/Powder-coated steel/Flat-pack delivery/18 furnishing sets/Storage · Plants · Garden · Workshop/USD pricing worldwide/Coating warranty/Powder-coated steel/Flat-pack delivery/18 furnishing sets/Storage · Plants · Garden · Workshop/USD pricing worldwide/Coating warranty
Policy

Privacy Policy

Last updated: 13 July 2026 · Governing law: England and Wales

This Privacy Policy explains how Ironroot, operated by PROSTEELS FABRICATION SERVICES LTD("Ironroot", "we", "us"), collects, uses, shares and protects personal data when you visit profabser.shop, buy our powder-coated steel home and garden sets, hold a membership, or contact us.

01Who is responsible for your data

The data controller is PROSTEELS FABRICATION SERVICES LTD, 80 Mayswood Gardens, RM10 8UT, England, United Kingdom. For any privacy question or request, contact us at support@profabser.shop or +44 7529231328.

02What we collect

  • Order and delivery data: name, email, phone, delivery and billing address, and the items you buy.
  • Account and membership data: membership tier and subscription status.
  • Support data: messages, enquiries and photos you send us (for example unboxing photos for a damage claim).
  • Payment data: we do not store or see your full card number. Card details are entered directly with our payment processor.
  • Technical data: IP address, device and browser type, and pages viewed, collected through cookies and analytics.

03Collection sources

  • Provided by you directly at checkout, including your name, email, phone and shipping address.
  • Provided by you in the contact and trade forms, and in the Fit Finder.
  • Automatically collected from your device via cookies and similar technologies.
  • From our payment processor (confirmation that a payment succeeded or failed, and the last four digits of the card for reconciliation).

04Why we use it and our legal bases

  • To fulfil your order, manage order fulfilment and deliver your goods to your shipping address — performance of a contract.
  • To provide support, returns and warranty — performance of a contract and our legitimate interests.
  • To manage memberships and billing — performance of a contract.
  • To follow up on abandoned checkouts and send service updates — legitimate interests; marketing email only with your consent.
  • To keep the site secure and prevent fraud — legitimate interests and legal obligation.
  • To meet accounting and tax obligations — legal obligation.

05Who we share it with

We share personal data only with processors that help us run the store, under contract and only as needed:

  • Hosting and infrastructure: our website hosting and serverless platform.
  • Payments: Stripe processes card payments and subscriptions. Stripe acts as an independent controller for payment data; see Stripe's own privacy notice. Ironroot never receives your full card number.
  • Delivery and logistics: the carriers that ship your flat-pack order receive your name, delivery address and phone number.
  • Email and support: our transactional email and customer-support tools.
  • Database and storage: our managed database provider stores orders, leads and membership records.

We do not sell your personal data.

06International transfers

Some processors operate outside the UK/EEA. Where data is transferred internationally, we rely on adequacy decisions or Standard Contractual Clauses (and the UK Addendum) to keep your data protected to UK and EU standards.

07How long we keep it

  • Order and delivery records: kept for up to 6 years to meet tax and accounting rules.
  • Marketing and lead data: kept for up to 24 months from your last interaction, or until you opt out.
  • Support correspondence: kept for up to 24 months after the matter is resolved.

08Your rights (UK GDPR / EU GDPR / CCPA)

Depending on where you live, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data or complete incomplete data.
  • Delete your data ("right to be forgotten"), subject to legal retention.
  • Restrict or object to processing, including direct marketing.
  • Data portability.
  • Withdraw consent at any time where processing is based on consent.
  • For California residents: know, delete, correct, and opt out of any "sale" or "sharing" of personal information.

To exercise any right, email support@profabser.shop. We respond within the time limits set by law.

09Do Not Sell or Share

We do not sell your personal information and we do not share it for cross-context behavioural advertising. California residents do not need to opt out of a sale because none takes place.

10Cookies and analytics

We use strictly necessary cookies to run the cart and checkout, and optional analytics cookies to understand how the site is used. Manage your choices at any time — see our Cookie Policy.

11Automated decisions and children

The Fit Finder gives product suggestions but makes no legally significant automated decisions about you. Our sets are sold to adults: the store is not intended for children under 13, and customers aged 13-17 must have a parent or guardian's consent to place an order.

12Security

We use encryption in transit, access controls and reputable processors to protect your data. No method of transmission is completely secure, but we work to protect your information and review our safeguards regularly.

13Complaints and contact

Contact us first at support@profabser.shopand we will try to resolve any concern. You also have the right to complain to the UK Information Commissioner's Office (ICO) or your local data protection authority.

PROSTEELS FABRICATION SERVICES LTD, 80 Mayswood Gardens, RM10 8UT, England, United Kingdom.