Legal
Last updated: 23rd Jun 2026
Jump to section
BOSH Group Ltd is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.
The data controller for this website is:
BOSH Group Ltd
71-75 Shelton Street
Covent Garden
London, WC2H 9JQ
Email: info [at] boshgroup.co.uk
ICO Registration: ZA920742
If you have any questions about how we handle your personal data, please contact us at the email address above.
We collect personal data in the following circumstances:
When you submit a contact, reseller application, or custom build enquiry, we collect your name, company name, email address, phone number, and the content of your message.
When you register for an account, we collect your name, company name, email address, phone number, and a securely hashed password. We never store your password in plain text.
When you place an order, we collect your delivery address, billing address, and details of the products ordered. Online card payments are processed securely by Stripe — we never see or store your full card details. Orders may alternatively be invoiced for payment by bank transfer.
We use Google Analytics to collect anonymised information about how visitors use our website, including pages visited, time on site, and general geographic location. This data does not identify you personally.
We use the personal data we collect to:
We do not use your personal data for automated decision-making or profiling, and we do not sell your data to third parties.
Under UK GDPR, we process your personal data on the following legal bases:
Contractual necessity
Processing required to fulfil an order or provide a service you have requested.
Legitimate interests
Responding to enquiries and improving our services, where our interests do not override your rights.
Consent
Where you have actively opted in, for example by accepting analytics cookies.
Legal obligation
Where processing is required to comply with applicable law.
We retain your data only for as long as necessary:
Under UK GDPR you have the following rights regarding your personal data:
Right of access
Request a copy of the personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure
Request deletion of your data where there is no lawful reason to retain it.
Right to restriction
Ask us to limit how we use your data in certain circumstances.
Right to portability
Receive your data in a structured, machine-readable format.
Right to object
Object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, email us at info [at] boshgroup.co.uk. We will respond within one calendar month. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
We take the security of your personal data seriously. Our technical measures include:
In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the ICO as required by law.
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal data.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the website after any changes constitutes acceptance of the revised policy. We encourage you to review this page periodically.
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
BOSH Group Ltd
71-75 Shelton Street
Covent Garden
London, WC2H 9JQ
Alternatively, use our online contact form.
