Privacy policy

PIR Boards is the data controller for pirboards.com. This policy explains what personal data we collect, why, and your rights under UK GDPR and the Data Protection Act 2018.

What we collect and why

  • Orders: your name, delivery and billing address, email address, phone number and the details of what you ordered. We need these to perform the contract: to deliver your boards, book the delivery, contact you about access and send order updates. Kept for 7 years for tax and accounting purposes.
  • Payments: card details are entered on, and processed by, our payment provider. We never see or store full card numbers.
  • Account: if you create an account, your login details and order history, so you can reorder and track orders. Kept until you ask us to delete the account.
  • Contact form and email: whatever you send us, used to answer your enquiry. Kept for 12 months.
  • Website analytics and cookies: see our cookie policy. Non-essential cookies are only set with your consent.
  • Fraud prevention: for flagged orders we may ask for proof of identity and address. Used only to verify the order and deleted once the order is complete.

Legal bases

Performance of a contract (orders and deliveries), legal obligation (tax records), legitimate interests (fraud prevention, improving the website, answering enquiries) and consent (non-essential cookies and marketing emails, which you can withdraw at any time).

Who we share data with

Delivery hauliers and the manufacturers or distributors who dispatch your boards (name, address, phone and delivery instructions only), our payment provider, our email and hosting providers, and our accountants. We do not sell personal data. Some providers may process data outside the UK under UK-approved safeguards.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict processing, and ask for your data in a portable format. Send requests through the contact page. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Security

The website is served over HTTPS, payment data is handled only by our payment provider, and access to order data is limited to staff who need it.

Changes

We will update this page if our practices change. Last updated: October 2026.