Browsing, added items to basket, started but not completed checkout
We use a temporary cookie to remember who you are as you browse around the site and add items to the basket. We store your IP address in an encrypted form that we cannot decrypt. We store the items in your basket. If you start checkout we store the personal information you enter.
All this information is kept in a separate part of the system that we cannot readily access and is automatically deleted after 6 hours. The information is kept for this period to allow you to return to the website later to complete your order.
If you choose to block our cookies in your web browser, you will not be able to order online.
We store all the information you entered on our website during the checkout process, along with your IP address. We do not store your credit/debit card details as these are entered on Stripe’s payment processing system which is detailed in the third parties section below.
If you contact us about your order, we may also store brief notes with your order regarding the outcome of this communication, to allow us to allow us to action whatever is agreed.
If you do not create an account, all this information is stored for three years then deleted automatically. This allows ample time for any queries, returns or repeat orders etc. It is also long enough to allow us to monitor trends in sales etc.
If you create an account, all this information is stored indefinitely. This will allow you to log into your account and check all previous orders and other details whenever you want.
If you opt in to receiving our promotional emails or join our Loyalty Programme, we will use your email address and other details to send you promotional emails and/or Loyalty Programme statement emails. You may opt out of these by clicking the links contained in the emails, by replying to one of the emails with “unsubscribe” as the subject, or by logging into your account and changing the relevant options. If you have any difficulty unsubscribing, please contact us by email and we will take care of this for you.
If you email us about your order, account or any other matter, we will retain this email correspondence for up to 6 months, then delete it. This is sufficient time for any issues to be resolved and for any follow-up discussions.
As noted above, we may also record brief notes about the outcome of the email correspondence with your order to allow us to action whatever we have agreed.
Information shared with third parties
Who else will have access to the information?
Where we store your personal information
All the personal data we hold is stored in the United Kingdom. Our web servers are in a secure data centre in Hemel Hempstead. Backups are stored on backup systems in secure data centres in Rugby and London Docklands. Emails and paperwork are stored in our offices in Staffordshire.
Accessing, correcting, and deleting your personal information
If you have created an account, you can access most of the personal information we hold by logging into your account and checking the various sections. You can also correct and update your details there.
If you have not created an account or wish to obtain the full personal information we hold, please email us at email@example.com. We will gather the information and send it as PDF files by email within 30 days of your request. There will be no charge for this.
If having received this full information you require any corrections, please email us again at firstname.lastname@example.org. We will carry out the requested changes and send you the corrected parts only as PDF files by email within 30 days of your request. There will be no charge for this.
If you wish to have all your personal information deleted from our systems, please email us at email@example.com. We will carry out the requested deletions and confirm by email within 30 days of your request. There will be no charge for this.
If you wish to find out what personal information any of the third parties mentioned above hold about you, request corrections or deletion, please refer to their privacy policies and contact them as appropriate. We cannot act on your behalf as they will only accept your request directly from you.