Ashworth & Vale Ltd ("we", "us", "our"), company number 17322003, is the data controller responsible for personal data processed through this website. This policy describes how we collect, use and protect your data in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation (Regulation (EU) 2016/679) ("EU GDPR").
1. Personal data we collect
- Identity and contact data (name, delivery address, email, telephone).
- Order and transaction data (items purchased, price, delivery details).
- Technical data (IP address, browser type, device information).
- Marketing preferences, where you have opted in.
2. Purposes and lawful bases
- To perform our contract with you (Art. 6(1)(b) UK/EU GDPR) — order fulfilment, delivery and after-sales care.
- To comply with legal obligations (Art. 6(1)(c)) — tax, accounting and consumer law requirements.
- Our legitimate interests (Art. 6(1)(f)) — fraud prevention, site security and improving our service.
- Your consent (Art. 6(1)(a)) — marketing communications and non-essential cookies.
3. Sharing your data
We share personal data only with processors acting on our instructions: payment providers, delivery carriers, IT and hosting providers, and professional advisers. All processors are contractually bound to protect your data.
4. International transfers
Where personal data is transferred outside the United Kingdom or European Economic Area, we rely on adequacy decisions or on Standard Contractual Clauses (or the UK International Data Transfer Addendum) as approved by the relevant regulators.
5. Retention
We retain order records for six years to comply with United Kingdom tax law. Marketing data is retained until you withdraw consent. Website logs are held for no more than 12 months.
6. Your rights
Under the UK GDPR and EU GDPR you have the right to:
- Access the personal data we hold about you;
- Request rectification of inaccurate data;
- Request erasure ("right to be forgotten");
- Restrict or object to processing;
- Data portability;
- Withdraw consent at any time; and
- Lodge a complaint with a supervisory authority.
In the United Kingdom the supervisory authority is the Information Commissioner's Office (ico.org.uk). Within the European Union you may contact your local Data Protection Authority.
7. Cookies
Our use of cookies is described in our Cookie Policy.
8. Contact
For any privacy enquiry or to exercise your rights, please write to privacy@ashworthandvale.co.uk.