Privacy policy

Privacy Policy

Last updated: 4 September 2026

1. About This Privacy Policy

Global Tiling Alliance Ltd, trading as BOSS Blades™, operates this website and online store.

Global Tiling Alliance Ltd is the data controller responsible for the personal information described in this Privacy Policy.

Registered company number: 16225269
Registered office: 3 Conqueror Court, Sittingbourne, ME10 5BH
Email: info@globaltilingalliance.co.uk
Telephone: 02392 791230

This Privacy Policy explains how we collect, use, store and share personal information when you:

  • Visit or use the BOSS Blades™ website

  • Place or attempt to place an order

  • Create or access a customer account

  • Subscribe to marketing

  • Contact us for customer service or technical support

  • Submit a review or otherwise interact with us

2. Personal Information We Collect

Depending on how you interact with us, we may collect the following information.

Identity and contact information

This may include:

  • Your name

  • Billing and delivery addresses

  • Email address

  • Telephone number

  • Company or trading name

  • Customer account information

BOSS Blades™ customer accounts use passwordless authentication. Customers sign in using their email address and a temporary verification code sent to that email address.

Order and transaction information

This may include:

  • Products viewed, ordered, returned or cancelled

  • Order number and order history

  • Payment status and transaction reference

  • Delivery method and tracking information

  • Discounts or store credit used

  • Communications relating to an order

Payment information

Payments are processed securely by the payment providers offered at checkout.

We receive information such as payment status, payment method, transaction reference and limited payment-card details where necessary to process and manage an order.

We do not receive or store complete payment-card numbers or card security codes.

Technical and usage information

This may include:

  • IP address

  • Browser and device information

  • Cookie identifiers

  • Website interactions

  • Pages and products viewed

  • Referring website

  • Approximate location derived from an IP address

  • Shopping basket and checkout activity

  • Security and fraud-prevention information

Communications

We collect information supplied when you:

  • Submit a contact form

  • Email or telephone us

  • Request technical advice

  • Report a product or delivery issue

  • Request a return or refund

  • Submit photographs, videos or supporting evidence

  • Leave a product review

Marketing preferences

We record whether you have agreed to receive marketing and whether you subsequently unsubscribe or withdraw consent.

3. How We Collect Personal Information

We may collect personal information:

  • Directly from you

  • Automatically when you use our website

  • Through cookies and similar technologies

  • From our ecommerce and payment providers

  • From delivery companies

  • From fraud-prevention and security providers

  • From social media or sign-in services that you choose to use

  • From other service providers acting on our behalf

4. How and Why We Use Personal Information

UK data-protection law requires us to have a lawful basis for processing personal information.

To process and fulfil orders

We use personal information to:

  • Accept and process orders

  • Take and confirm payment

  • Send order and shipping notifications

  • Arrange delivery

  • Manage cancellations, returns, exchanges and refunds

  • Provide customer and technical support

Our lawful basis is normally that processing is necessary to perform a contract with you or take steps at your request before entering into a contract.

To meet legal obligations

We may process information to:

  • Maintain tax, VAT and accounting records

  • Comply with consumer-protection law

  • Respond to lawful requests from regulators, courts or public authorities

  • Investigate suspected crime or fraud

  • Establish, exercise or defend legal claims

  • Meet product-safety and record-keeping obligations

Our lawful basis is compliance with a legal obligation or, where applicable, our legitimate interests in protecting the business and its customers.

To operate and improve the website

We may use information to:

  • Maintain website functionality

  • Remember basket contents and customer preferences

  • Monitor performance

  • Diagnose technical problems

  • Improve navigation, products and customer experience

  • Protect the website against misuse and attacks

Our lawful basis may be our legitimate interests in operating and improving the business. Where non-essential cookies or similar technologies are involved, we will request consent where required.

Security and fraud prevention

We process information to:

  • Authenticate customer accounts

  • Protect payments and transactions

  • Detect suspicious or fraudulent activity

  • Protect customers, our business and our systems

  • Enforce our terms and policies

Our lawful basis is our legitimate interest in preventing fraud and maintaining the security of our services, and compliance with applicable legal obligations.

Marketing

Where permitted, we may use your information to send news, product information, advice, offers or other marketing.

For email and electronic marketing, we rely on consent or another lawful basis permitted by applicable marketing law.

You can unsubscribe at any time by using the link in a marketing email or contacting us.

Unsubscribing from marketing will not prevent essential service messages, such as order confirmations, payment notices, delivery updates or product-safety communications.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

  • Operate essential website and checkout functions

  • Remember basket contents and preferences

  • Maintain security

  • Understand website performance

  • Measure engagement

  • Support marketing where consent has been provided

Essential cookies may operate because they are necessary for the website and checkout to function.

Non-essential analytics, advertising or personalisation cookies will be managed in accordance with the choices available through our cookie banner or privacy settings.

You can change your cookie choices using the privacy or cookie settings provided on the website. Browser settings may also allow you to block or delete cookies, although doing so can prevent some website functions from working correctly.

