Privacy policy

Personal data refers to any information that can identify a
person directly or indirectly, such as name, address, email address, phone number, credit/debit card number, IP address, location data, and purchase history (“Personal Data”).

We collect, store, and process your Personal Data in accordance with this Policy. This includes your name, postal address (for billing and delivery), email address, phone number, IP address, location data, and any other Personal Data collected during registration, purchases, or surveys. Credit or debit card details are processed securely via the Sagepay ‘token’ system and are not visible to us.

Mandatory fields in forms, including electronic forms, are marked with asterisks. Failing to provide data in these fields may prevent access to certain services.

We will take reasonable steps to ensure that the Personal Data we store is accurate, complete, and up-to-date.

We process your Personal Data for various purposes, including:

• Creating and managing your customer account.
• Fulfilling our contract with you as a customer.
• Personalizing our goods and services, such as making suggestions based on your previous searches and processing location data where legally permitted.
• Handling orders, inquiries, and requests for goods or services.
• Processing payments for goods or services.
• Enabling suppliers and service providers to perform functions on our behalf.
• Resolving returns, refunds, or disputes.
• Conducting market research and sending personalized marketing communications, with your consent.
• Delivering personalized advertising based on your interests
  and past activities on our website.
• Ensuring account and business security, including fraud detection and prevention.
• Developing and improving products and services.
• Administering our business, including staff training,
  audits, and asset transfers.
• Complying with legal obligations and responding to legal requests.
• We rely on various legal grounds to process your Personal
  Data, including:
• Your consent for specific processing activities, such as
  marketing.
• Our legitimate business interests, such as fraud prevention.
• Compliance with legal obligations, such as responding to
  complaints.
• Necessity for contract performance, if you are a customer.

The internet is inherently insecure, but we have implemented security measures to protect your data. Card details are encrypted during transmission using secure server software (SSL). Your user account is protected by a username and password, which should remain confidential.

Internet communications, including emails, may not be secure unless encrypted and may route through multiple countries. We are not
responsible for unauthorized access or data loss beyond our control.

We have policies, rules, and technical measures in place to
safeguard your Personal Data from unauthorized access, misuse, disclosure, modification, destruction, or accidental loss.

We may disclose your Personal Data to third parties in accordance with applicable law and for the purposes outlined above. This includes:

• Employees, affiliates, and group companies.
• Service providers and suppliers who assist with our Website and business operations, provided they maintain confidentiality.
• Advertising partners for personalized ads.
• Marketing partners, with your consent, for promotional communications.
• Service providers and consultants for business security and continuity.
• Entities involved in business transactions, such as mergers or sales.
• Public authorities or third parties as required by law.
• Any other third party with your consent.

We may transfer your Personal Data to countries outside its original location for processing in accordance with the purposes described above. We ensure that appropriate measures are in place to protect your privacy rights. Contact our Privacy Officer for details on these safeguards.

We will retain your Personal Data for up to fifteen years after your last use or purchase, unless a longer retention period is required by law or for legitimate purposes. Data no longer needed will be reviewed and deleted.

Anonymized Personal Data may be kept indefinitely for statistical purposes if we have a legitimate interest.

You have several rights under data protection law, including the rights to access, rectify, erase, restrict, transport, and object to the processing of your Personal Data. You also have the right to lodge a complaint with the relevant data protection authority.

You can request copies of your Personal Data by contacting the Privacy Officer. You may need to provide proof of identity and a fee.

You can request corrections to any inaccurate or incomplete Personal Data.

You may withdraw consent for processing based on consent at
any time, though this will not affect the legality of processing prior to
withdrawal. This may affect your access to certain services.

You can request that we stop processing your Personal Data.

You may request deletion of your Personal Data, subject to legal obligations or legitimate grounds for retention.

In some cases, you have the right to obtain restriction of
the processing of your Personal Data.

You may request your Personal Data in a structured, commonly
used format for transfer to another controller, applicable to automated
processing based on consent or contract.

If you have any concerns or complaints about our data
processing, you can contact us directly or reach out to the relevant
supervisory authority. For the Information Commissioner’s Office in the UK,
visit the ICO website for instructions.

As our business evolves, we may need to update how we collect and handle your Personal Data. Any changes will be reflected in a new version of this Privacy Policy posted on our website. We advise you to review this Privacy Policy periodically. Unless specified otherwise, the current Privacy Policy governs all Personal Data we hold about you. By continuing to use our website or in-store services, you agree to the Privacy Policy in effect at the time of your use. We recommend checking this page for updates periodically.