Pedal & Circuit

Privacy Policy

Last updated: 7 May 2026

This Privacy Policy explains how Pedal & Circuit ("we", "us" or "our") collects, uses, discloses and protects your personal data when you visit our website, contact us about custom pedals, repairs or modifications, place an order, or otherwise interact with us. We are committed to handling your information in a way that is transparent, secure, and consistent with our obligations under applicable data protection laws in the United Kingdom, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are and how to contact us

Pedal & Circuit is a guitar pedal and electronics workshop based in Cardiff, United Kingdom. We design and build custom pedals, carry out repairs and modifications, and provide related audio services.

For the purposes of data protection law, we are the "data controller" of the personal data described in this Privacy Policy. This means we decide how and why your personal data is used.

2. Personal data we collect

The information we collect will depend on how you interact with us. We aim to keep data collection to what is genuinely necessary for running our workshop, handling enquiries, and improving our website.

2.1 Information you provide to us directly

You may provide us with personal data when you:

• Contact us by email, phone or through a contact form on the website
• Request a quote for a custom pedal, repair or modification
• Place an order or agree a service booking with us
• Sign up to receive updates, tone notes or studio stories
• Send us feedback, reviews or other correspondence

This information may include:

• Name and contact details (for example your email address and phone number)
• Postal or billing address details where relevant to orders or returns
• Details about your instrument, existing pedalboard and technical requirements
• Preferential information such as musical style, usage context or tone goals
• Order history, communication history and any other information you choose to provide

2.2 Information we collect automatically

When you visit our website, certain information may be collected automatically from your device. This typically includes:

• Technical information such as your IP address, browser type and version, and device type
• Approximate location based on your IP address (for example, city or region)
• Pages visited, time spent on pages, navigation paths and other usage information
• Referring URLs, search terms and timestamps for visits

We use this information primarily for website analytics and to help us understand which content, services and products are most relevant to visitors.

2.3 Cookies and similar technologies

Our website may use cookies or similar technologies to operate effectively, remember your preferences and measure performance. Where required by law, we will ask for your consent before placing non-essential cookies on your device. You can adjust your browser settings to refuse or delete cookies, although this may impact the way some parts of the site function.

3. How and why we use your personal data

We will only use your personal data where we have a lawful basis to do so under data protection law. Depending on the circumstances, we rely on the following legal bases: performance of a contract, legitimate interests, consent, and compliance with legal obligations.

3.1 Providing our products and services

We use your information to design, build and deliver custom pedals, carry out repairs and modifications, and provide other services that you request. This includes:

• Responding to enquiries and requests for quotes
• Preparing and sending order confirmations and invoices
• Arranging delivery, collection or shipping of equipment
• Communicating about the progress of work and any technical decisions

Our legal basis for this use is usually that it is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

3.2 Customer support and workshop records

We may retain details of your instruments, pedalboard layouts, modifications and service history so that we can:

• Provide aftercare, troubleshooting and warranty support
• Offer informed advice about future upgrades or builds
• Maintain internal records about component choices, bias settings and design notes

Our legal basis for this use is our legitimate interest in running an efficient workshop and providing good ongoing customer service, balanced against your rights and expectations.

3.3 Communications and marketing

With your consent, we may use your contact details to send you occasional updates, studio stories, tone notes, special offers or information about new builds and services that we think may be of interest to you. You can opt out of such communications at any time by following the unsubscribe instructions in the message or by contacting us directly.

Where we rely on consent, you are free to withdraw it at any time, and doing so will not affect the lawfulness of any processing that took place before your withdrawal.

3.4 Website analytics and improvement

We use analytics tools and server logs to understand how our website is used, which pages are most visited, which enquiries are most common, and where issues or broken links may exist. This helps us to:

• Improve navigation and content
• Plan new features, guides or services that match demand
• Detect and protect against misuse or security incidents

Our legal basis for this processing is our legitimate interest in maintaining and improving our website and services while ensuring that any impact on your privacy is limited and proportionate.

3.5 Legal and regulatory obligations

We may need to use and retain your information where it is necessary to comply with legal or regulatory obligations (for example, tax and accounting requirements) or to establish, exercise or defend legal claims.

