TCS-eco Privacy Notice

Last updated: 21 July 2026

1. Introduction

At TCS-eco, we take your privacy seriously.

This Privacy Notice explains what personal information we collect, why we collect it, how we use it and the rights you have over your information.

It applies when you:

• Visit the TCS-eco website.
• Create a customer account.
• Place an order.
• Contact us with a question.
• Request a return, repair or replacement.
• Make a claim under our guarantee.
• Subscribe to marketing communications.
• Submit a review, photograph or other content.

Our website is hosted through Shopify, which provides the ecommerce platform used to operate our online store.

2. Who Is Responsible for Your Information?

For data-protection purposes, the controller of your personal information is:

[TCS-eco LTD, trading as TCS-eco

Address:
TCS-eco
55 Portland Road
Kilmarnock
KA1 2EQ
United Kingdom

Privacy contact: kerry@tcs-eco.co.uk
Order and returns enquiries: sales@tcs-eco.co.uk

Throughout this notice, “TCS-eco”, “we”, “us” and “our” refer to the business operating the TCS-eco website.

Please replace TCS-eco with the full legal name of the person, partnership or company operating TCS-eco before publishing this notice.

3. Information We Collect

The information we collect depends on how you use our website and services.

Information You Give Us

This may include:

• Your name.
• Your email address.
• Your telephone number.
• Your billing address.
• Your delivery address.
• Your account login information.
• Your order history.
• The products, sizes, fabrics and options you select.
• Measurements supplied for made-to-order garments.
• Payment and transaction information.
• Messages, emails and customer-service enquiries.
• Returns, repair and guarantee information.
• Photographs supplied to demonstrate a fault or fitting issue.
• Reviews, comments or other content you submit.
• Marketing preferences.
• Competition or promotion entries.

Information Collected Automatically

When you use our website, Shopify and approved service providers may automatically collect information such as:

• Your IP address.
• Browser type.
• Device type.
• Operating system.
• Approximate location based on your IP address.
• Pages viewed.
• Products viewed.
• Referring website or source.
• Shopping-basket activity.
• Website interactions.
• Cookie and consent preferences.
• Date and time of visits.
• Security and fraud-prevention information.

Payment Information

Payments are processed by Shopify Payments or another payment provider available at checkout.

TCS-eco does not normally receive or store your complete payment-card number. We may receive limited information such as:

• The payment method used.
• The final digits of the card.
• The payment status.
• A transaction reference.
• Fraud or payment-verification results.

The payment provider processes the complete payment details under its own privacy and security arrangements.

4. Information About Product Requirements

TCS-eco sells products intended for periods, bladder leakage and other absorbency needs.

The products you purchase do not necessarily tell us anything about your personal health, as products may be purchased for someone else. We do not use your purchases to diagnose, profile or make assumptions about your health.

We do not need medical records or detailed information about a diagnosis to manufacture or supply our products.

Please avoid sending medical information unless it is genuinely necessary for us to understand and respond to your enquiry.

If you voluntarily provide sensitive health information, we will:

• Use it only where permitted by law.
• Limit access to people who genuinely need it.
• Use it only to deal with your enquiry or complaint.
• Avoid using it for marketing.
• Delete it when it is no longer needed.

Where the law requires explicit consent to use sensitive information, we will ask for that consent.

5. How We Use Your Information

We may use personal information to:

• Process and fulfil your order.
• Manufacture customised products.
• Take and confirm payment.
• Arrange delivery.
• Send order and delivery updates.
• Manage customer accounts.
• Answer questions about our products.
• Provide sizing or measurement guidance.
• Process cancellations and returns.
• Investigate missing, damaged or incorrect orders.
• Assess guarantee claims.
• Repair or replace products.
• Prevent fraud and misuse.
• Maintain website and account security.
• Keep financial and tax records.
• Improve our website, products and customer experience.
• Manage reviews and customer content.
• Send marketing where permitted.
• Comply with legal and regulatory obligations.
• Establish, exercise or defend legal claims.

We will not use your information for an unrelated purpose without telling you and identifying an appropriate lawful basis.

