Privacy policy


Last updated: 16 August 2026

NXTFlow Supplies respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, who we may share it with, how long we keep it and the rights you have in relation to your information.

This policy applies when you visit NXTFlow Supplies, place an order, contact us, subscribe to our marketing emails or otherwise interact with our website or services.

1. Who We Are

NXTFlow Supplies is operated by:

Ryan Butcher, trading as NXTFlow Supplies

NXTFlow Supplies is operated as a sole trader.

For the purposes of applicable UK data protection law, Ryan Butcher trading as NXTFlow Supplies is the data controller responsible for deciding how and why your personal information is used.

Business address:
65 Orton Avenue
Sutton Coldfield
B76 1JJ
United Kingdom

Email:
info@nxtflowsupplies.co.uk

2. Personal Information We Collect

The information we collect depends on how you interact with us.

Information you provide when placing an order

When you make a purchase, we may collect:

  • your name;
  • billing address;
  • delivery address;
  • email address;
  • telephone number;
  • products ordered;
  • order value;
  • delivery instructions;
  • payment status; and
  • information relating to returns, refunds or order issues.

Payment information

Payments are processed through Shopify and/or payment providers made available through our checkout.

NXTFlow Supplies does not normally receive or store your complete payment card number or card security code.

Payment providers may process information necessary to authorise and complete your payment in accordance with their own privacy and security arrangements.

Information you provide when contacting us

If you contact us by email or through our website contact form, we may collect:

  • your name;
  • email address;
  • telephone number, if supplied;
  • order number;
  • the contents of your message; and
  • any photographs, documents or other information you provide.

Marketing information

If you subscribe to our newsletter or otherwise agree to receive marketing, we may collect:

  • your email address;
  • your marketing preferences;
  • the date or method by which you subscribed; and
  • records of whether you have unsubscribed.

Account information

If customer-account functionality is available and you create an account, we may process information connected with that account, including your contact details, addresses, order history and account preferences.

Technical and website information

When you visit our website, Shopify and other technologies used to operate and secure the website may process information such as:

  • IP address;
  • browser type;
  • device type;
  • operating system;
  • pages visited;
  • date and time of visits;
  • referring pages or websites;
  • shopping-cart activity; and
  • cookie or similar technology identifiers.

Some of this information is necessary for the website to function correctly. Other information, such as certain analytics or advertising data, may only be collected where permitted by law and, where required, after you have provided consent.

3. How We Collect Your Information

We may collect information:

  • directly from you when you place an order;
  • when you contact us;
  • when you subscribe to our newsletter;
  • when you create or use a customer account;
  • automatically when you use our website;
  • from Shopify, which provides our ecommerce platform;
  • from payment providers in connection with payment confirmation or fraud prevention;
  • from delivery providers in relation to the status of your shipment; and
  • from security and anti-spam services used to protect our website.

4. Why We Use Your Personal Information

We only use personal information where we have an appropriate reason and lawful basis for doing so.

Processing and fulfilling orders

We use your information to:

  • accept and process orders;
  • take or confirm payment;
  • arrange delivery;
  • provide order and dispatch updates;
  • process returns, refunds and cancellations; and
  • deal with problems relating to an order.

Lawful basis: Processing is necessary to enter into or perform our contract with you.

Customer service

We use your information to:

  • respond to enquiries;
  • provide product or order support;
  • resolve complaints; and
  • communicate with you about your purchase.

Lawful basis: Performance of our contract with you and our legitimate interests in providing customer service and operating our business effectively.

Accounting, tax and legal requirements

We may retain and use transaction and order information where necessary to:

  • maintain business and tax records;
  • respond to legal claims;
  • comply with lawful requests;
  • comply with applicable laws; and
  • establish, exercise or defend legal rights.

Lawful basis: Compliance with legal obligations and, where appropriate, our legitimate interests in protecting our business and legal rights.

Fraud prevention and security

We may process information to:

  • detect potentially fraudulent transactions;
  • prevent misuse of our website;
  • protect customer accounts;
  • investigate suspicious activity; and
  • maintain the security of our website and business.

Lawful basis: Our legitimate interests in preventing fraud, protecting our customers and maintaining the security of our business, together with any applicable legal obligations.

