Privacy Policy

Last updated: 14 June 2026

Taj Company UK Ltd ("we", "us", "our") is committed to protecting your personal data. This policy explains how we collect, use, and protect your information when you use tajcompany.co.uk.

We act as the data controller and comply with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Taj Company UK Ltd
Company Registration Number: 11708683
Registered in England & Wales
Correspondence Address: 16 Hay Brook Drive, Birmingham, England, B11 3RL
Email: info@tajcompany.co.uk

For privacy enquiries: info@tajcompany.co.uk

2. What Personal Data We Collect

Account registration: name, email, phone, password
Orders: name, delivery address, email, phone, order details
Trade account: company name, VAT number, email, phone
Contact enquiries: email and message content
Browsing: cookies and usage data (see Section 7)

We do not store payment card details — payments are handled by Stripe / PayPal.

3. Why We Use Your Data & Legal Basis

Purpose	Legal Basis (UK GDPR)
Processing and fulfilling orders	Contract (Art. 6(1)(b))
Managing your account	Contract (Art. 6(1)(b))
Customer support	Legitimate Interests (Art. 6(1)(f))
Legal obligations (tax, accounting)	Legal Obligation (Art. 6(1)(c))
Website security & improvement	Legitimate Interests (Art. 6(1)(f))
Order confirmation emails	Contract (Art. 6(1)(b))

4. How Long We Keep Your Data

Data Type	Retention Period
Customer accounts	Until deletion request, subject to legal obligations
Order records	6 years (UK tax requirements)
Contact / enquiry records	Up to 24 months
Security logs	Up to 12 months

5. Who We Share Your Data With

We do not sell your data. We share it only with trusted processors:

Stripe — payment processing
PayPal — payment processing
Courier / shipping providers — to fulfil deliveries
Hosting providers — to operate the Website

6. International Data Transfers

Some service providers may process data outside the UK. Where this occurs, appropriate safeguards including UK International Data Transfer Agreements (IDTA) or approved adequacy mechanisms are used, in accordance with UK GDPR Article 46:

Processor	Location	Safeguard
Stripe	USA / Ireland	UK IDTA / Standard Contractual Clauses (SCCs)
PayPal	USA / Luxembourg	UK IDTA / Standard Contractual Clauses (SCCs)
Contabo (Hosting)	Germany (EU)	EU–UK adequacy decision

For details on transfer safeguards, email info@tajcompany.co.uk.

7. Your Rights Under UK GDPR

Right of Access — request a copy of your data
Right to Rectification — ask us to correct inaccurate data
Right to Erasure — ask us to delete your data
Right to Restrict Processing — pause how we use your data
Right to Data Portability — receive your data in a portable format
Right to Object — object to processing based on legitimate interests
Right to Withdraw Consent — withdraw consent at any time

Email us at info@tajcompany.co.uk — we respond within 30 days.

8. Cookies

Type	Purpose	Consent Required
Essential / Session	Keep you logged in, maintain your basket	No (strictly necessary)
Preference	Remember your settings	Yes
Analytics	Understand site usage	Yes

You can withdraw cookie consent at any time via our cookie banner or by adjusting your browser settings.

9. Data Security

Encryption in transit: All pages are served over HTTPS / TLS. Data transmitted between your browser and our servers is fully encrypted.
Encryption at rest: Passwords are stored using one-way cryptographic hashing (bcrypt). Payment card data is never stored on our servers.
Secure payment processing: All payments are handled by Stripe and PayPal — both PCI DSS Level 1 certified processors. We do not handle or store your card details.
Access controls: Access to personal data is restricted to authorised personnel only, on a need-to-know basis. Administrative interfaces require authenticated login.
Secure hosting: Our website is hosted by Contabo GmbH, a Germany-based provider operating under EU data protection standards. The server environment is maintained with regular security updates.
Vulnerability management: We monitor for known vulnerabilities and apply security patches on a regular basis.

While we take appropriate technical and organisational measures to protect your data, no method of transmission over the internet is 100% secure. If you have concerns about the security of your data, please contact us at info@tajcompany.co.uk.

10. Complaints

You may complain to the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113

We would appreciate the chance to resolve your concern first — email info@tajcompany.co.uk.

11. Changes to This Policy

We may update this policy from time to time. The date at the top shows when it was last revised.

Privacy enquiries: info@tajcompany.co.uk | We respond within 30 days