Bill Harvey Associates Limited — Moiré Tell-Tales Customer Privacy Notice
Who we are
We are Bill Harvey Associates Limited (“BHAL”), a company registered in England and Wales under company number 04550257, with our registered address at Melrose House, Pynes Hill, Rydon Lane, Exeter, Devon EX2 5AZ. We are registered with the Information Commissioner’s Office under registration number ZA307224.
Moiré Tell-Tales is a product line operated by BHAL. When you purchase a Tell-Tale from us, BHAL is the data controller — the company responsible for, and in control of, the processing of any personal data provided to us in connection with your order.
If you have any questions about this notice or how we handle your personal data, please contact us at privacy@billharveyassociates.com or +44 330 912 4742.
What personal data we collect
When you place an order with us, we collect the information needed to process and fulfil that order. Depending on how you order, this may include:
- Your name — to address correspondence and for the invoice.
- Email address — to send an order confirmation, invoice, and any shipping updates.
- Delivery address — to dispatch your Tell-Tales.
- Billing address — where this differs from the delivery address.
- Organisation name — for B2B orders and invoices.
- Phone number — where provided, for delivery or order queries.
- Order details — quantities, product references, pricing, invoice number, shipping details.
- VAT number — for B2B EU orders, where applicable.
We do not collect payment card details. Payment is handled directly by PayPal or Stripe — see the section below on third parties.
Why we collect it and the legal basis
We collect and use your personal data:
- To fulfil your order — preparing and dispatching goods, issuing invoices, and handling any queries or returns. Lawful basis: contract performance (Article 6(1)(b) UK GDPR) — this processing is necessary to carry out the sale you have entered into.
- To comply with legal obligations — we are required by HMRC to keep records of sales and invoices for tax purposes. Lawful basis: legal obligation (Article 6(1)(c) UK GDPR).
We do not use your data for marketing without your separate consent. We do not profile, score, or make automated decisions about you.
How long we keep your data
We retain order and invoice records for at least 6 years from the end of the financial year in which the sale was made, in line with HMRC record-keeping requirements.
Invoice records held in our accounting system form part of our accounting archive and cannot be individually deleted — they are retained for the life of our accounting system account. Order tracking records (which we use to manage your order through despatch) are retained for 1 year from despatch, to allow time for delivery issues or defects to come to light, and then deleted. Email correspondence relating to your order is retained in line with our general 6-year email retention policy.
Where you have corresponded with us about a technical matter or an ongoing relationship, we may retain that correspondence for longer if it is relevant to a professional matter — for example if you have used our gauges as part of a structural monitoring programme. In that case, we retain it under legitimate interests (professional record-keeping), and we will not retain more than is necessary.
Who we share your data with
We share your data only as necessary to fulfil your order or meet legal obligations. The third parties we use are:
| Third party | Purpose | Location | Transfer basis |
|---|---|---|---|
| PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.) | Payment processing for online orders. PayPal acts as an independent data controller for payment data — their privacy notice governs how they handle card data. | Luxembourg (EU) | No transfer — EU-based |
| Stripe (Stripe Payments Europe, Limited) | Payment processing for invoice payments. Stripe acts as an independent data controller for payment data. | Ireland (EU) | No transfer — EU-based |
| Finite International Logistics Limited | Order fulfilment — we provide your name, delivery address, phone number (if you have given us one), and order details to our fulfilment provider, who picks, packs, and despatches your order. They pass your name, delivery address and phone number to the carrier (Royal Mail, Parcelforce, UPS, or another carrier as appropriate) as necessary for delivery. | United Kingdom | No transfer |
| Xero (Xero Limited) | Invoicing and accounting software. Order and invoice details (name, address, amounts) are stored in Xero. | EU (Xero UK data region) | No transfer — EU-hosted |
| Make.com (Celonis SE) | Automation middleware — transfers order data from PayPal into our invoicing and order tracking systems. Personal data is in transit only and not persistently stored. | EU (Germany) | No transfer — EU-hosted |
| Process Street (Process Street, Inc.) | Order management — we record order details in a Process Street workflow to manage fulfilment and correspondence. A Data Processing Agreement is in place. | United States | 2021 EU SCCs (Module 2) + UK Addendum |
| Google Workspace (Google LLC) | Fulfilment instructions and order records may be stored in Google Drive. Email correspondence is stored in Gmail. | United States | UK Extension to EU-U.S. DPF (Active); SCCs fallback |
| Streets Bush (accountant) | Our accountants manage our accounting system and can access invoice and order records held within it as part of providing accounting and tax services. | United Kingdom | No transfer |
We do not sell your personal data.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Erase your data — subject to our legal obligation to retain financial records for HMRC purposes.
- Restrict the processing of your data in certain circumstances.
- Object to processing based on legitimate interests.
- Data portability — to receive a copy of data you provided to us in a structured, machine-readable format.
To exercise any of these rights, please contact us at privacy@billharveyassociates.com. We will respond within one calendar month.
If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, or by telephone on 0303 123 1113.
Changes to this notice
We may update this notice from time to time. The current version will always be available at moiretelltales.com/privacy-customers. We will notify you of material changes where we have your email address.
Last updated: 2026-04-30
This version published: 2026-04-30 (source commit 86645dc7958cd514260ca701e4cbe12f48fe5618)