Privacy notice

Who is responsible for your information

The data controller is Rabar Faris, trading as SwitchHarbour (sole trader), 19 Davey Road, West Bromwich, B70 9AP, United Kingdom. Contact us about privacy at info@switchharbour.co.uk, or write to us at that address.

What this website handles today

• Browsing: we don't use analytics, advertising or social-media tracking. Our hosting provider receives the technical information every website receives — such as your IP address, browser type and the pages requested — to deliver the site and keep it secure.
• Our hosting provider sets two strictly necessary cookies: one from Cloudflare that protects the site from automated bots, and one from Lovable that keeps you on the same version of the site during your visit. See our cookie policy.
• Your basket, wishlist, comparison list and cookie choice are saved in your own browser's storage so the site works as you'd expect. They are not sent to us.
• Checkout: while you fill in the form, your details stay in your browser tab, except your postcode and country, which our server checks with the public postcodes.io service to confirm UK delivery. When you press Place order and pay, we save your order — your name, email address, delivery address (and billing address if different), what you ordered and the price — so we can take payment, deliver it and look after you afterwards.
• Payment: card details are entered in Stripe's secure payment form on our checkout page and go straight to Stripe. We never see or store your full card details.
• Product photos are currently loaded directly from Currys' image service (media.currys.biz), so your browser connects to that service, which receives your IP address and browser details. We checked on 20 October 2026 and it set no cookies.
• Staff sign-in: the store owner's email address and a protected password are held by our sign-in service so only authorised people can use the store set-up area. Customers don't have accounts.

When you place an order

When you place an order we handle: your name, email address, delivery and billing addresses, phone number if you give one, what you ordered and any messages with our customer-service team.

Card payments are processed by Stripe through a secure payment form on our checkout page. We never see or store your full card details. Stripe also uses payment information to prevent fraud, and does so as an independent controller under its own privacy policy.

Why we use it and our legal basis

• To take, deliver and support your order, handle returns and refunds — because it's necessary for our contract with you.
• To keep tax and accounting records — because the law requires it.
• To keep the site secure, prevent fraud and improve our service — because we have a legitimate interest in doing so, balanced against your rights.
• To send marketing emails or use optional cookies — only with your consent, which you can withdraw at any time. We don't do either at the moment.

We don't sell your information and we don't make decisions about you using only automated means.

Who we share it with

• Website hosting and infrastructure: Lovable and its infrastructure providers, including Cloudflare.
• Postcode checks: postcodes.io (postcode and country only, sent from our server).
• Product photos: Currys' image service, while photos are loaded from there.
• Delivery company, once orders are taken: [Not yet provided: delivery company(ies) used]
• Payment processing: Stripe, which receives your email address, billing details, card details and the order amount.
• Professional advisers, and authorities such as HMRC or the police where the law requires.

International transfers

Some of these providers operate outside the UK, including in the United States. Where information leaves the UK we rely on safeguards recognised by UK law, such as the UK–US data bridge or approved contract clauses. [To be confirmed provider by provider before launch.]

How long we keep it

Our planned periods are: order and payment records for 6 years after the end of the financial year (tax law); customer-service messages for 2 years after the last contact; server security logs for no more than 90 days. [Retention periods to be confirmed by the owner.]

Your rights

You can ask us for a copy of your information, ask us to correct it, delete it or restrict how we use it, object to how we use it, ask for it in a portable format, and withdraw consent at any time. Contact us using the details above — we'll respond within one month.

If you're unhappy with how we've handled your information, please tell us first so we can put it right; we'll acknowledge your complaint within 30 days. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113.

Cookies

See our cookie policy for the small amount of information stored on your device and how to change your choices.