6. Our Lawful Bases

Data-protection law requires us to have a lawful reason for using personal information.

Contract

We use information where it is necessary to enter into or fulfil a contract with you.

This includes:

• Processing your order.
• Manufacturing your products.
• Using measurements supplied for custom garments.
• Taking payment.
• Arranging delivery.
• Providing order updates.
• Processing returns.
• Handling faults and guarantee claims.

Without this information, we may be unable to accept or complete your order.

Legal Obligation

We use information where we must comply with the law.

This may include:

• Maintaining tax and accounting records.
• Responding to lawful requests from regulators or authorities.
• Complying with consumer-protection requirements.
• Managing product-safety matters.
• Preventing or reporting unlawful activity where required.

Legitimate Interests

We may use information where it is necessary for our legitimate business interests and where those interests are not overridden by your rights.

Our legitimate interests may include:

• Operating and improving our business.
• Providing effective customer service.
• Maintaining website and account security.
• Preventing fraud.
• Managing complaints and disputes.
• Understanding how customers use our website.
• Protecting our legal rights.
• Keeping a limited record of marketing opt-outs.
• Contacting existing customers about similar products where the law permits this.

We consider the effect on your privacy before relying on legitimate interests.

Consent

We may rely on consent for:

• Certain marketing communications.
• Optional analytics and advertising cookies.
• Publishing customer photographs or stories beyond the purpose for which they were originally supplied.
• Processing sensitive information where explicit consent is required.

You may withdraw your consent at any time. Withdrawal will not affect processing that took place before consent was withdrawn.

7. Email Marketing

We may send marketing emails where:

• You have actively subscribed; or
• You are an existing customer and the law allows us to contact you about similar TCS-eco products.

You can stop receiving marketing emails at any time by:

• Selecting the unsubscribe link in an email.
• Updating your marketing preferences, where available.
• Contacting kerry@tcs-eco.co.uk.

Unsubscribing from marketing will not stop essential service messages relating to an active order, delivery, safety notice, return or guarantee claim.

We may retain a limited suppression record containing your email address so that we can respect your request not to receive further marketing.

We do not sell customer email addresses or marketing lists.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small files or pieces of information placed on your device when you visit a website.

They may be used to:

• Keep the website working.
• Remember the contents of your basket.
• Keep accounts secure.
• Remember your privacy choices.
• Process checkout.
• Understand how the website is used.
• Measure the effectiveness of marketing.
• Personalise content or advertising, where permitted.

Strictly Necessary Cookies

Strictly necessary cookies support essential functions such as:

• Shopping baskets.
• Checkout.
• Security.
• Fraud prevention.
• Account login.
• Remembering your cookie choices.

These cookies do not normally require consent because the website cannot provide the requested service without them.

Optional Cookies

Optional cookies may include:

• Analytics cookies.
• Performance cookies.
• Personalisation cookies.
• Advertising cookies.
• Social-media cookies.

We will request permission before placing optional cookies where consent is required.

You can accept, reject or manage optional cookies through the cookie banner or privacy settings available on the website.

Withdrawing cookie consent will not affect the lawfulness of processing that occurred before it was withdrawn.

More information should be provided in our separate Cookie Policy or through the website’s cookie-preference tool.

9. Shopify

Our store is hosted by Shopify.

Shopify processes information needed to provide services such as:

• Website hosting.
• Customer accounts.
• Shopping baskets.
• Checkout.
• Order management.
• Store security.
• Fraud detection.
• Payment processing, where Shopify Payments is used.
• Website analytics, depending on our settings.
• Customer privacy controls.

TCS-eco controls how customer information is used for our store. Shopify also processes certain information under its own privacy terms when providing its services.

Shopify and its service providers may process information in the United Kingdom, European Economic Area, Canada, the United States or other countries.

Where international data-protection safeguards are required, Shopify states that it uses recognised legal transfer mechanisms and contractual protections.

10. Who We Share Information With

We share personal information only where it is necessary and appropriate.

Recipients may include:

Ecommerce and Website Providers

This includes Shopify and providers that help us operate, secure and maintain our online store.

