Privacy policy

Last updated: 28 October 2026

This privacy policy explains how Andrews Coatings Ltd, trading as Andrews Aerosols, uses personal information when you browse andrewsaerosols.co.uk, place an order or contact our team.

Who is responsible for your information?

Andrews Coatings Ltd is the controller responsible for the personal information we use to run Andrews Aerosols. You can contact us about this policy or your information:

Information we collect

  • Orders and accounts: your name, contact details, billing and delivery addresses, products ordered, payment status, account details and order history.
  • Enquiries and custom colours: messages, colour references, project details and any photographs or files you choose to send us.
  • Reviews and marketing preferences: reviews you submit, newsletter sign-up details and your choices about marketing and cookies.
  • Website use: information such as your IP address, browser, device, pages viewed and interactions with the site, collected through Shopify and the website tools in use, subject to applicable consent requirements.

We obtain information directly from you, through your use of the website, and from providers involved in payments, delivery, fraud prevention and the services you choose to use. Payment providers handle payment credentials; we receive transaction information needed to process and manage your order.

Why we use it and our legal grounds

  • To fulfil your order: taking payment, making custom products, arranging delivery and dealing with order enquiries. This is necessary to perform our contract with you, or take steps at your request before entering into a contract.
  • To run and protect the business: customer support, product advice, managing reviews, preventing fraud, keeping appropriate business records and improving our services. We rely on legitimate interests where those interests are not overridden by your rights.
  • To meet legal obligations: accounting, tax, product-related obligations and responding to lawful requests.
  • For optional marketing and tracking: we rely on consent where required. Where the law permits marketing to existing customers about our own similar products, we provide a clear way to opt out.

Information needed to take payment, manufacture your order or deliver it is necessary for us to provide that service. Optional marketing is not a condition of buying from us.

Who receives your information?

We share relevant information with providers that help us operate the store and fulfil your requests. These include:

  • Shopify: our ecommerce platform, hosting, checkout and related store services.
  • Payment, delivery and fulfilment providers: to process transactions, dispatch orders, provide tracking and manage delivery queries.
  • Store service providers: tools for custom product options, invoices, customer messages, email marketing, discounts and order administration, where needed for the service concerned.
  • Review providers, including Judge.me: to request, manage and display customer reviews. A review you choose to publish may show your submitted name, review text and photographs.
  • Analytics and advertising providers: where enabled and subject to applicable consent and preferences.
  • Professional advisers, authorities or a business successor: where necessary for advice, legal obligations, protecting rights or a business transaction, with appropriate safeguards.

We limit sharing to information relevant to the purpose. Shopify and payment providers may also process information for their own services and legal obligations. For details, see Shopify's Consumer Privacy Policy and the privacy information provided by your payment service.

Cookies, analytics and advertising

The website uses cookies and similar technologies for essential functions such as keeping your basket, checkout, security and remembering choices. Optional tools can help us understand how the site is used, improve it and measure advertising.

Our store includes analytics and marketing integrations. Where enabled, Microsoft Clarity can record website interactions through heatmaps and session replay; Google and Meta tools can measure visits, advertising responses and audiences. These services can receive device, browsing and interaction information. Their operation depends on the integrations and permissions in use, and on consent where required.

Use Cookie preferences in the website footer to review your choices. You can also manage cookies through your browser, although blocking essential cookies may affect shopping and checkout. Withdrawing consent does not affect processing that was lawful before withdrawal.

More information is available in the Microsoft Privacy Statement, Google Privacy Policy and Meta Privacy Policy.

Marketing choices

You can unsubscribe using the link in our marketing emails, or ask us to stop by emailing info@andrewscoatings.co.uk. We may keep a limited suppression record so that we respect your opt-out. Order confirmations, delivery updates and other necessary service messages are separate from marketing.

International processing

Shopify and other service providers may process information outside the UK. Where a restricted international transfer takes place, the relevant transfer arrangements must provide appropriate protection, such as an applicable adequacy decision or approved contractual safeguards. Contact us if you would like information about safeguards relevant to your data; Shopify also explains its international processing in its privacy policy.

How long we keep information

We retain information for as long as needed for the purpose for which it was collected. Order, invoice and tax records are kept for the applicable legal and accounting periods. Enquiry and support records are retained according to the ongoing need to answer your request, manage the customer relationship or resolve a complaint. Marketing records are reviewed against your preferences and our continuing need for them. Cookie and analytics retention depends on the technology and settings concerned.

We also consider any legal claim, product issue, fraud investigation or other obligation that requires records to be retained. Information that is no longer needed should be deleted or anonymised.

Your rights

Depending on the circumstances, you can ask to access or correct your information, request erasure or restriction, object to processing, and request a portable copy of information where that right applies. You can withdraw consent at any time and object to direct marketing. Rights are subject to legal conditions and exemptions; for example, some records must be retained to meet legal obligations.

Send requests to info@andrewscoatings.co.uk. We may need to verify your identity before acting on a request. We normally respond within one month, subject to extensions or exceptions allowed by law.

Questions or complaints

To make a data protection complaint, email info@andrewscoatings.co.uk, call 01902 710057 or write to our address above. Tell us what happened and how you would like it resolved. We acknowledge complaints within 30 days, investigate without undue delay, keep you informed and explain the outcome. You also have the right to complain to the UK Information Commissioner's Office: ico.org.uk/make-a-complaint.

Changes to this policy

We update this policy when our services or relevant requirements change. The date above shows the latest revision. Where required, we will bring significant changes to your attention.