Privacy policy

Last updated: 26 August 2026

1. Who we are

TomKat Gas Training Limited, trading as TomKat Engineer Shop, is the controller responsible for the personal information described in this notice.

TomKat Gas Training Limited
Company number: 08174069
Office 3-8 Goodhope House
Cross Street
Ashton-under-Lyne
England
OL6 7SB
Email: info@tom-kat.co.uk
Telephone: 0161 343 7504

This notice explains how we collect and use personal information when you visit or use our online shop, create a customer account, place an order, contact us or choose to receive marketing emails.

2. Information we collect

Depending on how you use the shop, we may collect:

  • your name, email address, telephone number, billing address and delivery address;
  • order, payment, refund, delivery and transaction information;
  • customer-account information, sign-in activity, store-credit information and account preferences;
  • messages, enquiries, complaints, returns information and photographs you choose to send us;
  • marketing choices, consent and unsubscribe information;
  • device, browser, IP address, cookie, consent, usage, security and fraud-prevention information; and
  • information supplied by Shopify, payment providers, delivery providers and other service providers where needed to operate the shop or manage your order.

We do not receive your full payment-card details. Payment information is handled by Shopify Payments and the payment providers offered at checkout.

3. Why we use your information and our lawful bases

We use personal information only where we have a lawful reason:

  • Orders, payment, delivery, returns and customer service: to take steps at your request and perform our contract with you, including processing payment, delivering goods, sending order updates and dealing with cancellations, returns, refunds and problems.
  • Legal and accounting records: to comply with tax, accounting, consumer-protection and other legal obligations.
  • Security and fraud prevention: for our legitimate interests in protecting customers, preventing misuse, securing transactions and maintaining the shop, and where necessary to comply with legal obligations.
  • Customer accounts and store credit: to provide account features you request and for our legitimate interests in making order management and customer support easier. Shopify's Shop sign-in is enabled; Google and Facebook sign-in are not connected.
  • Service improvement and essential analytics: for our legitimate interests in understanding and improving shop performance, provided those interests are not overridden by your rights.
  • Non-essential cookies, personalisation and advertising-related processing: with consent where required. The shop uses Shopify's automated cookie and preference controls, and your choices are passed to Shopify through its Customer Privacy tools.
  • Marketing emails: only where you make a separate positive choice to receive them. Consent is not a condition of purchase and you may withdraw it at any time by using the unsubscribe link or contacting us.
  • Complaints and legal claims: to comply with legal obligations and for our legitimate interests in establishing, exercising or defending legal rights.

Where information is needed to place and fulfil an order, you are not legally required to provide it, but we cannot accept or deliver the order without the necessary contact, payment and delivery details.

4. Shopify and Shopify Network Intelligence

The shop is hosted by Shopify. Shopify processes personal information to provide the ecommerce platform, checkout, customer accounts, payments, security, analytics and related services.

Shopify Network Intelligence is enabled. Shopify may securely use information from this shop together with other Shopify data to provide Enhanced Services, including improved products, personalisation, store performance and more relevant advertising. Other Shopify merchants cannot see TomKat's customer data.

If you decline non-essential cookies through the shop's cookie banner, Shopify states that device data from this site will not be used by Shopify Network Intelligence for non-essential purposes, including advertising. Where available, you may also use Shopify's data-sharing opt-out page or privacy portal.

Shopify may act as a processor for TomKat and, for some Enhanced Services, as a separate controller responsible for its own processing. More information and direct privacy choices are available in Shopify's Consumer Privacy Policy and Privacy Portal at privacy.shopify.com.

No custom advertising pixel is installed and TomKat will not run a remarketing campaign at launch.

