Privacy Policy
Last updated: 21 September 2026
This Privacy Policy explains how Pill IT Ltd, trading as SuppaTech (“SuppaTech”, “we”, “us” or “our”) collects, uses, stores and protects personal information when you visit our website, place an order, create an account, contact us or otherwise use our services.
We are committed to handling personal information fairly, lawfully and transparently.
1. Who We Are
The data controller responsible for your personal information is:
Pill IT Ltd trading as SuppaTech
Company Registration Number: 16934752
VAT Registration Number: GB 509 4202 13
20 Crockerne Drive
Bristol
BS20 0LF
United Kingdom
Email: supportst@suppatech.co.uk
2. Personal Information We Collect
Depending on how you interact with SuppaTech, we may collect information including:
Identity and contact information, such as your name, billing address, delivery address, email address and telephone number where provided.
Order and transaction information, such as products purchased, order value, delivery details, payment status, refunds and transaction history.
Account information, where you create or use an account on our website, including account details and order history.
Payment-related information. Payments may be processed by our payment service providers. We do not need to receive or store your full payment-card details in order to process an ordinary card payment.
Customer-service information, including communications you send us, enquiries, complaints, return requests, warranty claims and information or photographs you provide in connection with those matters.
Technical and website information, which may include your IP address, browser or device information, website activity, cookies and similar technologies.
Fraud and security information, including information reasonably necessary to protect our website, customers, transactions and business against fraud, abuse and security threats.
3. How We Use Your Information
We may use personal information to:
- process and fulfil orders;
- take and administer payments and refunds;
- deliver products and provide tracking or delivery information;
- create and administer customer accounts;
- communicate with you about an order;
- answer enquiries and provide customer support;
- administer cancellations, returns, refunds and warranty claims;
- prevent and investigate fraud, misuse and security incidents;
- maintain accounting, tax and business records;
- operate, maintain and secure our website;
- comply with applicable legal and regulatory obligations; and
- establish, exercise or defend legal claims where necessary.
We do not use personal information for purposes that are incompatible with the purposes for which it was collected unless permitted by law.
4. Our Lawful Bases for Processing
UK data protection law requires us to have an appropriate lawful basis for processing personal information. The basis depends upon why we are using the information. ICO
For SuppaTech, these may include:
Contract — where processing is necessary to take steps at your request before entering into a contract or to perform our contract with you. This includes processing an order, taking payment, arranging delivery and dealing with returns or warranty matters.
Legal obligation — where we need to process information to comply with a legal obligation, including applicable accounting, taxation and consumer-law requirements.
Legitimate interests — where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and interests. This may include protecting our website and business against fraud and security threats, maintaining appropriate business records and establishing or defending legal claims.
Consent — where we specifically ask for your consent for particular processing. Where processing relies on consent, you may withdraw that consent.
5. Payments
We use third-party payment providers to process payments securely.
Our website currently uses Stripe for payment processing. When you make a payment, relevant personal and transaction information may be provided directly to Stripe or exchanged with Stripe as necessary to process the transaction, prevent fraud and provide payment-related services.
Payment providers process information in accordance with their own privacy terms and applicable data protection law.
SuppaTech does not ordinarily receive or store your complete payment-card number or card security code.
6. Delivery
Where necessary to fulfil your order, we may provide relevant information to postal operators, couriers and other delivery providers.
This may include your name, delivery address, contact details, order or parcel information and other information reasonably necessary to deliver your order, provide tracking, obtain a signature or resolve a delivery issue.
We only provide information reasonably necessary for the delivery service being performed.
7. WooCommerce and Our Website
Our online store uses WooCommerce and WordPress technology.
Information you provide when placing an order, creating an account or using our online store may be processed through these systems to operate the website and provide ecommerce functionality.
This can include customer information, account information, order information, basket information and technical information required to operate and secure the service.
8. Cookies and Similar Technologies
Our website uses cookies and similar technologies for purposes such as operating essential website functionality, remembering preferences, maintaining shopping-basket functionality, processing transactions and managing consent.
