Privacy policy

Last updated: 15 October 2026

1. ABOUT THIS POLICY

Heating Trade Supplies Group Limited ("Heating Trade Supplies", "HTS", "we", "us" or "our") operates the Heating Trade Supplies website, the HTS Trade Portal website at https://portal.heatingtradesupplies.com, and the HTS Trade Portal mobile application for Android and iOS (together, the "Services").

This Privacy Policy explains how we collect, use, disclose and protect personal information when you visit or use the Services, create or use a trade account, browse products, place or manage orders, view invoices, contact us, or otherwise interact with us.

For the purposes of applicable UK data protection law, Heating Trade Supplies Group Limited is the controller of the personal information described in this Privacy Policy, except where another organisation acts as an independent controller as explained below.

2. PERSONAL INFORMATION WE COLLECT

Depending on how you use the Services, we may collect the following categories of personal information:

• Contact and identity information, such as your name, business name, billing and delivery addresses, email address and telephone number.

• Account information, such as your account identifier, account status, trade tier, preferences and authentication information. Sign-in and email verification are provided through Shopify or the relevant authentication provider. The HTS Trade Portal mobile application does not separately store your password or one-time email verification code in its application state.

• Order and transaction information, such as products viewed or ordered, product variants, quantities, prices, discounts, VAT, delivery details, order status, returns, cancellations, invoices and transaction history.

• Payment-related information. Payments are handled by Shopify and applicable payment providers. We may receive payment status, payment method type and transaction references. We do not receive or store complete payment-card numbers in the HTS Trade Portal mobile application.

• Communications, such as information contained in enquiries, support requests, emails, telephone calls or other communications with us.

• Device and technical information, such as device type, operating system, browser or WebView information, IP address, network information, cookies, session identifiers, diagnostic information and information needed to secure and operate the Services.

• Usage information, such as pages and products viewed, searches, selections, basket activity, account and order functions used, and the date and time of interactions with the Services.

• Preferences and locally stored information. The mobile application and website may store session information, sign-in state, favourites, basket information, preferences and similar data on your device so that the Services operate correctly and remember your choices.

3. INFORMATION SPECIFIC TO THE MOBILE APPLICATION

The HTS Trade Portal mobile application provides access to our Shopify and SparkLayer-powered trade portal through a secure in-app browser session and also provides native navigation, catalogue search and invoice functions.

The application may:

• maintain the portal session using cookies and WebView storage;

• store limited preferences and application state locally on your device;

• display product, pricing, availability, account, order and invoice information supplied by our portal providers;

• create an invoice PDF locally on your device when you choose to save or share an invoice; and

• open your device's standard sharing interface when you choose to share an invoice or link. The recipient or destination is selected by you through your device. HTS does not automatically upload the locally generated PDF to a separate HTS server as part of the native sharing action.

The application does not request access to precise location, contacts, microphone or advertising identifiers for its normal operation, and it does not display third-party advertising.

4. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

• directly from you when you create an account, place an order, update your details, communicate with us or otherwise provide information;

• automatically when you use the Services, including through cookies, WebView storage and similar technologies;

• from service providers that operate parts of the Services on our behalf, including Shopify, SparkLayer, payment providers, hosting and technical service providers;

• from delivery, fulfilment, fraud-prevention and customer-support providers; and

• from business partners or other third parties where permitted by law.

5. HOW AND WHY WE USE PERSONAL INFORMATION

We use personal information for the following purposes and legal bases:

• To provide the Services and perform our contract with you, including creating and administering accounts, displaying trade pricing, processing baskets and orders, taking payment, arranging delivery, managing returns, providing invoices and responding to service requests.

• To comply with legal obligations, including tax, accounting, consumer-protection, product-safety, fraud-prevention and law-enforcement requirements.

• For our legitimate interests in operating, securing and improving our business and Services, including troubleshooting, preventing misuse and fraud, maintaining records, understanding use of the Services, improving catalogue search and user experience, and establishing, exercising or defending legal claims. We consider and balance these interests against your rights and interests.

• With your consent where consent is required, including for certain marketing communications or optional technologies. You may withdraw consent at any time, without affecting processing that took place before withdrawal.

We may use your information to:

• provide, maintain and personalise the Services;

• authenticate users and protect accounts;

• process purchases, payments, deliveries, returns, repairs, replacements and refunds;

• provide trade pricing, availability, order history and invoices;

• communicate about accounts, orders, security, service changes and support requests;

• send marketing communications where permitted by law and according to your preferences;

• detect, investigate and prevent fraudulent, malicious or unlawful activity;

• analyse and improve performance, reliability, security and user experience; and

• comply with law and enforce our terms and policies.

