Privacy Policy
This Privacy Policy explains how All Foam collects, uses, stores and protects personal information when you use the website, contact us or place an order.
Last updated: 6 July 2026
1. Who We Are
All Foam is operated by ALL FOAM PRODUCTS LTD. ALL FOAM PRODUCTS LTD is the data controller responsible for personal information processed through this website.
Company number 17300893. Our registered office address is 124 City Road, London, United Kingdom, EC1V 2NX.
ICO registration details will be added where required.
2. Scope of This Policy
This policy applies to personal information collected through the All Foam website, enquiries, orders, customer service, delivery arrangements and related communications.
It does not apply to websites operated by third parties, even where the All Foam website links to them. Third-party websites have their own privacy information and should be reviewed separately.
3. Information We Collect
Depending on how you interact with us, we may collect:
- Your name, billing address, delivery address and contact details
- Order details, selected products, dimensions, preferences and transaction history
- Enquiries, emails, correspondence, complaints and customer service records
- Payment status and limited payment-related information supplied by a payment provider
- Account or checkout information where those facilities are available
- IP address, browser, device, operating system and approximate location information
- Website activity, referring pages, pages viewed, interactions and exit pages
- Cookie choices and information collected through permitted storage or access technologies
- Fraud-prevention, security and delivery information where necessary
We do not intentionally collect special category information unless it is necessary, lawful and you have chosen to provide it in connection with a specific enquiry.
4. How We Collect Information
We collect information directly from you when you place an order, complete a form, contact us, request support, subscribe to marketing or otherwise communicate with us.
Some technical information is collected automatically when you use the website. We may also receive necessary information from payment providers, delivery companies, fraud-prevention services and other suppliers involved in fulfilling an order or operating the website.
5. How and Why We Use Personal Information
| Purpose | Typical lawful basis |
|---|---|
| Responding to enquiries and taking steps before an order | Contract or legitimate interests |
| Processing, manufacturing, administering and delivering orders | Contract |
| Taking payment and preventing fraudulent transactions | Contract and legitimate interests |
| Keeping invoices, tax records and legally required business records | Legal obligation |
| Handling complaints, returns, product issues and legal claims | Contract, legal obligation and legitimate interests |
| Protecting the website, systems, customers and business | Legitimate interests and legal obligation |
| Improving products, services, website usability and operations | Legitimate interests, consent or an applicable legal exception |
| Sending marketing communications | Consent or the soft opt-in where legally permitted |
Where we rely on legitimate interests, we consider whether the use is necessary, proportionate and balanced against your rights and reasonable expectations.
6. Orders, Payments and Delivery
We use order information to manufacture or supply the selected products, process payment, prevent fraud, issue confirmations, arrange delivery, provide customer service and meet legal or accounting obligations.
Payment may be handled by a secure third-party payment provider. The provider used may change as the website develops. We do not intentionally store full payment-card numbers within the public website.
We share the minimum information reasonably required with delivery companies and other fulfilment providers. This may include your name, delivery address, contact details and delivery instructions.
7. Marketing Communications
We may send marketing where you have consented or where the law permits the soft opt-in for existing customers. Marketing messages will provide a clear way to unsubscribe.
You can withdraw consent or object to direct marketing at any time through the unsubscribe link in a message or by using the Contact page.
Stopping marketing does not prevent us from sending service communications about an enquiry, order, delivery, return, safety notice or other necessary customer matter.
10. International Transfers
Some service providers may process information outside the United Kingdom. Where this happens, we use a lawful transfer mechanism and appropriate safeguards where required, such as adequacy regulations, approved contractual protections or another permitted safeguard.
11. How Long We Keep Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, warranty, complaint and dispute requirements.
| Record type | Typical retention approach |
|---|---|
| Orders, invoices and accounting records | Normally 6 years in line with legal and accounting requirements |
| Enquiries and quotations that do not lead to an order | Normally up to 2 years after the last meaningful contact |
| Complaints, returns and claims | For the period needed to resolve the matter and manage legal or insurance risk |
| Marketing records | Until consent is withdrawn, you object, the information is no longer needed or it is removed following review |
| Security and technical logs | For a limited period appropriate to security, troubleshooting and fraud prevention |
Information may be kept for longer where reasonably necessary because of a dispute, legal claim, regulatory requirement, fraud concern or law-enforcement request.
12. How We Protect Information
We use proportionate technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration, disclosure or misuse.
Measures may include access controls, secure hosting, encryption in transit, payment-provider security, backups, monitoring, staff controls and supplier due diligence. No internet service can guarantee absolute security, but we review safeguards in light of the information and risks involved.
13. Your Data Protection Rights
Depending on the circumstances, you may have the right to:
- Be informed about how personal information is used
- Request access to personal information
- Ask for inaccurate or incomplete information to be corrected
- Request erasure in certain circumstances
- Request restriction of processing in certain circumstances
- Object to processing based on legitimate interests
- Object to direct marketing at any time
- Request data portability where the legal conditions apply
- Withdraw consent where processing relies on consent
- Raise concerns about automated decision-making where applicable
These rights are not absolute and exemptions may apply. We may need to verify your identity before responding. We normally respond within one month, although the law allows additional time for complex or numerous requests.
To exercise a right, use the Contact page.
14. Automated Decision-Making
We do not currently make decisions about customers solely by automated means where the decision produces a legal or similarly significant effect.
Automated tools may be used for fraud screening, security or payment checks. Where a third-party provider makes such a decision, its own privacy information may also apply.
15. Children's Information
The website is not directed at children under 13 and we do not knowingly collect personal information from children under 13.
If you believe a child has supplied personal information without appropriate authority, contact us so that the matter can be reviewed and the information removed where appropriate.
16. Third-Party Links
The website may link to third-party websites or services. We do not control their privacy practices and this policy does not apply to information they collect independently. Review their privacy information before providing personal information.
17. Changes in Business Ownership or Control
If all or part of the business is sold, transferred, reorganised or merged, relevant personal information may be disclosed or transferred as part of that transaction, subject to applicable data protection law and appropriate confidentiality measures.
18. Contact and Complaints
For privacy questions, requests or complaints, use the All Foam Contact page or write to:
ALL FOAM PRODUCTS LTD
124 City Road
London
United Kingdom
EC1V 2NX
If you are dissatisfied with how your information has been handled, you may complain to the Information Commissioner's Office. You can find current complaint and contact information on the ICO website.
19. Changes to This Policy
We may update this policy to reflect changes in law, guidance, website functions, service providers or business operations. The current version will be published on this page and the updated date will be changed where appropriate.