5. Who receives your information

We share personal information only where necessary with:

  • Shopify, its affiliates and subprocessors, to host and operate the shop, checkout, customer accounts, consent controls and approved Enhanced Services;
  • Shopify Payments, payment networks, banks and fraud-prevention providers to authorise payments, manage refunds and protect transactions;
  • Royal Mail and other delivery-service providers to deliver and track orders and investigate missing or damaged parcels;
  • email and communications providers to send order, dispatch, refund, customer-service and consented marketing emails;
  • accountants, professional advisers, insurers, regulators, tax authorities, courts or law-enforcement bodies where reasonably necessary or legally required; and
  • IT, hosting and security providers where needed to operate, maintain or protect the shop and its records.

We do not sell customer contact lists or make them visible to other Shopify merchants.

6. International transfers

Shopify and some service providers may process personal information outside the United Kingdom. Where the law requires safeguards for an international transfer, we rely on an applicable adequacy decision, approved contractual protections or another lawful transfer mechanism. Further information about Shopify's international processing is available in Shopify's privacy information.

7. How long we keep information

  • Orders, invoices, payments, refunds, delivery evidence and accounting or tax records are normally kept for six years from the end of the company financial year to which they relate. They may be kept longer where required for an HMRC enquiry, legal obligation or unresolved claim.
  • Customer-account profile information is kept while the account remains open or until you ask for closure, subject to transaction and legal records that must be retained separately. Inactive accounts are reviewed after 24 months without activity.
  • Customer-service correspondence is kept while an enquiry is active and normally for no more than two years after it is resolved, unless it forms part of an order record, complaint, legal claim or regulatory obligation requiring longer retention.
  • Marketing consent and active subscription information is kept until consent is withdrawn or it is no longer needed. The active marketing list is reviewed at least every 24 months.
  • If you unsubscribe or object to marketing, we keep a minimal suppression record, such as your email address and opt-out status or date, for as long as reasonably needed to ensure that we do not resume unwanted marketing.
  • Security, fraud, cookie and analytics information is kept for the period needed for security, consent management and service operation, using Shopify's configured controls and documented technical retention periods.

Information may be deleted or anonymised earlier where it is no longer needed and no legal reason requires continued retention.

8. Marketing choices

Order confirmations, dispatch updates, refund messages and replies to customer-service enquiries are service communications rather than marketing.

Marketing is by email only at launch. We will send marketing emails only where you have made a separate positive choice to receive occasional TomKat Engineer Shop news, new products and offers. We do not use marketing SMS, postal marketing or bought contact lists at launch, and historic learner or course-customer details are not automatically added to the shop marketing list.

You can withdraw consent at any time using the unsubscribe link in a marketing email or by contacting info@tom-kat.co.uk. Withdrawing consent does not affect processing that was lawful before withdrawal.

9. Cookies and similar technologies

The shop uses cookies and similar technologies needed for checkout, security, customer accounts and store operation. With your consent where required, Shopify may also use non-essential technologies for analytics, personalisation and advertising-related purposes.

Use the cookie banner or preference control to accept, decline or manage non-essential cookies. A live UK check of the banner and preference controls will be completed before the shop launches publicly.

10. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you the right to:

  • ask for access to your personal information;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete information;
  • ask us to restrict how information is used;
  • object to processing based on legitimate interests;
  • receive information you supplied in a portable format; and
  • withdraw consent where processing is based on consent.

You have an absolute right to object to your information being used for direct marketing.

These rights are not always absolute and exemptions may apply. We may need to verify your identity before responding. We will respond without undue delay and normally within one month.

To exercise a right, email info@tom-kat.co.uk or use the contact details in section 1.

11. Automated checks

TomKat does not make decisions based solely on automated processing that produce legal or similarly significant effects for customers. Shopify, payment and fraud-prevention providers may carry out automated security or fraud checks under their own privacy information.

12. Complaints

Please contact us first if you have a concern about how we use personal information so we can try to resolve it.

You also have the right to complain to the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk/make-a-complaint

13. Changes to this notice

We may update this notice when our services, technology, business practices or legal obligations change. The current version and its last-updated date will be published on the shop.