Payment Providers

Payment processors receive information needed to authorise and complete your payment.

Delivery Providers

We may share your name, delivery address, email address, telephone number and delivery instructions with organisations such as:

• Royal Mail.
• Parcelforce.
• International postal services.
• Courier companies selected for your order.

They use this information to deliver your parcel and provide tracking or delivery updates.

Communication and Marketing Providers

Where applicable, we may use approved providers to:

• Send order communications.
• Manage email subscriptions.
• Send marketing communications.
• Collect customer reviews.

Analytics and Advertising Providers

Where you have provided any consent required by law, approved providers may process information to measure website performance or advertising.

The exact providers and cookie categories should be shown in our cookie-preference tool.

Professional Advisers

Information may be shared where necessary with:

• Accountants.
• Bookkeepers.
• Insurers.
• Legal advisers.
• IT and security specialists.

Government and Regulatory Authorities

We may disclose information where required or permitted by law, including to:

• HM Revenue & Customs.
• Courts.
• Law-enforcement organisations.
• Regulators.
• Trading Standards.
• The Information Commissioner’s Office.

Business Transfers

If TCS-eco is sold, transferred or reorganised, relevant customer information may be shared with professional advisers and a prospective or new owner.

Any new owner would be required to use the information consistently with applicable data-protection law.

11. International Transfers

Some service providers may process personal information outside the United Kingdom.

Where this happens, we take steps to ensure that an appropriate level of protection is provided.

Depending on the destination and provider, this may include:

• A UK adequacy regulation.
• The UK International Data Transfer Agreement.
• The UK Addendum to recognised standard contractual clauses.
• Another safeguard permitted under UK data-protection law.

You may contact us for more information about the safeguards relevant to your information.

12. How Long We Keep Information

We do not keep personal information indefinitely.

Retention depends on:

• Why the information was collected.
• Whether an order or account remains active.
• Tax and accounting requirements.
• The duration of our product guarantee.
• Whether a complaint, dispute or legal claim exists.
• Security and fraud-prevention requirements.
• Whether you have consented to ongoing marketing.

Our usual retention approach is:

Order and Financial Records

Order, payment and invoice records are normally retained for at least the period required by tax and accounting law. This will commonly be up to six years after the relevant accounting period, and may be longer where legally required.

Customer Accounts

Account information is retained while the account remains active.

When an account is closed, information that is not required for completed orders, legal obligations, security or dispute management will be deleted or anonymised.

Custom Measurements

Measurements supplied for made-to-order clothing may be retained:

• While the order is being manufactured.
• To deal with fitting questions, alterations or returns.
• To support repeat orders where the customer expects us to retain them.

You may ask us to delete saved measurements once they are no longer required, subject to any legal or dispute-related reason for retaining them.

Guarantee Records

Because TCS-eco pads have a 10-year guarantee, we may retain limited order and guarantee information for up to 10 years from purchase.

Records relating to a guarantee dispute or completed claim may be retained for an additional period where reasonably necessary.

Customer-Service Messages

General enquiries are retained only for as long as needed to respond and maintain an appropriate record.

Messages connected with an order, complaint, return or legal issue may be retained for up to six years after the matter is completed, where necessary.

Marketing Information

Marketing information is retained until you unsubscribe, withdraw consent or we determine that it is no longer appropriate to contact you.

A minimal suppression record may be retained for longer so that we do not accidentally restart marketing after you have opted out.

Website and Security Information

Technical and security information is retained according to the nature of the record, the provider’s settings and the need to detect security incidents, fraud or misuse.

When information is no longer needed, it will be securely deleted, anonymised or placed beyond normal use.

13. Keeping Your Information Secure

We take reasonable technical and organisational measures to protect personal information.

These may include:

• Secure Shopify hosting.
• Encrypted connections.
• Password and account controls.
• Restricted access to customer information.
• Payment processing through approved providers.
• Software and security updates.
• Secure deletion and disposal procedures.
• Staff access limited to information needed for their role.

No internet transmission or storage system can be guaranteed to be completely secure. However, we take reasonable steps appropriate to the type of information we hold and the size of our business.

