Privacy Policy

Privacy Policy

Last updated 18 September 2026

This policy explains how The Nollins collects and uses personal information when you visit tripleu.co.uk, place an order, contact us or subscribe to marketing. It also explains your data protection rights.

Who controls your information

The Nollins is a trading name of TRIPLE-U LTD, registered in England and Wales under company number 15675288. TRIPLE-U LTD is the data controller for the personal information described in this policy. Registered office: Bowen Suite, The Globe Centre, Accrington, Lancashire, BB5 0RE, United Kingdom. Email: info@tripleu.co.uk.

Information we collect

• Identity and contact details, including your name, email address, telephone number, billing address and delivery address.
• Order and transaction information, including products ordered, order value, payment status, delivery information, returns, refunds and customer-service history.
• Account information, including login details, saved preferences and account activity where you create an account.
• Communications, reviews and content you send to us.
• Technical and usage information, including IP address, device and browser details, cookie identifiers, pages viewed and interactions with the store.
• Marketing preferences and information about how you respond to our messages or advertising.

Payment providers process your card or other payment credentials. We generally receive confirmation, payment method and transaction details rather than your complete card number.

Where information comes from

We receive information directly from you, automatically from your browser or device, and from companies that help operate the store. These include Shopify, payment providers, delivery companies, fraud-prevention providers and marketing or analytics providers used with the required controls.

How and why we use information

Purpose

Lawful basis

Process payment, fulfil orders, deliver products, manage accounts, returns and contractual enquiries

Contract

Keep tax, accounting and compliance records and respond to lawful requests

Legal obligation

Prevent fraud, secure the store, manage claims and improve customer service

Legitimate interests

Send marketing where you have actively opted in

Consent

Send marketing about our similar products to eligible existing customers where the soft opt-in applies

Legitimate interests and applicable electronic marketing rules

Use optional analytics or personalised advertising technologies

Consent

 

Our legitimate interests are operating and protecting the business, preventing misuse, maintaining accurate records, understanding service performance and communicating with customers. We consider the effect on your rights before relying on this basis.

You must provide the information needed to process payment and fulfil an order. If you do not provide it, we may be unable to enter into or perform the contract. Marketing information is optional.

Marketing choices

You may unsubscribe from marketing at any time by using the link in a message or emailing us. We may still send service messages about an order, account, safety notice or legal matter. Where processing depends on consent, withdrawing consent does not affect processing that was lawful before withdrawal.

Who receives information

• Shopify, which hosts and operates our online store;
• payment providers and financial institutions selected at checkout;
• delivery, logistics and fulfilment providers;
• IT, cloud, customer-service, fraud-prevention and professional advisers;
• analytics, marketing and advertising providers where enabled and lawfully used;
• government bodies, regulators, courts or law enforcement where disclosure is required or legally permitted; and
• a buyer, seller or adviser involved in a genuine business reorganisation, sale or acquisition, subject to appropriate confidentiality and data protection measures.

We share only the information reasonably needed for the relevant purpose. We do not sell personal information for money.

Shopify

Our store is hosted by Shopify. Shopify processes information to provide the store, checkout, security and related services. For some services, including Shop Pay and certain network or personalisation features where enabled, Shopify may act as a separate controller. Shopify explains its processing and available choices in its own consumer privacy policy and privacy portal.

International transfers

Shopify and other providers may process information outside the United Kingdom. Where UK law restricts a transfer, we use an adequacy regulation or an appropriate safeguard, such as the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses. Contact us if you require further information about a relevant safeguard.

How long we keep information

• Order, payment and accounting records are normally kept for six years after the end of the relevant accounting period or longer where required for an active claim or legal duty.
• Account information is kept while the account remains active and for a reasonable period afterwards.
• Customer-service and complaint records are kept long enough to resolve the matter and manage related legal claims.
• Marketing information is kept until you opt out or the information is no longer needed. We may retain minimal suppression information so that we respect an opt-out.
• Cookie and technical information is kept for the period stated in our Cookie Policy or provider controls.

Security

We use proportionate technical and organisational measures to protect personal information. No internet service is completely secure. Please do not send full payment-card details or unnecessary sensitive information by email or through our contact form.

Your rights

Depending on the circumstances, you may have the right to access your personal information, correct inaccurate information, request deletion, restrict processing, receive portable information and object to processing based on legitimate interests. You may withdraw consent at any time where we rely on consent.

You have an absolute right to object to direct marketing. Email us or use the unsubscribe link in a marketing message.

To exercise a right, email info@tripleu.co.uk. We may ask for information needed to verify your identity. We normally respond within one month, subject to any lawful extension. Data protection rights are not absolute, and we will explain if an exception applies.

Automated checks

Payment and fraud-prevention providers may carry out automated checks during checkout. These checks can affect whether a payment is accepted. Contact us if you believe a decision is wrong, and we will help you seek appropriate review from the relevant provider.

Children

Our store is intended for adult purchasers. We do not knowingly collect personal information from children who are not able to provide valid consent or enter into a purchase. Contact us if you believe a child has provided information that should be removed.

Complaints

Contact us first at info@tripleu.co.uk if you have a concern about our use of personal information. You may also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113. Your right to complain to the ICO is not affected by contacting us first.

Changes to this policy

We may update this policy when our practices, services or legal obligations change. The current version and its last-updated date will be published on our website. We will provide additional notice where required by law.

The Nollins  |  Privacy Policy  |  info@tripleu.co.uk