Privacy policy
Last updated: October 2026
Certus Hearing (“we”, “us”, “our”) operates certushearing.com. We respect your privacy and protect your personal data. This policy explains what we collect, how we use it, and your rights.
1. Information we collect
Information you give us
- Order information: name, email address, phone number, billing address, shipping address and the products you bought. Payment details are handled by our payment provider, Whop. We never see or store your full card number.
- Messages: anything you send us through the contact form or by email.
- Return and support information: return reasons, troubleshooting details, photos or videos, return tracking numbers and proof of postage you give us so we can assess a return, a fault, a suitability concern or a postage reimbursement.
- Reviews: reviews and comments you send us.
Information collected automatically
- Device and browser information: IP address, browser type and version, operating system, device type and screen size.
- Usage information: pages visited, time on pages, the website that referred you, clicks and navigation.
- Cookies and similar technologies: see section 6.
2. How we use your information
- To process and deliver your orders, including payment, dispatch and delivery.
- To send you order confirmations, delivery updates and answers to your messages.
- To assess returns, troubleshoot product issues, prevent return abuse, and process approved refunds and guarantee claims.
- To send marketing emails, only if you signed up. You can unsubscribe at any time.
- To improve our website, products and customer experience.
- To detect and prevent fraud or unauthorised activity.
- To comply with legal obligations.
3. Legal basis for processing
Under the UK GDPR and the Data Protection Act 2018, we process your personal data on these lawful bases:
- Contract: to fulfil your order and provide our services.
- Consent: for marketing emails. You can withdraw consent at any time.
- Legitimate interests: for fraud prevention, website analytics, advertising measurement and improving our services.
- Legal obligation: where the law requires us to keep records.
4. Who we share it with
We share information only with the companies it takes to run the store, and each receives only what it needs:
- Whop: our payment provider, which processes your payment securely.
- Delivery carriers: to deliver your order (name, address and contact details for delivery updates).
- Email service provider: to send order emails and, if you signed up, marketing emails.
- Hosting and tracking services: to run the website and show your delivery progress on our tracking page.
- Analytics providers: such as Google Analytics, to understand how the website is used.
- Advertising partners: Google (Google Ads) and Meta (Facebook and Instagram), to measure and deliver our advertising.
- Legal authorities: if the law requires it.
5. How long we keep it
- Order records are kept for 6 years after your order, for legal and accounting purposes and to support your guarantee.
- Return and support records are kept as long as reasonably needed to handle the return or guarantee, resolve disputes and meet legal obligations.
- Marketing records are kept until you unsubscribe.
- Analytics data is kept in aggregated form by the services that collect it.
- If you ask us to delete your data, we do so within 30 days, except where the law requires us to keep it.
6. Cookies and tracking technologies
Our website uses cookies and similar technologies:
- Essential cookies: keep your cart, remember your store and run the secure checkout. The site cannot work without them.
- Analytics (Google Analytics): help us understand how visitors find and use the website, so we can improve it.
- Advertising (Google Ads, Meta Pixel): measure how our adverts perform and help show relevant adverts on those platforms.
You can block or delete cookies in your browser settings, and you can turn off personalised advertising in your Google and Meta ad settings. Blocking essential cookies stops the cart and checkout from working.
7. Your rights
Under UK data protection law you have the right to:
- Access: ask for a copy of the personal data we hold about you.
- Correction: ask us to correct inaccurate or incomplete data.
- Deletion: ask us to delete your data, subject to legal retention requirements.
- Restriction: ask us to limit how we use your data.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests, or to direct marketing.
- Withdraw consent: for marketing emails, at any time.
To use any of these rights, email us at [email protected]. We reply within 30 days.
8. Marketing emails
- We only send you marketing emails if you signed up, for example through our newsletter form.
- Every marketing email has an unsubscribe link. One click stops them.
- Unsubscribing does not stop the emails you need about your order.
9. Data security
- Our website is secured with TLS encryption.
- Payments are processed by Whop, which is PCI DSS compliant. We never see or store your full card number.
- Access to personal data is limited to the people who need it to help you.
- We take reasonable steps to protect your data, but no method of sending data over the internet is completely secure.
10. Third-party links
Our website may link to other websites, such as Trustpilot. We are not responsible for their privacy practices. Please read their privacy policies before giving them personal information.
11. Children
Our website is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.
12. International transfers
Some of our service providers process data outside the United Kingdom, for example in the United States. Where data leaves the United Kingdom, we rely on safeguards recognised by UK law, such as adequacy regulations or the International Data Transfer Addendum.
13. Changes to this policy
We may update this policy from time to time. The new version is posted on this page with a new “Last updated” date. We tell you by email about important changes where we can.
14. Complaints
If you are unhappy with how we handle your data, email us first at [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk.