PRIVACY POLICY – CURNAT

At Curnat, protecting your personal data is a priority. This Privacy Policy explains how we collect, use, store and protect your information when you visit our website, place an order or interact with our services.

We process personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

✦ Information We Collect

When you visit our website, place an order or use our services, we may collect information necessary to provide our services, including:

• Your name

• Email address

• Telephone number, where provided

• Billing and delivery address

• Order and purchase information

• Information relating to returns, refunds or customer service requests

• Payment and transaction information

• IP address

• Browser and device information

• Website usage and browsing data

• Cookie and similar technology information

• Marketing and communication preferences

Payment information may be processed securely by our payment service providers and may not be stored directly by Curnat.

✦ How We Use Your Information

We may use your personal information to:

• Process and fulfil your orders

• Process payments

• Arrange the delivery of your purchases

• Provide order and delivery updates

• Manage returns, refunds and customer service requests

• Respond to your questions and enquiries

• Ensure the proper functioning and security of our website

• Prevent fraud and other unauthorised activity

• Improve our products, services and customer experience

• Analyse the performance and use of our website

• Comply with our legal, accounting and regulatory obligations

Your information may also be used for marketing communications where permitted by applicable law.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails or by contacting us directly.

Unsubscribing from marketing communications will not prevent you from receiving essential communications relating to an order or transaction.

✦ Legal Bases for Processing

Under UK data protection law, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we may process your information because:

• It is necessary to fulfil a contract with you, such as processing and delivering your order

• We are required to comply with a legal obligation

• It is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms

• You have given us your consent

Where processing is based on your consent, you may withdraw that consent at any time.

✦ Protection of Your Information

We use appropriate technical and organisational security measures designed to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include secure connections, SSL encryption, access controls and other technical safeguards.

However, no method of transmission or electronic storage can guarantee absolute security.

✦ Disclosure to Third Parties

Curnat does not sell your personal information to third parties.

However, we may share personal information with trusted third parties where necessary to operate our business and provide our services, including:

• E-commerce and website hosting providers

• Payment processors

• Delivery and fulfilment partners

• Customer service providers

• Email and communications platforms

• Analytics providers

• Advertising and marketing platforms, where permitted by law and subject to your choices where required

• Fraud prevention and security providers

• Professional advisers

• Government authorities or regulators where required by law

These parties only receive the information reasonably necessary for the relevant service or purpose.

✦ International Data Transfers

Some of our service providers or fulfilment partners may be located outside the United Kingdom.

Where your personal information is transferred internationally, we take appropriate measures where required by UK data protection law to ensure that your personal information receives an appropriate level of protection.

✦ Cookies

Our website uses cookies and similar technologies to operate correctly and improve your browsing experience.

Certain cookies are strictly necessary for essential website functions, such as:

• Keeping products in your shopping basket

• Remembering essential preferences

• Maintaining website security

• Enabling checkout and payment functionality

We may also use non-essential cookies for purposes such as:

• Analytics

• Measuring website performance

• Advertising

• Personalisation

Where consent is required under UK law, non-essential cookies will not be placed on your device until you have made your choice.

You can accept, reject or manage non-essential cookies through the cookie controls provided on our website.

You may also change cookie settings through your browser, although disabling certain cookies may affect some website functionality.

✦ How Long We Keep Your Information

We retain your personal information only for as long as reasonably necessary for the purposes for which it was collected.

This may include retaining certain information where required to:

• Fulfil orders and contractual obligations

• Resolve disputes

• Process refunds or returns

• Prevent fraud

• Maintain business and accounting records

• Meet legal, tax or regulatory requirements

Different categories of information may therefore be retained for different periods.

When personal information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.

✦ Your Rights

Under applicable UK data protection law, you may have a number of rights in relation to your personal information, including:

Access:
Request a copy of the personal information we hold about you.

Rectification:
Ask us to correct inaccurate or incomplete personal information.

Erasure:
Ask us to delete your personal information in certain circumstances.

Restriction:
Ask us to restrict the way we process your personal information in certain circumstances.

Objection:
Object to certain types of processing, including processing based on legitimate interests where applicable.

Data Portability:
Request the transfer of certain personal information to you or another organisation where the legal requirements for this right are met.

Withdraw Consent:
Withdraw your consent at any time where we rely on consent to process your information.

You also have the right to object to the use of your personal information for direct marketing.

To exercise any of these rights, simply contact us using the details provided below.

We may need to verify your identity before processing certain requests.

✦ Complaints

If you have concerns about how we use or protect your personal information, please contact us first so that we can investigate your concerns.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

✦ Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our services, business practices or legal obligations.

Any updated version will be published on this page.

✦ Contact Us

For any questions relating to this Privacy Policy, your personal information or your data protection rights, our team can be contacted at:

📧 contact@curnat.co.uk

Curnat