Trusted by our customers
Largest premium product selection
Next Working Day Delivery available!
 

Privacy

Privacy – Data Protection Declaration – Battery Group

Privacy – Data protection declaration

Last updated: [04 / 06 / 2026]

As a responsible person within the meaning of the data protection regulations, we inform you below about the processing of your personal data by us.

 

 

I. The term personal data and other important terms

Personal data are, in simple terms, all information relating to you personally as a data subject. Provisions on what the term "personal data" means and what other terms important for the following data protection information mean can be found in Article 4 of the UK GDPR (UK General Data Protection Regulation).

 

 

II. The name and contact details of the controller; Contact details of the Data Protection Officer

The controller is Battery Group UK. The name and full contact details of the controller can be found in our provider identification / our imprint.

 

 

III. Purposes of the processing of your personal data; Legal bases for processing

We process your personal data in the course of our activities for the purposes listed below in accordance with the respective legal bases.

  1. In order to carry out pre-contractual measures arising from a request from you, the processing of your personal data shall be carried out on the basis of the consent given by you in accordance with Article 6(1)(a) UK GDPR or on the basis of Article 6(1)(b) UK GDPR.
  2. In order to safeguard our legitimate interest in answering enquiries and in carrying out other measures arising from a request from you, the processing of your personal data shall be carried out on the basis of your consent pursuant to Article 6(1)(a) UK GDPR or on the basis of Article 6(1)(f) UK GDPR.
  3. For the performance of a contract to which you are a party, the processing of your personal data shall be carried out on the basis of the consent given by you in accordance with Article 6(1)(a) UK GDPR or on the basis of Article 6(1)(b) UK GDPR.
  4. For the purpose of carrying out measures for the purpose of advertising, the processing of your personal data shall be carried out either on the basis of your consent in accordance with Article 6(1)(a) UK GDPR or on the basis of Article 6(1)(f) UK GDPR.
  5. In order to safeguard our legitimate interest in the maintenance of the proper operation of our website, in the provision of user-friendly functions and in the analysis of the use of our website, the processing of your personal data is carried out on the basis of Article 6(1)(f) UK GDPR.
  6. In order to safeguard our legitimate interest in enforcing our rights and in defending against claims made against us, the processing of your personal data is carried out on the basis of Article 6(1)(f) UK GDPR.

Our systems are secured according to the state of the art by technical and organisational measures in order to protect your personal data from access, alteration or dissemination by unauthorised persons as well as from loss and destruction.

Information on the processing of your personal data for the individual processing purposes can be found in the relevant further information in the context of this data protection declaration.

 

 

IV. Transfer of your personal data to third parties; Categories of recipients of your personal data

Insofar as this is necessary for the purpose of processing your personal data, we transmit your personal data to third parties within the scope of the legal requirements. Detailed information on the transfer of your personal data to third parties for the individual processing purposes can be found in the corresponding further information in the context of this data protection declaration. In cases of the transfer of your personal data to third parties, the scope of the transmitted data is limited to the minimum required.

 

 

V. Scope of the processing of your personal data for the individual processing purposes

In the following, we inform you in detail about the processing of your personal data for the various processing purposes.

Your personal data will be deleted if it is no longer needed for processing for the respective processing purpose, unless we are allowed to continue to process the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this data protection declaration.

V.1 Use of our website for information purposes

If you visit our websites without providing us with information, we only process the personal data that your browser transmits to our server.

This is the following data, which is technically necessary to show you our website and to ensure stability and security:

  • The page you are accessing
  • Date and time of the request
  • Amount of data transferred
  • Source or reference from where you got to the page
  • Browser you are using
  • Operating system you are using
  • Your IP address

The processing of your personal data is carried out on the basis of Article 6(1)(f) UK GDPR in order to safeguard our legitimate interest in maintaining the proper operation of our website.

Your personal data will be deleted after 6 months, unless it is further needed for the assertion of rights or the enforcement of claims due to measures against the proper operation of our website. In this case, deletion shall take place immediately after the completion of the relevant procedure. This information is temporarily stored in a server log file for 7 days. The following information is collected without your intervention and stored until automated deletion:

  • IP address of the requesting computer
  • The date and time of access
  • Name and URL of the retrieved file
  • Website from which access is made (referrer URL)
  • Browser and, if applicable, the operating system of your computer and the name of your access provider

The temporary storage of the IP address by the system is necessary to enable delivery of the website. To do this, the IP address must be stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimise the website and to ensure the security of the information technology systems. This data is not stored together with other personal data. The legal basis for data processing is Article 6(1)(f) UK GDPR.

