Privacy policy

Last updated: 26 October 2026

1. Who we are

This policy explains how NoxWorks Ltd ("NoxWorks", "we", "us", "our") collects, uses and protects your personal information when you visit www.noxworks.co.uk, buy from us, contact us, or use our warranty and servicing.

NoxWorks Ltd is a company registered in England and Wales under company number 16826255, at Woodston, Peterborough PE2 9QP, United Kingdom.

We are the data controller of your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are registered with the Information Commissioner's Office (ICO), the UK's independent data protection regulator, under registration number ZC161030.

Contact: [email protected] · +44 330 133 8509

2. Information we collect

Information you give us

Contact details: name, billing and delivery addresses, email address and phone number.
Order details: products bought, order history, returns and exchanges.
Account details: login details and preferences, if you create an account.
Communications: messages, enquiries, quote requests and support correspondence.
Professional and agency details: organisation, role and procurement details, where you enquire about restricted or law enforcement/military sales.
Export documentation: end-user statements, end-use information and destination details, where an export licence or authorisation is required.
Warranty and device records: device and tube serial numbers, build and test data, warranty claims, service history, and ownership details shown in the warranty Transfer Log.
Loss and theft reports: device serial numbers, crime reference numbers and related details.

Information collected automatically

Device and usage information: IP address, browser and device type, pages viewed and how you use our website, collected through cookies and similar technologies (see section 9).

Payment information

Card payments are processed securely by our payment providers. We do not see or store your full card details.

3. How we use your information and our legal basis

Under UK GDPR, we must have a lawful basis for using your information.

Purpose	Legal basis
Processing and delivering orders, payments, returns and refunds	Contract
Managing your account and responding to enquiries and quotes	Contract, or legitimate interests for pre-sale enquiries
Providing warranty, repairs and servicing, and keeping device and serial records	Contract and legitimate interests (supporting our products and honouring our warranty)
Keeping tax, accounting and financial records	Legal obligation
Export licensing, end-user checks and export control record-keeping	Legal obligation
Recording reported lost or stolen devices and helping prevent crime	Legitimate interests (protecting owners and preventing the misuse of controlled goods)
Preventing fraud and keeping our website secure	Legitimate interests
Sending marketing emails	Consent, which you can withdraw at any time
Inviting you to review your purchase	Legitimate interests
Analytics and non-essential cookies	Consent
Responding to legal claims and requests from authorities	Legal obligation or legitimate interests

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our payment and e-commerce providers may use automated fraud checks to protect transactions.

4. Who we share your information with

We only share your information where necessary:

Shopify, which hosts our store and processes order data, including through its messaging tools when you contact us.
Payment providers, to process payments securely.
Delivery carriers, including Royal Mail (via Click & Drop) and UPS, to deliver your order.
Trustpilot, to invite you to review your purchase. Trustpilot receives your name, email address and order reference.
Professional advisers, such as accountants and solicitors, where needed.
Government and regulatory authorities, including the Export Control Joint Unit (ECJU) and HM Revenue & Customs, where required for export licensing, customs or tax.
The police and other law enforcement agencies, where a device is reported lost or stolen, where we suspect unlawful activity or a breach of export control law, or where we are legally required to do so.
A buyer or successor, if our business is sold or restructured.

We never sell your personal information.

5. International transfers

Some of our service providers, including Shopify, may process your information outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

6. How long we keep your information

Information	How long we keep it
Orders, invoices and financial records	6 years from the end of the financial year they relate to (HMRC requirement)
Export documentation and licensing records	For the period required by UK export control law
Device, serial, build and service records	For the life of the device, to support our warranty and the device's traceability
Warranty claims	For the length of the warranty, plus 6 years
Loss and theft reports	Until the device is recovered, plus 6 years
Enquiries and quote requests that don't lead to a sale	2 years
Marketing preferences	Until you unsubscribe, after which we keep a suppression record so we don't contact you again
Account information	Until you close your account, subject to the periods above

7. Your rights

Under UK data protection law, you have the right to:

access the personal information we hold about you;
have inaccurate information corrected;
have your information erased, where we have no legal reason to keep it;
restrict or object to our use of your information;
data portability, meaning to receive your information in a usable format; and
withdraw consent at any time, where we rely on consent.

Some rights are limited where we must keep information by law, for example for tax or export control purposes.

To exercise your rights, email [email protected]. We may need to verify your identity. We will respond within one month.

8. Marketing

We only send marketing emails if you have opted in, for example through our mailing list sign-up. Every marketing email includes an unsubscribe link. We will still send you essential emails about your orders, warranty or account.

9. Cookies

Our website uses cookies to make the store work, such as your basket and checkout, and, with your consent, to understand how the site is used and improve it. You can manage your preferences through our cookie banner or your browser settings. Blocking essential cookies may stop parts of the store from working.

10. Children

Our products are sold only to customers aged 18 and over. We do not knowingly collect information from anyone under 18.

11. Security

We use appropriate technical and organisational measures to protect your information, including secure, encrypted checkout, restricted access to records and secure storage of documentation. No system is completely secure, so please avoid sending sensitive information by unsecured email.

12. Third-party websites

Our website may link to other sites, such as our Instagram and YouTube channels. We are not responsible for their privacy practices, so please review their policies.

13. Complaints

If you have a concern about how we handle your information, please contact us first at [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at www.ico.org.uk or on 0303 123 1113.