Automated tools provided by Shopify, payment providers or other security services may be used to identify potentially fraudulent or high-risk transactions. Where appropriate, flagged transactions may be reviewed before an order is fulfilled.

Marketing

Where permitted, we may use your email address to send information about:

  • products;
  • special offers;
  • discounts;
  • promotions; and
  • NXTFlow Supplies news.

We will only send electronic marketing where we have an appropriate legal basis to do so, such as where you have given consent or where applicable law otherwise permits us to contact an existing customer about similar products.

You can unsubscribe at any time by using the unsubscribe link in a marketing email or by contacting:

info@nxtflowsupplies.co.uk

Unsubscribing from marketing will not stop necessary service communications relating to orders you have placed.

Improving our website and services

We may use information about how customers interact with our website to understand website performance, identify technical problems and improve our store and customer experience.

Where analytics or similar technologies require consent, we will use them in accordance with your cookie preferences.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are necessary for functions such as:

  • shopping carts;
  • checkout;
  • website security;
  • fraud prevention;
  • customer preferences; and
  • essential website functionality.

We may also use non-essential technologies for purposes such as analytics, performance measurement, personalisation or advertising.

Where consent is required by law, non-essential technologies will only be used in accordance with the choices you make through our cookie consent system.

You can review or change your choices using the Cookie Preferences link available on our website.

Disabling certain cookies may affect some website features, but you should still be able to access the website where those cookies are not necessary.

6. Shopify

Our online store is hosted and powered by Shopify.

Shopify provides technology required to operate our website, checkout, order-management and ecommerce services.

As a result, personal information may be processed by Shopify when you:

  • browse our website;
  • add products to your cart;
  • use checkout;
  • create or use a customer account;
  • place an order; or
  • otherwise interact with Shopify-powered features.

Shopify processes certain information on our behalf in order to provide its services to us. Shopify may also process certain information for its own purposes where permitted by applicable law and under its own privacy terms.

Because Shopify operates internationally, information processed through Shopify may be stored or processed outside the United Kingdom.

Where international transfers are subject to UK data protection requirements, appropriate safeguards or recognised transfer mechanisms are used as required by applicable law.

7. hCaptcha

Our website contact form is protected using hCaptcha to help distinguish genuine users from automated activity and to protect the website from spam, fraud and abuse.

When hCaptcha operates, it may process technical information relating to your browser, device, network connection and interaction with the security challenge.

hCaptcha processes information in accordance with its own privacy terms.

8. Who We Share Personal Information With

We do not rent or sell customer contact lists.

We may share personal information where reasonably necessary with organisations that help us operate our business.

These may include:

Shopify

To provide our ecommerce platform, website, checkout and order-management functions.

Payment providers

To authorise, process and protect payments and help prevent fraudulent transactions.

Delivery and courier providers

We may provide your name, delivery address, telephone number, email address and other necessary delivery information to the courier or delivery provider responsible for delivering your order.

IT, hosting and security providers

Including services used to operate, maintain and secure our website and communications.

Email and marketing service providers

Where necessary to operate our newsletter or other marketing communications and only in accordance with applicable marketing and privacy requirements.

Professional advisers

We may share information with accountants, insurers, legal advisers or other professional advisers where reasonably necessary.

Government bodies, regulators and law enforcement

We may disclose information where required by law, court order, legal process or a valid request from an authority with appropriate powers.

Business transfers

If the NXTFlow Supplies business is sold, transferred or reorganised in the future, relevant customer information may form part of that transaction where lawful and necessary.

9. International Transfers

Some of our technology and service providers may process information in countries outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that applicable UK data protection requirements are followed.

Depending on the destination and provider, this may include reliance on:

  • UK adequacy regulations;
  • recognised contractual safeguards; or
  • another lawful transfer mechanism.

You may contact us if you would like further information about safeguards relating to international transfers of your personal information.

10. How Long We Keep Personal Information

We do not intend to retain identifiable personal information for longer than reasonably necessary.

Different types of information may be retained for different periods.

Order and transaction records

We generally retain records relating to purchases, payments, refunds and business transactions for approximately six years, or for such longer period as may be required in connection with applicable tax, accounting or legal obligations.