V.2 Processing of enquiries

If you contact us with a request, we process the personal data and information/documents you provide.

Regardless of how you send us your request, these may include:

  • Date and time of contact
  • Name data
  • Contact details
  • Data on the enquiry or concern
  • Information/documents submitted

The processing of your personal data and the information/documents transmitted will be carried out on the basis of the consent given by you in accordance with Article 6(1)(a) UK GDPR in reply to your request, or on the basis of Article 6(1)(b) UK GDPR for the implementation of pre-contractual measures, or on the basis of Article 6(1)(b) UK GDPR for the performance of a contract to which you are a party, or on the basis of Article 6(1)(f) UK GDPR to safeguard our legitimate interest in responding to requests and in implementing other measures related to the processing of enquiries.

Insofar as we provide a contact form and you contact us via this contact form, you give your consent by sending your message with the following content: "I consent to the processing of my e-mail address and the other personal data I have provided for the purpose of replying to my communication. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing carried out until the revocation shall remain unaffected in the event of revocation."

You can revoke your consent at any time and without giving reasons with effect for the future. For this purpose, a corresponding notification to the controller is sufficient, whose contact details can be found in the information provided to the controller.

Insofar as this is necessary for the processing of your request, we transmit your personal data to third parties within the scope of the legal requirements. In cases of the transfer of your personal data to third parties, the scope of the transmitted data is limited to the minimum required.

Your personal data will be deleted if your request has been clarified, unless we are allowed to continue to process the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this data protection declaration.

V.3 Fulfilment of contracts

If you provide us with personal data for the purpose of concluding a contract or in connection with the creation of a customer account, we process the data you provide for the execution of the contract.

This is your customer data (e.g. your name and address) and the contract data (e.g. information about the products in the contract as well as payment and delivery information). Your personal data will be processed on the basis of Article 6(1)(b) UK GDPR for the performance of a contract to which you are a party.

Insofar as this is necessary for the fulfilment of the contract with you, we transmit your personal data to third parties within the scope of the legal requirements. This transmission is made to the service providers involved in the execution of the contract, including providers of the processing tools we use, companies responsible for transport, and the payment service providers entrusted with payment matters.

Insofar as you use PayPal for the processing of payment transactions, we expressly point out that the PayPal data protection declaration applies to all PayPal transactions. For UK customers, the PayPal service is provided by PayPal (Europe) S.à r.l. et Cie, S.C.A.: https://www.paypal.com/.

In cases of the transfer of your personal data to third parties, the scope of the transmitted data is limited to the minimum required.

Your personal data will be deleted after the expiry of the applicable retention periods under the Companies Act 2006 and HMRC requirements (typically 6 or 10 years), unless we may continue to process the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this data protection declaration.

For your benefit, we may share your personal data with our affiliated company, Battery Dynamics Ltd, where this is necessary to better serve your needs or where your needs exceed the service level of this B2C transaction. Any such transfer is made on the basis of our legitimate interests pursuant to Article 6(1)(f) UK GDPR and in compliance with all applicable data protection laws. If you prefer not to have your information shared between our companies, please contact us at support@batterygroup.co.uk or call 01226 885050.

V.4 Advertising by newsletter and other emails

We may send cart abandonment emails to help you complete your purchase. When we collect your email address during the course of a sale, we have a legitimate interest to contact you and help you complete your purchase. Cart abandonment emails are considered a type of transactional communication which supports customers to complete their purchase. When a person places items in their basket, this shows they have an interest in purchasing from us. If we collect an email address in the process of a sale, we can rely on legitimate interest to send cart abandonment emails.

When you sign up for our newsletter, we process the email address you provide — and, if you also provide further personal data — to send you information about our offers by email. The only obligatory information is your e-mail address. If you voluntarily provide further personal data, we may process this data in order to address you personally in the newsletter.

When you sign up for our newsletter, you give your consent with the following content: "I agree to be informed by e-mail about interesting offers and therefore consent to the processing of my e-mail address and the other personal data I provide for the purpose of sending the newsletter. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing carried out until the revocation shall remain unaffected in the event of revocation."

The registration for our newsletter takes place in the so-called double opt-in procedure. After registration, you will first receive an e-mail with a notification of registration for the newsletter, together with a request for confirmation of the registration. Your confirmation of registration is required in order to document the required consent to the sending of the newsletter and to be able to recognise registrations on third-party e-mail addresses. In connection with registrations for the newsletter and the confirmations, the IP address as well as the date and time are logged in order to be able to prove the granting of consent in accordance with the legal requirements.

Your personal data will be processed on the basis of your consent in accordance with Article 6(1)(a) UK GDPR.

You can revoke your consent at any time and without giving reasons with effect for the future by contacting the controller or using the "Unsubscribe" link in any newsletter. If you withdraw your consent or unsubscribe from our newsletter, your e-mail address and any other data transmitted will be deleted, unless we may continue to process the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this data protection declaration.

We use Mailchimp as our newsletter software, operated by Intuit Inc., 2700 Coast Avenue, Mountain View, CA 94043, USA. Your data will be transmitted to Mailchimp. Mailchimp is prohibited from selling your data and using it for purposes other than sending newsletters. Transfers to the United States are safeguarded by the UK Extension to the EU-US Data Privacy Framework. Further information can be found here: https://mailchimp.com/legal/privacy/.

V.5 Advertising by letter mail

We process the personal data you provide — first and last name and address — for the sending of information about our offers by letter mail.

The processing of your personal data is carried out on the basis of Article 6(1)(f) UK GDPR in order to safeguard our legitimate interest in the implementation of advertising measures by letter mail.

You can object to the processing of your personal data for the purpose of carrying out advertising measures by letter mail at any time by notifying the controller using the contact details provided in the imprint.

V.6 Use of cookies

We use cookies on our website. These are small files that are stored on your device and through which certain information is transmitted to us. The use of cookies enables you to use certain functions and makes our offer more user-friendly overall.

Some of the cookies we use are deleted after the end of the browser session (so-called session cookies). Other cookies remain on your device after the browser session has ended and allow us or our partner companies to recognise you on your next visit (so-called persistent cookies).

Where cookies are strictly necessary for the operation of this website or for the performance of a contract, we rely on Regulation 6 of the Privacy and Electronic Communications Regulations (PECR) and Article 6(1)(b) UK GDPR. Where cookies are used for analytics, marketing, or other non-essential purposes, we rely on your consent in accordance with Regulation 6 PECR and Article 6(1)(a) UK GDPR, obtained through our Consent Management Platform.

You can prevent the storage of non-essential cookies by refusing consent via our Consent Management Platform, or by adjusting your browser settings. Please refer to your browser's help pages for guidance. Please note that disabling cookies may affect your ability to use certain features of our website. Further information on cookie management:

 

 

V.7 Use of Google Analytics (server-side)

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), on our website. The processing of your personal data is carried out on the basis of your consent in accordance with Article 6(1)(a) UK GDPR, which you can grant or refuse through our Consent Management Platform (CMP). You can withdraw your consent at any time with effect for the future.

Server-side data transmission

Unlike a conventional Google Analytics implementation, no measurement data is transmitted directly from your browser to Google servers. Instead, all Google Analytics traffic is first sent to our own server-side Google Tag Manager (sGTM) endpoint, operated on our behalf via Stape (see Section V.10). From there, the data is forwarded to Google in accordance with our configuration.

This server-side architecture allows us to:

  • Truncate IP addresses at our server-side endpoint before forwarding the request to Google, so that Google does not receive full IP addresses.
  • Filter and minimise the data fields sent to Google to those required for the analytics purpose.
  • Maintain full control over the data flow and apply our own consent and anonymisation logic before any data leaves our infrastructure.

Data processed

Where you have given consent, the following categories of data may be processed for analytics purposes: pseudonymous client identifiers, page URLs and titles, referrer, device and browser characteristics, screen resolution, language, country (derived from a truncated IP address), session and engagement information, and interaction events (such as page views, clicks, scrolls, and transactions).

Legal basis for cookies

The setting and reading of the _ga and _ga_<container-id> cookies in your browser is carried out on the basis of your consent in accordance with Regulation 6 of the Privacy and Electronic Communications Regulations (PECR). The subsequent processing of the data transmitted via these cookies is carried out on the basis of your consent in accordance with Article 6(1)(a) UK GDPR. Both consents are obtained jointly through our Consent Management Platform.

Purpose

The data is used on our behalf by Google to evaluate the use of our website, to compile reports on website activity, and to provide other services related to website activity and internet usage. The IP address transmitted within the scope of Google Analytics is truncated at our server-side endpoint before being received by Google and is not merged with other Google data identifying you.

