Privacy Policy

The data controller is HIAA ELECTRICAL LIMITED, trading as Deskrail, registered office 8 Bulloch Crescent, Scotland, FK6 5AJ, United Kingdom. For any privacy question you can reach us at support@hiaaelectricc.shop or by phone at +44 7970596819.

• Order and delivery data: name, email, phone (optional), delivery address, city, postal code and country, plus the items ordered and your selected desk-surface option.
• Account and membership data: if you join Desk Club or Desk Studio, your membership status and billing interval.
• Support and enquiry data: the content of contact and setup-advice forms, including your country, desk surface, budget and message.
• Payment metadata: confirmation of payment, the last few digits and card brand where provided by Stripe, and billing country — never the full card number.
• Technical data: IP address, device and browser type, and essential cookie identifiers needed to run the cart and checkout.

Our collection sources are:

• Directly from you when you browse, add items to the cart, check out, join a membership or submit a contact or setup-advice form.
• From our payment processor (Stripe), which returns payment confirmation and limited billing metadata.
• Automatically from your device (technical data such as IP address and browser type) when you use the site.

• To fulfil your order and membership (performance of a contract): processing payment, shipping goods, managing returns and providing member benefits.
• To respond to enquiries (legitimate interests / pre-contract steps): answering contact and setup-advice requests.
• To retain an in-progress checkout (legitimate interests): if you enter delivery details but do not complete payment, we may keep them to follow up about your order. You can object at any time.
• To meet legal and tax obligations (legal obligation): keeping order and transaction records.
• To improve and secure the site (legitimate interests): essential analytics and fraud prevention.

We do not sell your personal data. We share it only with processors who help us operate the store:

• Payment: Stripe (card processing, fraud checks, receipts).
• Hosting & delivery of the site: Vercel (application hosting and content delivery).
• Database & authentication: Supabase (order, membership and enquiry records).
• Shipping carriers: the courier that delivers your order receives your name, address and phone for delivery.
• Email: our email provider for order and support correspondence.

We may also disclose data where required by law or to protect our legal rights.

We ship worldwide and some processors operate outside the UK/EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as UK International Data Transfer Agreements, EU Standard Contractual Clauses or an adequacy decision, so your data keeps an equivalent level of protection.

For order fulfilment of physical products we process your shipping address (delivery address), contact details and order contents, and we pass the shipping address and phone number to the delivery carrier so your parcel can be delivered. Billing and payment status is handled by Stripe; we retain the transaction reference and amount for accounting, returns and dispute handling.

Returns, exchanges and refund customer support are managed by our support team using your order record. Delivery carriers, order-fulfilment logistics and payment/billing data are covered by our Shipping & Delivery Policy, Returns Policy and Refund Policy.

We keep order and transaction records for as long as needed to fulfil the order and to meet tax and accounting obligations (typically up to 6 years). Enquiry and marketing-lead data is kept for no more than 24 months unless you ask us to erase it sooner. Essential technical logs are kept for a short period for security.

We use encryption in transit (HTTPS), access controls, and reputable processors with their own security certifications. Card data is handled entirely by Stripe on PCI-DSS-compliant systems and never reaches our servers.

• Access a copy of your data; correct inaccurate data; erase data; restrict or object to processing; and data portability.
• Withdraw consent at any time where processing relies on consent.
• For California residents: the right to know, delete and correct, and the right to opt out of “sale” or “sharing” — we do not sell or share your personal data as those terms are defined.
• To exercise any right, email support@hiaaelectricc.shop. We respond within the statutory timeframe.

We do not sell your personal information and do not share it for cross-context behavioural advertising. There is nothing to opt out of, but you may still contact us to confirm your preferences.

We use essential cookies and local storage to run the cart, checkout and admin session. We do not set long-term tracking cookies for advertising. See our Cookie Policy for the full list.

We do not make solely automated decisions with legal effects about you. Our store is not directed at children: you must be at least 13 to use the site, and customers aged 13–17 must have a parent or guardian’s consent and use an adult’s supervision for any installation. We do not knowingly collect data from children under 13.

Contact us first at support@hiaaelectricc.shopand we will try to resolve any concern. UK/EU residents also have the right to complain to a supervisory authority (in the UK, the Information Commissioner’s Office).