Privacy Notice

Last updated: 3 September 2025

This Privacy Notice explains how Experia (“we”, “us”, “our”) collects, uses, shares and protects personal data when you visit www.experia.co.uk or interact with us. It also explains your rights under UK data protection law. This notice is designed to meet the requirements of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where relevant, the Privacy and Electronic Communications Regulations (PECR).

• Controller: Experia (trading name of Blazebrite Ltd).
• Registered/trading address: Acorn Phase 3 High Street, Grimethorpe, Barnsley, England, S72 7BD.
• Company number: 05415718.
• Email: info@experia.co.uk | Phone: 0800 612 6077
• Data protection contact: privacy@experia.co.uk

• Identity & contact: name, job title, organisation, email, phone, postal address.
• Account & order: login details, purchases, delivery info, service interactions.
• Marketing preferences: newsletter subscriptions, consent and opt-out records.
• Communications: enquiries, support requests, feedback.
• Device & usage: IP address, device identifiers, browser type, pages viewed, time on page (via cookies—see Cookie Policy).
• Payment: billing details and transaction references. (We don’t store full card numbers; payments are handled by our provider.)

• Directly from you: forms, checkout, account registration, events, email/phone.
• Automatically: cookies, pixels, analytics, server logs (see Cookie Policy).
• From third parties: payment processors, delivery partners, analytics/ads partners, consent-management platform (CMP).

• Provide products/services & manage your account — contract.
• Customer support & enquiries — contract/legitimate interests.
• Service messages (order updates/policy changes) — legal obligation/contract.
• Marketing communications — consent (or legitimate interests; soft opt-in for existing customers under PECR). Opt out anytime.
• Analytics & site improvement — consent via the cookie banner (non-essential cookies off until you consent).
• Security, fraud prevention, enforcement — legitimate interests/legal obligation.
• Legal compliance & regulatory requests — legal obligation.

Our website and services are not intended for children under 13. We do not knowingly collect data from children via the site.

We share personal data where necessary with trusted recipients:

• Service providers: hosting, IT, payment processing, couriers, email/CRM, analytics, advertising, CMP.
• Professional advisers & insurers; regulators/authorities as required by law.
• Corporate changes: reorganisation, merger, acquisition or sale (we will notify you of material changes).

If we transfer personal data outside the UK, we use lawful safeguards (e.g., UK IDTA, UK-addended SCCs, or an adequacy decision) and conduct transfer risk assessments where appropriate.

We keep data only as long as needed for the purposes above and to meet legal/tax requirements. Typical periods:

• Accounts & orders: up to 6 years after last transaction/activity.
• Marketing contacts: until you opt out, withdraw consent, or after ~24 months of inactivity (whichever is sooner).
• Logs/analytics: per our Cookie Policy and tool settings.

You can: access your data; correct inaccuracies; erase data (in some cases); object or restrict processing (including marketing); port your data; withdraw consent (where relied upon). You can complain to the ICO (ico.org.uk | 0303 123 1113).

Contact us using the details above. We may need to verify your identity before responding.

See our Cookie Policy for details of cookies we use and how to manage your choices.

We do not carry out automated decision-making producing legal or similarly significant effects.

We may update this notice from time to time. We’ll post the latest version here and update the “Last updated” date.