ATA Trades ("we", "us", "our") supplies premium BBQ grills, coals and outdoor cooking equipment through our website at atatrades.com. This policy explains what personal data we collect, why we collect it, how we use it, and the choices and rights you have over it.

We are committed to handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website or placing an order with us, you acknowledge the practices described in this policy.

ATA Trades is the data controller responsible for your personal data. Our details are as follows:

We collect information that you give us directly, information gathered automatically as you browse, and information from trusted third parties who help us run our store.

• Contact & account details — name, delivery and billing address, email address and phone number.
• Order information — products purchased, order value, order history and delivery preferences.
• Payment information — processed securely by our payment providers; we do not store full card numbers on our servers.
• Device & usage data — IP address, browser type, pages viewed, referring pages and time spent on site, collected via cookies and similar technologies.
• Customer support records — messages, enquiries or reviews you send us.

We use your personal data only where we have a lawful basis to do so, primarily to fulfil our contract with you, to meet legal obligations, or where you have given consent.

• Processing and delivering your orders for grills, coals and accessories.
• Communicating order confirmations, shipping updates and customer service responses.
• Improving our website, product range and shopping experience.
• Sending marketing communications, where you have opted in — you can unsubscribe at any time.
• Preventing fraud and protecting the security of our store and customers.
• Complying with our legal, tax and accounting obligations in the UK.

Our website, built on Shopify, uses cookies and similar technologies to keep your basket working, remember your preferences, and understand how customers use our store.

• Essential cookies — required for core functions such as checkout and account security.
• Analytics cookies — help us understand site traffic and improve performance.
• Marketing cookies — used to show relevant advertising and measure campaign performance, where consented to.

We do not sell your personal data. We share it only with trusted parties who help us operate our business:

• Shopify — our e-commerce platform provider, which hosts our store and processes orders.
• Payment processors — to securely handle transactions on our behalf.
• Courier & delivery partners — to deliver your grills, coals and accessories to your address.
• Marketing & analytics providers — to help us understand and improve our website, where legally permitted.
• Regulators & authorities — where required by law, such as HMRC or law enforcement.

Some of our service providers, such as Shopify, may store or process data outside the United Kingdom. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent mechanisms approved under UK data protection law, to keep your data protected to the same standard.

We keep your personal data only as long as necessary for the purposes it was collected for — including order fulfilment, warranty support, and compliance with our UK tax and accounting obligations, which typically require records to be kept for six years. Marketing data is retained until you unsubscribe or request deletion.

Under UK GDPR, you have a number of rights regarding your personal data. To exercise any of these, contact us at contact@atatrades.com.

We use appropriate technical and organisational measures — including encrypted checkout, secure hosting through Shopify, and restricted internal access — to protect your personal data against unauthorised access, loss or misuse. No online system can be guaranteed 100% secure, but we work to keep your information safe at every step.

Our products and website are intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised effective date. We encourage you to review this policy periodically.