International transfers

Google Ireland Limited may transfer data to Google LLC in the United States. Such transfers are safeguarded by the UK Extension to the EU-US Data Privacy Framework, in which Google LLC is a certified participant, and by the International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses where applicable.

Your choices

You can prevent the processing of your data by Google Analytics by refusing or withdrawing your consent at any time via our Consent Management Platform. Since data transmission is initiated server-side after consent verification, no further browser-based opt-out is required.

Further information: https://policies.google.com/privacy

 

 

V.8 Enforcement of our rights and defence against claims

We may process your personal data in order to safeguard our legitimate interest in the enforcement of our rights and in the defence against claims directed against us. In this case, your personal data will be processed on the basis of Article 6(1)(f) UK GDPR.

Insofar as this is necessary to safeguard our legitimate interest, we transmit your personal data to third parties within the scope of the legal requirements. This transmission is made to the participating providers of debt collection services or to our lawyers. In cases of the transfer of your personal data to third parties, the scope of the transmitted data is limited to the minimum required.

Your personal data will be deleted after the completion of the procedure, but at the earliest after the expiry of the applicable retention periods under the Companies Act 2006 and HMRC requirements (typically 6 or 10 years), unless we may continue to process the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this data protection declaration.

 

 

V.9 Google Tag Manager

We use Google Tag Manager on our website to manage the deployment of services.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose: Google Tag Manager allows us to manage website tags through a single interface without modifying the website's source code. The service itself does not store any personal data; it only controls the deployment of the configured services.

Data processed: The gtm.js file is loaded from the Stape CDN. Your IP address is masked in this process and is not transmitted to Google.

The processing of your personal data is carried out on the basis of Article 6(1)(f) UK GDPR in order to safeguard our legitimate interest in the technical management of the tags deployed on our website.

V.10 Stape (Server-side Google Tag Manager)

We use Stape for server-side tag management to enable a privacy-friendly collection of website analytics.

Provider: Stape Europe OÜ, Sepapaja 6, 15551 Tallinn, Estonia (EU).

Purpose: Server-side tag management and tracking to improve data quality while better protecting users' privacy.

Data processed: The gtm.js file is loaded from the Stape CDN. Your IP address is masked in the process and is not transmitted to Stape.

International transfers: Stape Europe OÜ is established in Estonia (European Economic Area). No transfer outside the EU/EEA takes place in connection with this service.

Further information: https://stape.io/privacy-notice

The processing of your personal data is carried out on the basis of Article 6(1)(f) UK GDPR in order to safeguard our legitimate interest in the privacy-friendly server-side processing of tracking data.

V.10.1 Use of the Stape CDN (Content Delivery Network)

We use the Stape CDN on our website to deliver Google Tag Manager (gtm.js). To protect your privacy, we have implemented specific technical measures:

  • The gtm.js file is not downloaded from Google servers, but from the Stape CDN.
  • When gtm.js is loaded, no personal data — and in particular no IP addresses — are transmitted to Stape. All client-side IP addresses are fully masked (set to 0.0.0.0) before any connection to Stape is established. Tracing or identifying you as an individual is therefore not possible.
  • It is not possible to link individual users to specific page views.

For this reason, no separate consent is required for the use of the Stape CDN itself.

V.10.2 Advanced Consent Mode and Cookieless Pings to Google

We use Google's Advanced Consent Mode to handle analytics and marketing data in a privacy-compliant way:

  • When you first visit our website, so-called "cookieless pings" are transmitted to Google.
  • We ensure that no unmasked personal data — and in particular no IP addresses — is sent to Google. All IP addresses are anonymised (set to 0.0.0.0) before transmission, so identification is not possible.
  • Personal data is only transmitted to Google after you have given your explicit consent through our Consent Management Platform (CMP).
  • Without your consent, Google does not carry out any personalised communication or profile building.

Summary:

  • Full anonymisation of all transmitted data is ensured by technical means.
  • Personalised services are only activated after your explicit consent via the consent tool.
  • Due to the complete anonymisation described above, the identification of individual persons is excluded. No further profiling or data processing takes place without your consent.

V.11 Enhanced Conversion Tracking with Google Ads

As part of the order process and to analyse transactions, we use Enhanced Conversion Tracking from Google Ads on our website. In doing so, personal data — in particular the email address you provide during an order or other actions on our website — is processed.

