Privacy Policy

Last updated: 6 October 2026

This privacy policy explains how Total Pyro Ltd, trading as Total Fireworks (“we”, “us”, “our”), collects and uses your personal information when you visit total-fireworks.co.uk, place an order, collect an order or contact us. We are committed to protecting your privacy and handling your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Total Pyro Ltd t/a Total Fireworks is the data controller for the personal information described in this policy.
Registered office: 13 Lower Icknield Way, Great Kimble, Aylesbury, Buckinghamshire, HP17 9TU
Company number: 06008632 (registered in England and Wales)
Email: tsallis@total-fireworks.co.uk
Phone: 01844 867070

The information we collect

  • Order details: your name, billing and delivery address, email address, phone number, the products you buy, your chosen delivery or collection option and date, and any notes you add to your order.
  • Age confirmation: your confirmation that you are aged 18 or over, which we are legally required to check before selling fireworks.
  • Payment information: payments are processed securely by SumUp and PayPal. We do not see or store your full card details.
  • Account details: if you create an account, your login details and order history.
  • Messages: anything you send us through our contact form, by email or by phone.
  • Newsletter: your email address, if you sign up to hear about offers and promotions.
  • Technical information: your IP address, browser and device type, and how you use our website, collected through cookies and our security software.

How and why we use your information

  • To process, deliver or prepare your order for collection, and to contact you about it (for example, to arrange a delivery slot). Legal basis: performance of a contract.
  • To check that customers are aged 18 or over and to keep records of fireworks sales. Legal basis: legal obligation.
  • To keep financial and tax records. Legal basis: legal obligation.
  • To answer your questions and provide customer service. Legal basis: legitimate interests.
  • To keep our website secure and prevent fraud. Legal basis: legitimate interests.
  • To send you our newsletter and offers, only if you have asked us to. You can unsubscribe at any time. Legal basis: consent.
  • To understand how our website is used and improve it, using analytics cookies only where you have agreed to them. Legal basis: consent.

Who we share your information with

We never sell your personal information. We only share it with trusted organisations that help us run our business, and only as much as they need:

  • Payment providers: SumUp and PayPal, to take payment for your order.
  • Our website hosting, security and email providers, to run the website and send order emails.
  • Google, for product listings, reviews and (if you consent) website analytics and advertising.
  • Our own delivery drivers, who receive your name, address and phone number to deliver your order.
  • Professional advisers such as our accountants, and authorities such as HMRC, Trading Standards or the police where the law requires it.

Some of these providers may process data outside the UK. Where they do, they use approved safeguards such as UK adequacy regulations or standard contractual clauses.

Cookies

Our website uses cookies. Essential cookies make the site and basket work; other cookies (such as analytics) are only used if you agree to them in our cookie banner. You can change your choices at any time. See our Cookie Policy for full details.

Our website chat assistant

Our website has an AI chat assistant that can answer questions about our products, offers, delivery and our retail shop in Chesham. It is powered by Claude, an AI service provided by Anthropic, a company based in the United States.

What happens to your messages. When you type a question into the chat, we send your message, and the earlier messages in that conversation, to Anthropic so that it can write a reply. Please don’t include personal details such as your name, address, phone number or any payment details in the chat. The assistant doesn’t need them. Under Anthropic’s commercial terms, messages sent through its service are not used to train its AI models, and Anthropic deletes them from its systems within 30 days (longer only where the law requires it, or where needed to enforce its usage policy). Because Anthropic is based in the United States, your messages may be processed outside the UK, under the data protection terms Anthropic provides to businesses.

What we keep. We do not save your chat conversations on our website. Your conversation stays in your own browser for the length of your visit so you can carry on where you left off, and it is cleared when you close the tab. The chat uses your browser’s session storage for this, and to remember whether you have closed the chat pop-up. To prevent misuse and control costs, we briefly keep a scrambled (hashed) version of your IP address, for up to 10 minutes, to count how many messages are sent, along with a daily total of messages.

Baskets. If the assistant prepares a basket for you, it only adds products to your normal shopping basket on our website. Nothing is bought until you check out and pay through our usual checkout.

WhatsApp. If the assistant can’t help, it offers a button to message us on WhatsApp. If you use it, WhatsApp opens with your last question already typed. Nothing is sent until you press send in WhatsApp. If you do, we will see your phone number and message, and WhatsApp’s own privacy policy also applies.

Why we do this. We use the chat to help customers get quick answers and choose products, which is in our legitimate interests as a business.

Questions or requests. Contact us at tsallis@total-fireworks.co.uk.

How long we keep your information

  • Order and financial records: 6 years after the end of the financial year, as required by law.
  • Account details: until you ask us to close your account.
  • Newsletter details: until you unsubscribe.
  • Messages and enquiries: up to 2 years, unless they relate to an order.

Your rights

You have the right to:

  • ask for a copy of the personal information we hold about you;
  • ask us to correct information that is wrong or incomplete;
  • ask us to delete your information, where we are not legally required to keep it;
  • object to, or ask us to limit, how we use your information;
  • ask us to transfer your information to another organisation;
  • withdraw your consent at any time, for example by unsubscribing from our newsletter.

To use any of these rights, email tsallis@total-fireworks.co.uk or call 01844 867070. We will respond within one month.

Keeping your information safe

Our website uses a secure (HTTPS) connection, and we use security software and access controls to protect your information. Payments are handled by SumUp and PayPal, who meet strict industry security standards.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.