6. How We Share Personal Information

We share personal information only where reasonably necessary for the purposes described in this policy.

Recipients may include:

  • Our ecommerce platform provider

  • Payment processors and card networks

  • Banks and financial institutions

  • Delivery and logistics providers

  • Email and communications providers

  • Website hosting, security and IT providers

  • Analytics or marketing providers where enabled and legally permitted

  • Accountants, insurers, solicitors and professional advisers

  • Government bodies, regulators, courts or law-enforcement agencies where legally required

We may also disclose information in connection with a merger, restructuring, sale or transfer of all or part of the business.

We do not sell customer contact details for payment.

7. Our Relationship With Shopify

Our online store and checkout are hosted by Shopify.

Shopify processes personal information to provide services including the storefront, checkout, customer accounts, order management, security, fraud prevention and payment functionality.

Information submitted through the store may be transmitted to Shopify and its approved service providers, including providers located outside the United Kingdom.

For certain Shop, Shop Pay or enhanced network features, Shopify may process information as an independent data controller. Further information is available in the Shopify Consumer Privacy Policy and through the Shopify Privacy Portal.

8. Delivery Providers

We provide delivery companies with the information reasonably required to deliver and track an order. This normally includes:

  • Customer or business name

  • Delivery address

  • Email address or telephone number where required for delivery updates

  • Parcel and order reference information

Delivery providers process this information under their own legal and privacy obligations.

9. International Transfers

Some service providers may process or store personal information outside the United Kingdom.

Where information is transferred internationally, we rely on safeguards recognised under UK data-protection law. These may include:

  • UK adequacy regulations

  • The UK International Data Transfer Agreement

  • The UK Addendum to approved Standard Contractual Clauses

  • Other legally recognised transfer safeguards

10. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, tax, product-safety and dispute-resolution requirements.

Retention periods depend on the type of information and may include:

  • Order, invoice, payment and accounting records retained for the period required by tax and company law

  • Customer account information retained while the account remains active and for an appropriate period afterwards

  • Customer-service and technical-support records retained while an enquiry, complaint, warranty issue or legal claim may remain relevant

  • Marketing records retained until consent is withdrawn or the information is no longer required

  • Security and fraud-prevention records retained for an appropriate period according to the nature of the risk

When information is no longer required, we delete or anonymise it securely where reasonably possible.

11. Data Security

We use reasonable technical and organisational measures to protect personal information against:

  • Unauthorised access

  • Loss or destruction

  • Alteration

  • Improper disclosure

  • Fraudulent or unlawful use

No internet transmission or storage system can be guaranteed to be completely secure. Please do not send payment-card details, passwords or other highly sensitive information through ordinary email or website contact forms.

12. Customer Accounts

Customer accounts allow customers to view and manage information associated with their orders.

Accounts use passwordless authentication through an email verification code and may also support Shop sign-in where available.

Customers are responsible for protecting access to their email account and devices. Contact us promptly if you believe that your customer account or personal information has been accessed without permission.

13. Marketing Choices

You will not be added to our email marketing list merely because you place an order unless the law permits this and the appropriate choice has been presented.

Where we rely on consent, you may withdraw it at any time by:

We may retain a minimal suppression record after you unsubscribe to ensure that we respect your choice.

14. Your Data-Protection Rights

Depending on the circumstances, UK data-protection law may give you the right to:

  • Request access to your personal information

  • Request correction of inaccurate or incomplete information

  • Request deletion of your information

  • Request restriction of processing

  • Object to certain processing

  • Receive certain information in a portable format

  • Withdraw consent where processing relies on consent

  • Object to direct marketing

  • Raise concerns about automated decision-making where applicable

These rights are not absolute and may be subject to legal exceptions.

To make a request, contact info@globaltilingalliance.co.uk.

We may request information to verify your identity before fulfilling a request. We will normally respond within the period required by applicable law.

You will not be treated unfairly for exercising your data-protection rights.

15. Complaints

If you have a concern about how we use your personal information, please contact us first so that we can investigate it.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection:

Information Commissioner’s Office
Website: www.ico.org.uk
Telephone: 0303 123 1113

You may contact the ICO without contacting us first, although the ICO may recommend that you give us an opportunity to resolve the matter.

16. Children’s Information

Our products and services are intended for adults and professional users.

We do not knowingly collect personal information from children. If you believe that a child has supplied personal information to us, contact us so that we can investigate and delete it where appropriate.

17. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy, content or security practices of third parties. Please review their privacy notices before providing them with personal information.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, technology, legal obligations or business practices.

When we make changes, we will publish the revised policy on this website and update the date shown at the top.

19. Contact Us

For questions about this Privacy Policy or to exercise your data-protection rights, contact:

Global Tiling Alliance Ltd
Trading as BOSS Blades™

Email: info@globaltilingalliance.co.uk
Telephone: 02392 791230

Correspondence address:

GTA / BOSS Blades™
Unit 5, 5 Fitzherbert Road
Farlington
Portsmouth
PO6 1RU
United Kingdom