Earth at night from space with glowing global network connections, FTTx and ISPs banner

Privacy Policy

  • Home
  • /
  • Privacy Policy

Purpose

This Privacy Policy explains how Cherry & White Limited collects, uses, shares and protects your personal data when you visit our website at https://cherry-white.co.uk, buy products from our online shop, contact us, or otherwise interact with us. It also explains your rights under data protection law.

We are committed to protecting your privacy and handling your personal data in a lawful, fair and transparent way, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Cherry & White Limited is the data controller responsible for your personal data.

Company registration number: 02468825 Registered office: 12 Olympus Park, Quedgeley, Gloucester, GL2 4NF, United Kingdom Email: enquiries@cherry-white.co.uk Telephone: +44 (0)1452 764695

We are registered with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

The personal data we collect

Depending on how you interact with us, we may collect the following types of personal data:

  • Identity and contact data: your name, job title, company name, billing and delivery address, email address and telephone number.
  • Order and transaction data: details of the products you have bought, order numbers, and records of payments. We do not store full payment card details; these are handled by our payment provider.
  • Account data: if you create an account, your login details and account preferences.
  • Communications data: the content of enquiries, support tickets, and correspondence with us.
  • Marketing data: your preferences for receiving marketing from us, for example if you subscribe to our newsletter.
  • Technical and usage data: your IP address, browser type and version, device information, and information about how you use our Website, collected through cookies and similar technologies (see section 9).

How we collect your data

We collect personal data when you:

  • Place an order or create an account on our online shop.
  • Fill in a form on our Website, including contact and enquiry forms.
  • Subscribe to our newsletter or marketing communications.
  • Raise a support ticket or contact us by email, phone or post.
  • Browse our Website, through cookies and similar technologies.

We may also receive information from third parties such as our payment provider (confirmation of payment) and analytics providers.

How we use your data and our lawful bases

We use your personal data only where the law allows us to. The main lawful bases we rely on are:

  • Performance of a contract: to process and fulfil your orders, take payment, arrange delivery, provide support, and manage returns and refunds.
  • Legitimate interests: to run and improve our business and Website, prevent fraud, keep our systems secure, respond to enquiries, and, where appropriate, send business to business marketing. We only rely on legitimate interests where your interests and rights do not override ours.
  • Consent: to send marketing communications where consent is required, and to set non-essential cookies. You can withdraw your consent at any time.
  • Legal obligation: to comply with our legal and regulatory duties, for example keeping records for tax and accounting purposes.

Marketing

Where you have subscribed to our newsletter or otherwise agreed to receive marketing, we may send you information about our products, services and updates. You can opt out at any time by using the unsubscribe link in our emails or by contacting us at enquiries@cherry-white.co.uk. Opting out of marketing does not affect communications we send you about an order or for other administrative reasons.

Who we share your data with

We do not sell your personal data. We share it only where necessary, with:

  • Payment providers, to process your payments securely.
  • Delivery and courier partners, to fulfil and deliver your orders.
  • IT, hosting and software providers, who support our Website, online shop and business systems, including our website hosting and customer relationship and marketing platforms.
  • Professional advisers, such as accountants and legal advisers, where needed.
  • Government bodies, regulators and law enforcement, where we are required to do so by law.

We require all third parties who process personal data on our behalf to keep it secure and to use it only for the purposes we specify.

International transfers

We aim to keep your personal data within the United Kingdom or the European Economic Area. Where any of our providers process personal data outside these areas, we take steps to ensure that appropriate safeguards are in place, such as the UK’s International Data Transfer Agreement or equivalent approved mechanisms, so that your data receives a similar level of protection.

Cookies and similar technologies

Our Website uses cookies and similar technologies to help it function, to remember your preferences, and to understand how visitors use the site. Some cookies are strictly necessary for the Website and shop to work. Others, such as analytics and marketing cookies, are optional and are only used where you have given consent.

You can manage your cookie preferences through the cookie controls on our Website, and you can also control cookies through your browser settings. Blocking some cookies may affect how the Website works.

How long we keep your data

We keep your personal data only for as long as necessary for the purposes for which we collected it, including to satisfy any legal, accounting or reporting requirements. Order and transaction records are generally kept for at least six years to meet tax and accounting obligations. Where we no longer need your data, we will securely delete or anonymise it.

How we protect your data

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. These include secure hosting, access controls, and encryption of payment data in transit through our payment provider. While we take security seriously, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Your rights

Under data protection law, you have the following rights in relation to your personal data:

  • The right to be informed about how we use your data.
  • The right of access to the personal data we hold about you.
  • The right to have inaccurate or incomplete data corrected.
  • The right to have your data erased in certain circumstances.
  • The right to restrict our processing of your data in certain circumstances.
  • The right to data portability, allowing you to obtain and reuse your data.
  • The right to object to processing based on our legitimate interests, and to direct marketing.
  • Rights in relation to automated decision making and profiling.

To exercise any of these rights, please contact us using the details in section 14. We will respond within one month, and we will not usually charge a fee. We may need to verify your identity before acting on your request.

Complaints

If you have any concerns about how we handle your personal data, please contact us first so that we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline: 0303 123 1113 Website: https://ico.org.uk

Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Cherry & White Limited 12 Olympus Park, Quedgeley, Gloucester, GL2 4NF, United Kingdom Email: enquiries@cherry-white.co.uk Telephone: +44 (0)1452 764695

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our products, or the law. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.