If we become aware of a personal-data breach, we will assess it and notify affected individuals and the Information Commissioner’s Office where legally required.

14. Your Data-Protection Rights

Depending on the circumstances, you may have the right to:

Access Your Information

You can ask whether we hold personal information about you and request a copy.

Correct Your Information

You can ask us to correct information that is inaccurate or complete information that is incomplete.

Request Deletion

You can ask us to delete personal information in certain circumstances.

This right does not always apply, particularly where we must retain information for tax, accounting, legal or dispute-related reasons.

Restrict Processing

You may ask us to temporarily limit how we use your information in certain circumstances.

Object to Processing

You may object where we rely on legitimate interests.

You have an absolute right to object to your information being used for direct marketing.

Data Portability

In certain circumstances, you may ask to receive information you provided in a structured, commonly used and machine-readable format.

Withdraw Consent

Where we rely on consent, you can withdraw it at any time.

Challenge Automated Decisions

TCS-eco does not make decisions about customers based solely on automated processing where the decision has a legal or similarly significant effect.

Make a Complaint

You can complain to us if you are unhappy with how we have handled your information.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator responsible for data protection.

15. Exercising Your Rights

To exercise a data-protection right, contact:

Email: kerry@tcs-eco.co.uk

Post:
Privacy Enquiry
TCS-eco
TCS-eco
55 Portland Road
Kilmarnock
KA1 2EQ
United Kingdom

Please explain:

• Who you are.
• What information or action you are requesting.
• Any relevant order number or email address.

We may request reasonable proof of identity where necessary to protect your information.

We will normally respond without undue delay and within one month after receiving the information needed to deal with your request.

A complex request may take longer. Where an extension is permitted, we will explain the reason and tell you within the initial response period.

There is normally no fee for exercising your rights. A reasonable fee may be charged, or a request may be refused, where the law permits this because a request is manifestly unfounded or excessive.

16. Complaining About Our Use of Your Information

Please contact us first so that we have an opportunity to investigate and resolve your concern.

Contact:

Email: kerry@tcs-eco.co.uk

You may also complain to the Information Commissioner’s Office through its official complaints service.

Making a complaint does not affect any other legal rights available to you.

17. Children’s Information

Our website sells products that may be suitable for teenagers, but purchases should be completed by an adult or with the involvement of a parent or guardian.

Measurements for a person under 18 should be submitted by, or with the knowledge of, their parent or guardian.

We do not knowingly use children’s information for behavioural advertising or direct marketing.

Please contact us if you believe that a child has supplied personal information without appropriate involvement from a parent or guardian.

18. Third-Party Websites

Our website may contain links to websites operated by other organisations.

Those websites have their own privacy notices and cookie practices. TCS-eco is not responsible for how an independent third-party website handles personal information.

Please review the relevant privacy information before providing personal details to another website.

19. Reviews, Photographs and Customer Content

When you submit a product review, you may be asked to provide a name, email address, rating, written review or photograph.

Your email address will not normally be displayed publicly as part of the review.

Please do not include:

• Your home address.
• Telephone numbers.
• Medical information.
• Order references.
• Information about another person.
• Photographs containing identifiable people unless they have agreed.

We will ask for appropriate permission before using an identifiable customer photograph or story in wider advertising or promotional material.

20. Changes to This Privacy Notice

We may update this notice when:

• Our website changes.
• We introduce new services.
• Our service providers change.
• Our data-protection practices change.
• The law or regulatory guidance changes.

The latest version will be published on this page with the date it was updated.

Where a change materially affects how we use existing customer information, we will take reasonable steps to bring it to the attention of affected customers.

21. Contact Us

Questions about this Privacy Notice or the use of your personal information should be sent to:

Email: kerry@tcs-eco.co.uk

Post:
TCS-eco
55 Portland Road
Kilmarnock
KA1 2EQ
United Kingdom

Our usual business hours are Monday to Friday, 9.30am to 4pm.

We aim to respond within one working day during those business hours, although data-protection requests and more complex enquiries may take longer.

----