At Costrvanil Tools, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
1.1 Personal Information
We may collect the following types of personal information:
- Identity Data: Name, title, company name
- Contact Data: Address, email address, telephone numbers
- Technical Data: IP address, browser type, device information
- Usage Data: How you use our website and services
- Marketing Data: Your preferences for receiving marketing communications
- Transaction Data: Purchase history, payment information (processed securely)
1.2 How We Collect Information
We collect information through:
- Direct interactions (forms, phone calls, emails)
- Automated technologies (cookies, web beacons)
- Third parties (payment processors, delivery services)
- Public sources (business directories, social media)
2. How We Use Your Information
We use your personal data for the following purposes:
Service Provision
- Processing orders and transactions
- Providing customer support
- Managing your account
- Delivering products and services
Communication
- Responding to enquiries
- Sending service updates
- Marketing communications (with consent)
- Technical support
Business Operations
- Website analytics and improvement
- Fraud prevention and security
- Legal compliance
- Business analysis and planning
3. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract: To fulfil our contractual obligations to you
- Legitimate Interest: For business operations, fraud prevention, and service improvement
- Consent: For marketing communications and non-essential cookies
- Legal Obligation: To comply with applicable laws and regulations
4. Information Sharing and Disclosure
We may share your information with:
4.1 Service Providers
- Payment processors (for secure transaction processing)
- Delivery companies (for order fulfilment)
- IT service providers (for website hosting and maintenance)
- Marketing agencies (for authorised communications)
4.2 Legal Requirements
We may disclose your information when required by law, court order, or to:
- Comply with legal obligations
- Protect our rights and property
- Prevent fraud or illegal activities
- Ensure the safety of our customers and staff
4.3 Business Transfers
In the event of a merger, acquisition, or sale of our business, your information may be transferred to the new owner, subject to appropriate safeguards.
5. Data Security
We implement appropriate technical and organisational measures to protect your personal data:
- Encryption of sensitive data in transit and at rest
- Regular security assessments and updates
- Access controls and staff training
- Secure backup and disaster recovery procedures
- Regular monitoring for security threats
6. Data Retention
We retain your personal data only for as long as necessary:
- Customer Records: 7 years after last transaction (for tax and legal compliance)
- Marketing Data: Until you withdraw consent or 3 years of inactivity
- Website Analytics: 26 months (Google Analytics default)
- Security Logs: 12 months
7. Your Rights
Under UK GDPR, you have the following rights:
Right of Access
Request copies of your personal data
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of your data
Right to Restrict
Limit how we use your data
Right to Portability
Receive your data in a portable format
Right to Object
Object to certain processing activities
8. Cookies and Tracking
Our website uses cookies to enhance your experience. Please see our Cookie Policy for detailed information about:
- Types of cookies we use
- How to manage cookie preferences
- Third-party cookies and analytics
- Your choices and controls
9. Marketing Communications
We may send you marketing communications if:
- You have given explicit consent
- You are an existing customer and we have legitimate interest
- You have not opted out of such communications
You can unsubscribe at any time by:
- Clicking the unsubscribe link in emails
- Contacting us directly
- Updating your preferences in your account
10. International Transfers
We primarily process data within the UK. If we transfer data internationally, we ensure appropriate safeguards are in place, including:
- Adequacy decisions by the UK government
- Standard contractual clauses
- Certification schemes
- Codes of conduct
11. Children's Privacy
Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be:
- Posted on this page with the updated date
- Notified to you via email for significant changes
- Highlighted on our website
13. Contact Information
Data Protection Officer
Costrvanil Tools Ltd
45 Toolmaker's Lane
Birmingham, B1 2TL
United Kingdom
Email: [email protected]
Phone: +44 20 7123 4567
Data Protection Enquiries: [email protected]
14. Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the supervisory authority: