PRIVACY POLICY

Introduction

http://www.cedarvalley.co.ukWelcome to Cedar Valley Limited’s Privacy Policy.

Cedar Valley Limited (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website (www.cedarvalley.co.uk), as well as your rights under applicable data protection laws.

1. Important Information and who we are

Purpose of this Privacy Policy

This Privacy Policy aims to give you clear information about how we collect and process your personal data, including any data you provide when you:

  • purchase a product or service

  • subscribe to our newsletter

  • contact us

  • participate in promotions or surveys

This website is not intended for children, and we do not knowingly collect personal data relating to individuals under the age of 16.

Controller

Cedar Valley Limited is the data controller responsible for your personal data.

Company Details

Cedar Valley Limited
Artisans’ House, 7 Queensbridge, Northampton, NN4 7BF
Company Number: 09299422

Contact

Email: info@cedarvalley.co.uk
Data Privacy Manager

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO). However, we would appreciate the opportunity to address your concerns first.

Changes to this Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website.

Third-Party links

Our website may include links to third-party websites. We are not responsible for their privacy policies, and you should review them separately.

2. The Data We Collect About You

Personal data means any information that can identify an individual.

We may collect the following categories of personal data:

  • Identity Data: name, title, date of birth

  • Contact Data: address, email, telephone number

  • Financial Data: payment details (processed via secure third-party providers such as Elavon, PayPal, or Stripe)

  • Transaction Data: details of purchases and payments

  • Technical Data: IP address, browser type, device information

  • Usage Data: how you interact with our website

  • Marketing and Communications Data: your preferences for receiving marketing

We may also collect aggregated or anonymised data, which cannot identify you.

We do not collect special category data (e.g. health, ethnicity, religion) or criminal offence data.

3. How is your personal data collected?

We collect data through:

Direct Interactions

You may provide data when you:

  • make a purchase

  • sign up to our newsletter

  • contact us

  • enter competitions or surveys

Automated Technologies

We automatically collect technical data using:

  • cookies

  • server logs

  • analytics tools (e.g. Google Analytics)

Third Parties

We may receive data from:

  • payment providers (e.g. PayPal, Stripe, Elavon)

  • analytics providers (e.g. Google)

  • advertising platforms

4. Cookies

We use cookies and similar technologies to improve your experience and understand how our website is used.

These may include:

  • analytics cookies (e.g. Google Analytics)

  • functionality cookies

Cookies may collect:

  • IP address

  • browsing behaviour

  • device information

Where required by law, we will obtain your consent before placing non-essential cookies on your device.

You can manage your cookie preferences via our cookie banner or browser settings.

5. How we will use your personal data

We will only use your personal data where the law allows us to.

Lawful Bases

We rely on:

  • Performance of a contract

  • Legitimate interests

  • Legal obligations

  • Consent (where required, including marketing and cookies)

Purposes of Processing

We use your data to:

  • register you as a customer

  • process and deliver orders

  • manage payments

  • communicate with you

  • improve our website and services

  • administer and protect our business

  • provide customer support

  • send relevant marketing communications

6. Marketing

We will only send marketing communications where we have a lawful basis to do so.

Consent

Where you subscribe to our newsletter or opt in, you agree to receive marketing communications from us.

Soft Opt-In

If you have purchased from us, we may send you marketing about similar products or services, provided:

  • you were given the opportunity to opt out at the time; and

  • you can opt out in every message

Opting Out

You can unsubscribe at any time by:

We will never sell your personal data to third parties for marketing.

Advertising Tools

We may use tools such as Facebook Custom Audiences to display relevant ads. This may involve securely sharing limited data (e.g. hashed email addresses) with advertising platforms, where you have consented to marketing.

7. Disclosures of Your Personal Data

We may share your data with:

  • service providers (IT, payment processing, delivery)

  • professional advisers (lawyers, accountants)

  • regulators (e.g. HMRC)

  • business partners or successors in the event of a sale or merger

All third parties are required to respect the security of your data.

8. International transfers   

Where your data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

  • the UK International Data Transfer Agreement (IDTA)

  • the UK Addendum to Standard Contractual Clauses

9. Data Security   

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. 

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

10. Data Retention   

We retain personal data only as long as necessary.

For legal and tax purposes, we may retain certain data (e.g. transaction records) for up to 6 years.

We may anonymise data for research or statistical purposes.

11. Your Legal Rights

You have rights under data protection law, including:

  • access your personal data

  • correct inaccurate data

  • request deletion

  • object to processing

  • restrict processing

  • request data transfer

  • withdraw consent at any time

To exercise your rights, contact:
info@cedarvalley.co.uk

We aim to respond within 30 days.

12. Data Minimisation and Accuracy

We only collect data necessary for our purposes and take reasonable steps to keep it accurate and up to date.

13. Security and Internal Procedures

We ensure:

  • staff are trained in data protection

  • data is securely stored (digital and physical)

  • access is restricted

  • regular reviews and data clean-ups are conducted

14. Legal Information

This Privacy Policy is governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the English courts.

15. Contact Us

If you have any questions about this Privacy Policy or your data, please contact:

Email: info@cedarvalley.co.uk