Privacy
Last updated: 9 July 2026.
This notice explains what personal data Electron Plus Instruments Limited collects, why, and your rights. We are the data controller for personal data processed through electron.plus. Where Electron Plus Instruments LLC (Texas) fulfils US orders, it is the controller for that processing; this notice will be updated when US fulfilment is live. Contact for any privacy request: support@electron.plus, or our registered office in the United Kingdom (address available on request).
What we collect
- Account data - email address, optional name, and the shipping/billing addresses you enter at checkout.
- Order data - products purchased, prices paid, calibration certificates issued, and the instrument serial numbers we ship to you. Retained 10+ years for warranty, calibration-traceability and regulatory purposes.
- Instrument registration data - serial numbers, where you bought the instrument, and any notes you provide when registering a distributor or second-hand purchase.
- Payment metadata - card brand, last four digits, and the Stripe payment-intent ID. We never store full card numbers; payment processing is handled by Stripe.
- Support and enquiry data - the content of emails, quote requests and "Ask Electron" assistant conversations you choose to send us. Retained for up to 24 months after the enquiry is resolved, then deleted.
- Logs and usage - server logs (IP address, user agent, request path), retained 90 days, and basic site analytics.
- Download logs - when you download software, a manual or a datasheet we record which file, the time, your IP address, approximate country and browser, and the page you came from, so we can see which resources are used and for security. Legitimate interests; retained for up to 12 months, then deleted. No cookie is set for this.
Why we process it, and our lawful basis (UK GDPR)
- To take and fulfil your order, provide cal certs, warranty and support - performance of a contract.
- To meet legal, tax, accounting, calibration-traceability and export-control obligations - legal obligation.
- To secure the site, prevent fraud, and improve our products and service - legitimate interests.
- To send marketing where you've asked us to - consent, which you can withdraw at any time.
Who we share it with
We share data only with service providers who process it on our behalf, under contract, and only as needed:
- Stripe - payment processing
- Resend - transactional email
- Royal Mail / DHL / DPD - shipping carriers
- Supabase - hosted Postgres database
- Vercel - hosted application infrastructure
- Cloudflare (R2) - calibration-certificate PDF storage
- DeepSeek - our AI assistant provider; only the content of "Ask Electron" conversations you send it (never your account, order or payment data)
We may also disclose data where required by law, to enforce our terms, or in connection with a business sale or reorganisation. We do not sell your personal data.
International transfers
Some of these providers process data outside the UK (including in the US). Where data leaves the UK we rely on UK GDPR transfer mechanisms - an adequacy decision, or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses with appropriate safeguards. Details available on request.
How we protect your data
We use appropriate technical and organisational measures to keep your data safe. All traffic to the site is encrypted in transit (HTTPS/TLS). Data is held in a managed, access-controlled Postgres database that is encrypted at rest, with row-level security enabled. We never store full card numbers - card payments are handled entirely by Stripe (PCI-DSS). Administrative access is authenticated and restricted on a least-privilege basis, and our service providers are contractually bound to protect your data and to process it only on our instructions. No system is ever perfectly secure, but we work to keep the risk low and to detect and respond to problems quickly.
If there is a data breach
If a personal-data breach occurs we assess it promptly. Where it is likely to result in a risk to your rights and freedoms we report it to the UK Information Commissioner's Office within 72 hours of becoming aware of it, and where it is likely to result in a high risk to you, we tell you without undue delay.
Cookies and analytics
We set only essential and functional first-party cookies:
- ep_cart - keeps your cart between visits.
- ep_country / ep_vat - your region and VAT-display preference, set only when you choose them.
- ep_geo - your country as detected from your connection, so prices default to the right currency before you choose a region.
- ep_consent - remembers your cookie choices (only once you've made one).
- Sign-in cookies (Supabase) - keep you signed in to your account.
- Turnstile (Cloudflare) - bot protection on our forms.
We use cookieless Vercel Web Analytics for aggregate page-view counts. With your consent we also use first-party analytics - an ep_visit cookie plus page-view logging (the pages you view, how long you spend on each, where you arrived from, any campaign tags in the link, and your IP address and approximate country) - to measure traffic and see which pages and adverts work. This is strictly opt-in: nothing is set or recorded unless you Accept, we honour Global Privacy Control, and you can change your choice on our Cookie Policy page at any time. Product videos are embedded from YouTube's no-cookie domain and load only when you press play. You can control cookies in your browser; blocking essential cookies may stop parts of the site working.
Automated decisions and profiling
We do not make decisions about you by solely automated means that produce legal or similarly significant effects, and we do not profile you. The "Ask Electron" assistant answers product questions using the message you send it (processed by DeepSeek); it does not make decisions about you or your account.
How long we keep it
- Order, invoice and calibration-certificate records - 10+ years (regulatory, warranty and traceability).
- Server logs - 90 days.
- Support, enquiry and assistant conversations - up to 24 months after resolution.
- Marketing consent records - until you withdraw consent, then as needed to prove the withdrawal.
- Other account data - while your account is active, then deleted or anonymised.
Your rights
Under UK GDPR you can ask us to give you a copy of your data, correct inaccurate data, delete your data, restrict or object to processing, or port your data. Email support@electron.plus; we respond within one month. Some records - particularly calibration certificates and order/tax records - are retained for compliance reasons even after account closure; for those we may anonymise rather than delete. If you're unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to put it right first.
US customers
Orders on the US channel are sold by Electron Plus Instruments LLC (14205 N Mopac Expwy, Suite 500 PMB#630, Austin, TX 78728), which acts as the controller for that order data; the Limited company operates this website and processes the data as described above on the LLC's behalf. We honour access, correction and deletion requests from US customers on the same terms as the UK rights above - email support@electron.plus. At our current scale the thresholds of state privacy laws (such as the CCPA and the Texas Data Privacy and Security Act) do not apply to us; we'll update this notice if that changes.
Children
Our products and this website are aimed at businesses and professionals. They are not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes to this notice
We may update this notice as our processing activities, service providers or the law change. We'll post the updated version here with a new "last updated" date; where we rely on your consent (such as analytics cookies), we'll ask again rather than assume it.
Contact
For any privacy matter - including exercising your rights - email support@electron.plus, or write to our registered office in the United Kingdom (address available on request). Given our size and the nature of our processing we are not required to appoint a Data Protection Officer; privacy queries are handled by the company directly.
Related policies
See also our Cookie Policy, Terms, Returns and Shipping pages.