Customer-service communications

We retain customer enquiries and correspondence for as long as reasonably necessary to respond to the matter and, where relevant, for an additional period to deal with complaints, warranties, disputes or legal claims.

Where correspondence forms part of an order or transaction record, it may be retained with that record.

Marketing information

We retain information about your marketing preferences for as long as you remain subscribed.

If you unsubscribe, we may retain limited information on a suppression list so that we can respect your request not to receive future marketing.

Customer-account information

Where customer accounts are available, relevant information may be retained while your account remains active and afterwards where necessary for transaction records, legal obligations, fraud prevention or dispute resolution.

Website and security information

Technical, security, analytics and cookie-related information is retained according to the purpose for which it was collected, the applicable settings and the retention periods of the relevant systems or service providers.

We may retain information for longer where reasonably necessary to establish, exercise or defend legal claims, comply with a legal requirement, investigate fraud or resolve a dispute.

11. Keeping Your Information Secure

We take reasonable technical and organisational measures to protect personal information against:

  • unauthorised access;
  • unlawful use;
  • accidental loss;
  • alteration; and
  • disclosure.

We also use established third-party providers, including Shopify and payment providers, to support secure ecommerce and payment processing.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

If we become aware of a personal-data breach, we will take appropriate action and make any notifications required by applicable law.

12. Your Data Protection Rights

Depending on the circumstances and the legal basis on which we process your information, you may have rights including:

Right of access

You may ask for confirmation of whether we process your personal information and request a copy of information we hold about you.

Right to rectification

You may ask us to correct inaccurate or incomplete personal information.

Right to erasure

In certain circumstances, you may ask us to delete your personal information.

This right does not necessarily apply where we need to keep information to comply with legal, tax or accounting requirements or to establish, exercise or defend legal claims.

Right to restrict processing

In certain circumstances, you may ask us to restrict the way we use your information.

Right to data portability

Where applicable, you may have the right to receive certain information you provided to us in a structured, commonly used and machine-readable format or ask us to transfer it to another organisation.

Right to object

You have the right to object to certain processing based on our legitimate interests.

You also have the right to object at any time to the use of your personal information for direct marketing.

Right to withdraw consent

Where we rely on your consent, you can withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

You will not normally have to pay a fee to exercise your data protection rights.

We may ask for information reasonably necessary to verify your identity before responding to a request.

To exercise a right, contact:

info@nxtflowsupplies.co.uk

13. Marketing Preferences

You can stop receiving NXTFlow Supplies marketing emails at any time.

You can:

We may keep a minimal record of your opt-out request so that we do not accidentally add you back to marketing communications.

Order confirmations, delivery updates, responses to enquiries and other necessary service communications are not marketing and may still be sent where appropriate.

14. Children's Information

Our website and products are not specifically directed at children.

We do not knowingly seek to collect personal information from children for marketing purposes.

If you believe that a child has provided personal information to us inappropriately, please contact us so that we can review the matter and take appropriate action.

15. Third-Party Websites

Our website may contain links to websites operated by third parties.

When you leave our website, the collection and use of your information by another website is governed by that organisation's own privacy practices.

NXTFlow Supplies is not responsible for the privacy practices of websites that we do not operate.

16. Complaints

If you have a concern about how we use your personal information, please contact us first and we will try to resolve the issue.

Email:
info@nxtflowsupplies.co.uk

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113

You do not have to contact us before making a complaint to the ICO.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to our website;
  • new services or technology;
  • changes to the organisations we use;
  • changes to how we process personal information; or
  • changes to applicable law or regulatory guidance.

When we make changes, we will update the date shown at the beginning of this policy.

Where a change materially affects how we use personal information, we will provide additional notice where required by law.

18. Contact Us

Questions about this Privacy Policy, our use of personal information or your data protection rights can be sent to:

Ryan Butcher, trading as NXTFlow Supplies

65 Orton Avenue
Sutton Coldfield
B76 1JJ
United Kingdom

Email:
info@nxtflowsupplies.co.uk

For data protection purposes, Ryan Butcher trading as NXTFlow Supplies is the data controller.