6. COOKIES AND SIMILAR TECHNOLOGIES

Our website, portal and the in-app browser may use cookies, WebView storage and similar technologies to keep you signed in, remember preferences and baskets, provide account and ordering functions, protect the Services, measure performance and, where permitted, support analytics or marketing.

Your browser or device may allow you to manage some of these technologies. Disabling essential cookies or storage may prevent account, basket, checkout or other portal functions from working correctly.

7. HOW WE SHARE PERSONAL INFORMATION

We may disclose personal information where necessary to operate the Services, fulfil orders, comply with law or protect our rights. Recipients may include:

• Shopify, which hosts and operates core store, account, checkout and commerce functions;

• SparkLayer, which provides trade portal and business-to-business commerce functionality;

• payment processors and financial institutions that process payments and help prevent fraud;

• delivery, logistics, repair, fulfilment and return-service providers;

• hosting, cloud, IT, security, analytics and customer-support providers;

• professional advisers, insurers, auditors and legal advisers;

• regulators, courts, law-enforcement agencies or other authorities where required or permitted by law;

• a purchaser, investor or successor in connection with a proposed or completed merger, reorganisation, financing or sale of all or part of our business; and

• other parties when you direct us to disclose information or provide your consent.

Service providers may process information only for the services they provide to us or as otherwise permitted by their own applicable privacy notices and law. Some providers, including Shopify and payment providers, may also act as independent controllers for certain processing.

For more information about Shopify's processing, visit:
https://www.shopify.com/legal/privacy

8. INTERNATIONAL TRANSFERS

Some providers may process personal information outside the United Kingdom. Where UK data protection law requires safeguards for an international transfer, we use an applicable adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful safeguard. You may contact us for further information about the safeguards relevant to your information.

9. RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide accounts and Services, fulfil orders, maintain tax and accounting records, resolve disputes, enforce agreements and comply with legal obligations.

Retention periods depend on the nature of the information and our legal and operational requirements. For example, transaction and invoice records may be retained for the period required by tax and accounting law. Local application information remains on your device until it is removed through the application, browser or device settings, or until the application is uninstalled, subject to the behaviour of your operating system and backups.

10. SECURITY

We use appropriate technical and organisational measures designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your device and account access secure and should not share authentication codes or credentials with others.

11. YOUR RIGHTS

Depending on applicable law and the circumstances, you may have rights to:

• request access to your personal information;

• request correction of inaccurate or incomplete information;

• request deletion of your personal information;

• request restriction of processing;

• object to processing based on legitimate interests or for direct marketing;

• receive certain information in a portable format;

• withdraw consent where processing is based on consent; and

• complain to a data protection authority.

You can unsubscribe from promotional emails by using the unsubscribe link in those messages. We may still send non-promotional communications about your account, orders, security or the Services.

To exercise your rights, contact us using the details below. We may need to verify your identity before responding. Rights are not absolute and may be subject to legal exceptions.

You may also complain to the UK Information Commissioner's Office (ICO):
https://ico.org.uk/make-a-complaint/

12. ACCOUNT AND DATA DELETION

You may request deletion of your account and associated personal information by emailing info@heatingtradesupplies.com or contacting us using the details below. Please use the subject line "Account deletion request" and include the email address associated with your account.

We will verify the request and delete or anonymise information where required by law. We may retain information that we must keep for legal, tax, accounting, fraud-prevention, dispute-resolution or security purposes.

You may remove locally stored application data by signing out, clearing the application's storage in your device settings or uninstalling the application. These actions do not automatically delete order, invoice or account records held in our commerce systems; contact us to request deletion of eligible server-side information.

13. CHILDREN

The Services are intended for business and trade customers and are not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact us so that we can take appropriate action.

14. THIRD-PARTY LINKS AND SERVICES

The Services may link to websites, applications or services operated by third parties. Their privacy practices are governed by their own policies. We are not responsible for the privacy, security or content of services that we do not control.

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes to the Services, our practices or legal requirements. We will publish the revised policy at this URL, update the "Last updated" date and provide any additional notice required by law.

16. CONTACT US

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise a data protection right, contact:

Heating Trade Supplies Group Limited
Tyne View Terrace
Wallsend
NE28 6SG
United Kingdom

Email: info@heatingtradesupplies.com
Telephone: +44 (0)191 263 3708