the opportunity to put it right.

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection:

Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Telephone 0303 123 1113 ico.org.uk