4. Sharing your information

We do not sell your personal data and we only share it where this is necessary for the purposes described in this Privacy Policy or where we are legally required to do so.

4.1 Service providers and partners

We may share your personal data with trusted third parties who help us operate our business, such as:

• Couriers and postal services for shipping pedals, components and repaired equipment
• Payment and invoicing providers to process transactions
• IT and web hosting providers who support our website and email systems
• Analytics and performance tools that help us understand how our website is used

These service providers are only allowed to use your personal data in accordance with our instructions and must handle it securely and in line with data protection law.

4.2 Legal requirements and safety

We may disclose your information where we reasonably believe it is necessary to comply with a legal or regulatory obligation, to respond to a lawful request from authorities, or to protect the rights, property or safety of us, our customers or others.

4.3 International transfers

Some of our service providers may be located outside the United Kingdom or may store data on servers in other countries. Where this results in a transfer of your personal data outside the UK, we will ensure that appropriate safeguards are in place, such as using service providers based in countries that the UK has recognised as providing an adequate level of data protection, or by entering into contracts that contain approved data protection clauses.

5. How long we keep your information

We will only keep your personal data for as long as it is reasonably necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements.

The exact retention period will depend on the nature of the information and the context in which it was provided, but in general:

• Contact and enquiry details are typically retained for up to 2 years after our last interaction, to help us respond to follow-up questions and provide continuity if you return with a new project.
• Order and transaction records (including associated personal data) are kept for at least 6 years to comply with tax and accounting obligations and to support warranty and aftercare.
• Workshop notes relating to builds and modifications may be kept for longer where they are necessary for ongoing support, safety, or to reference previous designs and component choices.
• Where we rely on your consent for marketing communications, we will keep your contact details for this purpose until you withdraw consent or we decide to close our mailing list.

When we no longer need personal data, we will either delete it or anonymise it so that it can no longer be used to identify you.

6. How we protect your information

We take the security of your personal data seriously and use a combination of technical and organisational measures to protect it from unauthorised access, accidental loss, alteration or disclosure.

These measures may include access controls, secure passwords and authentication practices, encryption in transit where appropriate, regular software updates, and limiting access to your personal data to those people who have a genuine business need to know it. While no system can be completely secure, we work to keep risks proportionate and under regular review.

If we become aware of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and any relevant regulator where we are legally required to do so.

7. Your rights

Under UK data protection law you have a number of rights in relation to your personal data. These rights are subject to certain conditions and exceptions, and we may need to verify your identity before acting on a request.

• Right of access – you can ask for confirmation of whether we hold personal data about you and request a copy of that data.
• Right to rectification – you can ask us to correct any inaccurate or incomplete personal data that we hold about you.
• Right to erasure – in certain circumstances you can ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it.
• Right to restriction – you can ask us to limit the way we use your data in certain situations, such as while we are considering a request to rectify or erase it.
• Right to data portability – in some cases you can ask us to provide your personal data in a structured, commonly used and machine-readable format and to transmit it to another organisation where this is technically feasible.
• Right to object – you can object to our processing of your personal data where we are relying on legitimate interests as our legal basis. We will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or where processing is required for legal claims.
• Rights in relation to automated decision-making – you have the right not to be subject to a decision based solely on automated processing that significantly affects you. We do not currently carry out such automated decision-making.

Where we rely on your consent to process personal data, you also have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.

To exercise any of these rights, please contact us using the details set out in section 1 above. We will aim to respond to your request within one month, or within any extended period permitted by law where the request is complex or numerous.

8. Complaints and your right to contact the ICO

If you have concerns about how we handle your personal data, we would encourage you to contact us first so that we can try to resolve the issue. You can do this using the contact details in section 1.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. You can find details on how to do this on the ICO's website at https://ico.org.uk or by contacting them directly.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in how we use your personal data, changes in our services, or changes in law. When we make significant updates we will revise the "Last updated" date at the top of this page, and we may take additional steps to notify you where appropriate (for example, by email or by displaying a notice on our website).

We encourage you to review this page from time to time to stay informed about how we handle your personal data.