Privacy Policy

Privacy Policy for www.steinbauer.uk

Effective Date: 01/01/2026

This Privacy Policy explains how steinbauer.uk (“we”, “us”, “our”) collects, uses, and protects your personal data when you use our website and services, including account creation and payments.

We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The data controller responsible for your personal data is:

www.steinbauer.uk
Email: info@steinbauer.uk

We may collect and process the following categories of personal data:

a) Account Information

• Name
• Email address
• Username and password (stored securely in hashed form)

b) Payment Information

• Billing name and address
• Transaction details

Note: We do not store full payment card details. Payments are processed securely by third-party payment providers.

c) Technical and Usage Data

• IP address
• Browser type and version
• Device type
• Pages visited and activity on the site

d) Communications

• Messages you send via forms or email
• 
  

We rely on the following lawful bases under UK GDPR:

• Contractual necessity – to create and manage your account and process payments
• Legitimate interests – to improve our services, prevent fraud, and secure our website
• Legal obligation – to comply with financial and regulatory requirements
• Consent – where required (e.g. non-essential cookies or marketing)
• 
  

We use your personal data to:

• Create and manage your user account
• Process payments and provide services
• Communicate with you about your account or transactions
• Detect and prevent fraud or misuse
• Improve website functionality and performance
• Comply with legal obligations
• 
  

Payments on steinbauer.uk are processed via secure third-party providers. These providers process your payment data in accordance with their own privacy policies and security standards (e.g. PCI-DSS compliance).

We only receive limited transaction information (such as confirmation and amount).

We use cookies and similar technologies to:

• Enable essential site functionality (e.g. login sessions)
• Analyse website usage
• Remember preferences

Non-essential cookies will only be used with your consent.

We may share your data with:

• Payment processors
• Hosting and IT service providers
• Analytics providers
• Legal or regulatory authorities where required

All third parties are required to respect the security of your personal data.

If your data is transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses.

We retain your personal data only as long as necessary:

• Account data: while your account is active
• Transaction data: typically up to 6 years (for legal/tax purposes)
• Technical data: shorter retention periods unless required for security
• 
  

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption where appropriate
• Secure password storage
• Access controls
• Monitoring for vulnerabilities

However, no system is completely secure.

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

If you have questions or wish to exercise your rights:

Email: info@steinbauer.uk
Website: https://steinbauer.uk

By using our website, you agree to this Privacy Policy.