Last updated 1 October 2026
Who we are
Just Fireworks Bradford Limited is responsible for the personal information collected through this website (in data protection terms, we're the "controller").
Our registered address is 492 Thornton Road Bradford BD8 9BS.
If you have any questions about your information, email info@just-fireworks.co.uk.
What we collect
When you place an order
- Your name, email address and phone number.
- Your delivery address and any delivery notes, if you choose delivery.
- What you ordered, how you chose to pay and whether payment has been made.
- Your confirmation that you're 18 or over, and a record that we checked your photo ID when we handed the order over. We don't take or keep a copy of your ID.
When you pay by card
You enter your card details on Worldpay's secure payment page, not on our website. Worldpay tells us whether the payment succeeded; we never see or store your full card number.
When you contact us
If you use our contact form we receive your name, email address, any phone number or order number you give us, and your message. It's sent to our inbox rather than stored on the website.
When you browse
Like most websites, our servers record basic technical information such as your IP address and browser type. We use it to keep the site secure and to stop abuse, such as automated orders.
How we use it
| What we use it for | Our legal reason |
|---|---|
| Processing, delivering and supporting your order, and emailing you about it (confirmation, ready to collect, out for delivery, invoices and refunds) | To carry out our contract with you |
| Checking you're old enough to buy fireworks and keeping a record that we did | Legal obligation |
| Keeping accounts and tax records | Legal obligation |
| Answering your questions and complaints | Our legitimate interest in looking after our customers |
| Protecting the website and our customers from fraud and misuse | Our legitimate interest in running a safe, secure shop |
We don't send marketing emails, we don't use your information to make automated decisions about you, and we never sell it.
Who we share it with
We only share what each of these needs to do its job:
- Worldpay, our card payment provider, to take card payments.
- Our delivery driver — your name, phone number, delivery address, delivery notes, what you ordered and any amount to pay on delivery, so they can deliver to you. We may send these details to the driver using WhatsApp, which is end-to-end encrypted.
- Our email provider, which sends our order emails on our behalf.
- Our website hosting provider, which stores the website and its data on our behalf.
- postcodes.io — when you enter a delivery postcode, we send just that postcode to this service to work out how far it is from our store. No other details are sent.
- YouTube — product videos only load from YouTube, in its privacy-enhanced mode, when you press play.
- The authorities, such as the police, Trading Standards or HMRC, where the law requires us to.
Where any of these providers handle information outside the UK, we make sure it's protected by safeguards approved under UK data protection law.
Cookies
We only use cookies that the website needs to work, so we don't ask for your consent to use them. We don't use analytics, advertising or tracking cookies.
| Cookie | What it's for | How long it lasts |
|---|---|---|
| just-fireworks-session | Remembers your basket and where you are in checkout | 120 minutes after your last visit |
| XSRF-TOKEN | Protects our forms from being submitted by other websites | 120 minutes |
| age_confirmed | Remembers that you confirmed you're 18 or over, so we don't ask on every visit | 1 year |
If you press play on a product video, YouTube may set its own cookies. You can block or delete cookies in your browser settings, but the basket and checkout won't work without them.
How long we keep it
- Orders and invoices — six years after the order, because tax law requires us to keep these records.
- Age and ID check records — for as long as we keep the order they relate to.
- Emails and messages — for as long as we need them to deal with your enquiry, and no longer than two years.
- Technical logs — for a short period, for security.
Your rights
You have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct anything that's wrong;
- ask us to delete your information, unless we have to keep it by law (for example, order and tax records);
- object to, or ask us to restrict, how we use it; and
- ask for your information in a format you can take elsewhere.
To use any of these rights, email info@just-fireworks.co.uk. We'll reply within one month. We may ask you to confirm your identity first.
If you're unhappy with how we've handled your information, please tell us first so we can try to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk.
Keeping it safe
Our website uses an encrypted (HTTPS) connection, card details are handled entirely by Worldpay, and only authorised staff can access customer and order information.
Changes to this policy
If we change how we use your information, we'll update this page and the date at the top.