We use Complianz to manage cookie consent and provide visitors with controls over relevant cookie categories.
Where consent is required for a cookie or similar technology, it will not be treated as authorised merely because you visited the website.
You can use the consent controls available on our website to review or change your choices.
Further details about cookies used on our website are available in our Cookie Policy (UK).
9. Who We Share Personal Information With
We do not sell personal information.
We may share personal information where reasonably necessary with organisations such as:
payment processors and payment-service providers;
postal operators, couriers and delivery providers;
website hosting, ecommerce and IT service providers;
professional advisers such as accountants, legal advisers or insurers where necessary;
fraud-prevention, security or technical service providers; and
government authorities, regulators, courts, law-enforcement bodies or other parties where disclosure is required or permitted by law.
Where third parties process personal information on our behalf, we take appropriate steps to ensure that the information is handled appropriately.
10. International Transfers
Some technology and payment service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection requirements and that appropriate safeguards are used where required.
Information about applicable international-transfer safeguards may be requested by contacting us.
11. How Long We Keep Personal Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting, taxation, contractual, fraud-prevention and dispute-resolution requirements.
Different information may therefore be retained for different periods.
For example, information connected with purchases and financial transactions may need to be retained after an order has been completed to satisfy accounting, tax, warranty, consumer-rights and legal requirements.
Customer-service correspondence may be retained for an appropriate period where necessary to maintain a record of an enquiry, complaint, return, refund or warranty matter.
When information is no longer required, we will delete, anonymise or otherwise dispose of it appropriately.
12. Your Data Protection Rights
Depending on the circumstances and the lawful basis being relied upon, UK data protection law may give you rights concerning your personal information, including rights to:
access personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to erase personal information in certain circumstances;
ask us to restrict processing in certain circumstances;
receive certain information in a portable format;
object to certain processing; and
withdraw consent where processing is based on your consent.
You have the right to object to the use of your personal information for direct marketing.
To exercise a data protection right, contact us at:
We may need to verify your identity before fulfilling a request.
13. Marketing Communications
If SuppaTech sends electronic direct marketing that requires your consent, we will obtain that consent where required.
You can withdraw your consent or unsubscribe from marketing communications at any time using the unsubscribe facility provided in the communication or by contacting us.
Transactional communications relating to an order, payment, delivery, return, warranty claim or customer-service matter are not marketing messages merely because they are sent electronically.
14. Security
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
You are responsible for keeping any account password or other authentication information associated with your account confidential.
15. Information About Other People
If you provide personal information about another person — for example, when arranging delivery to somebody else — you should ensure that you are authorised to provide that information and that the person understands how their information may be used in connection with the transaction.
16. Children
Our website and products are intended for a general retail audience and are not specifically directed at children.
We do not knowingly seek to collect children’s personal information for marketing or profiling purposes.
17. Automated Decision-Making
SuppaTech does not currently make decisions about customers based solely on automated processing that produce legal or similarly significant effects.
Payment providers and fraud-prevention services may independently use automated systems as part of payment authorisation, security and fraud-prevention processes. Their processing is governed by their respective privacy terms.
18. Complaints
If you have a concern about how SuppaTech has handled your personal information, please contact us first so that we have an opportunity to investigate and respond:
You also have the right to raise a data-protection complaint with the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.
Information Commissioner’s Office (ICO):
ico.org.uk
19. Changes to This Privacy Policy
We may update this Privacy Policy where our business, website, service providers, processing activities or legal obligations change.
The latest version will be published on our website with an updated revision date.
20. Contact Us
For privacy enquiries, data-protection requests or complaints, contact:
Pill IT Ltd trading as SuppaTech
20 Crockerne Drive
Bristol
BS20 0LF
United Kingdom
Company Registration Number: 16934752
VAT Registration Number: GB 509 4202 13
Email: supportst@suppatech.co.uk