  • Processing takes place exclusively for the purpose of measuring and optimising our online offering.
  • The data collected is transmitted to Google Ads, operated by Google Ireland Limited.
  • This makes it possible to attribute clicks and completed transactions within the Google advertising network.

Pseudonymisation of the data

To protect your privacy, all personal data is technically secured before being transmitted to Google Ads:

  • Before transmission, the data is pseudonymised using the SHA-256 hashing algorithm.
  • Your data is converted into an encrypted string and transmitted to Google only in this form.
  • Google can only use this encrypted information to match clicks with completed transactions.
  • A direct identification of you as an individual by Google is therefore excluded.

International transfers: Google Ireland Limited may transfer data to Google LLC in the United States. Such transfers are safeguarded by the UK Extension to the EU-US Data Privacy Framework and by the International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses where applicable.

The processing of your personal data is carried out on the basis of your consent in accordance with Article 6(1)(a) UK GDPR and Regulation 6 of the Privacy and Electronic Communications Regulations (PECR). You can withdraw your consent at any time with effect for the future via our Consent Management Platform.

 

 

VI. Duration for which your personal data will be stored or criteria for determining this duration

Your personal data will be deleted if they are no longer needed for processing for the respective processing purpose, unless we are allowed to continue to process the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this data protection declaration.

Information on the duration for which your personal data will be stored or the criteria for determining this duration can be found in this privacy policy for the processing of your personal data for each processing purpose.

 

 

VII. Your rights

1. Overview

In order to ensure a fair and transparent processing of personal data, you as a data subject are entitled to the following rights in accordance with the UK GDPR and the Data Protection Act 2018:

  • The right of access under Article 15 UK GDPR
  • The right to rectification under Article 16 UK GDPR
  • The right to erasure under Article 17 UK GDPR
  • The right to restrict processing under Article 18 UK GDPR
  • The right to data portability under Article 20 UK GDPR
  • The right to withdraw consent given at any time in accordance with Article 7(3) UK GDPR
  • The right to object to processing under Article 21 UK GDPR, about which we inform you separately below
  • The right to complain to the supervisory authority under Article 77 UK GDPR, about which we inform you separately below

2. Your right to object to processing

Where we process your personal data on the basis of our legitimate interests pursuant to Article 6(1)(f) UK GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation. This also applies to profiling based on that provision.

If you exercise your right to object, we will cease processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defence of legal claims.

Where we process your personal data for direct marketing purposes, you have the right to object at any time to processing for such marketing purposes. If you object to processing for direct marketing, we will cease processing your personal data for those purposes.

3. Your right of complaint to the supervisory authority

As a data subject, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF; telephone: 0303 123 1113; website: https://ico.org.uk.

 

 

Our free newsletter informs you regularly by e-mail about new products and special promotions.

Your data entered here will only be used to personalise the newsletter and will not be passed on to third parties. You can unsubscribe from the newsletter at any time or withdraw your consent by e-mail to support@batterygroup.co.uk. Your data will be deleted within 3 months after the end of the newsletter subscription, provided that no statutory retention obligations conflict with the deletion.

If you wish to receive the newsletter, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and agree to receive the newsletter. We use the double opt-in procedure to ensure a transparent newsletter dispatch.

We use Mailchimp as our newsletter software, operated by Intuit Inc., 2700 Coast Avenue, Mountain View, CA 94043, USA. Your data will be transmitted to Mailchimp solely for the purpose of sending the newsletter. Mailchimp is prohibited from selling your data or using it for any other purpose. Transfers to the United States are safeguarded by the UK Extension to the EU-US Data Privacy Framework. Further information: https://mailchimp.com/legal/privacy/.

 

 

VIII. Information on the basis for the provision of your personal data

If you wish to enter into a contract with us or contact us with a request, the provision of your personal data is necessary for the conclusion of a contract or the processing of your request. You are not obligated to provide your personal data. However, failure to provide your personal data would mean that we are unable to enter into a contract with you or process your request.

 

 

Cookie Consent Manager CCM19

To control cookies and obtain the necessary consent, we use the Cookie Consent Manager CCM19 from Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany, on our website. This tool allows you to allow or deny cookies.

We use the consent management tool in order to fulfil our legal obligation to obtain, record and manage cookie consent in accordance with Article 7 UK GDPR and Regulation 6 of the Privacy and Electronic Communications Regulations (PECR). The processing of this data is necessary to be able to demonstrate that consent has been freely given, specific, informed and unambiguous.

Further information: https://www.ccm19.de/datenschutzerklaerung.html

Recently Viewed