• Direct Collection (User-Provided Data)
  • This happens when you actively provide your information:
    • Account Creation – When you sign up, you provide your name, email, phone number, address
    • Checkout Process – You enter billing/shipping address and contact information.
    • Customer Support – If you contact our customer support team.
    • Surveys & Reviews – When you leave reviews or complete surveys, your responses may be stored.
• Automated Collection (Tracking & Analytics)
  • This happens in the background while you browse or interact with the platform:
    • Cookies & Tracking Technologies – We use cookies, pixels, and web beacons to track your activity, such as what products you view or add to your cart. To find out more about these and how to update your cookie preferences, please click on the cookie settings
    • IP Address & Device Information – We collect data on your device type, operating system, browser, and IP address to optimise user experience and security.
    • Behavioural Tracking – Your clicks, time spent on pages, and past purchases are recorded to personalise recommendations.
• Third-Party Sources
  • We may collect data indirectly:
    • Marketing & Advertising Partners – We may purchase data from third-party advertisers to better target ads.
    • Public Databases – In certain situations, we may verify information against public records to prevent fraud or consult openly available sources, such as LinkedIn or company websites.

You have several rights under UK data protection law. These are listed below, along with our contact details, should you wish to make a request.

• Informed: You have the right to be informed about how we handle your personal data.  This privacy statement is one of the ways we do this.
• Access: You have the right to ask for a copy of the personal data we hold about you and the purposes for which we are using it. ‘Personal data’ is any information which can directly, or indirectly, identify you.
• Rectification: You have the right to ask us to change any details which are incorrect or need updating.
• Erasure: You have the right to ask us to delete your personal details. We will assess any deletion request on a case-by-case basis. Often we can quickly fulfil your request, but in some circumstances there may be reasons why we need to keep information about you. 
• Object: You have the absolute right to object to receiving direct marketing from us.  You also have the right to raise an objection about how we are handling your personal information.
• Restriction: You have the right to ask us to restrict or suppress your personal information. This would mean we’d store it but not use it.
• Portability: You have the right to request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. 

We don’t carry out any activities involving automated decisions being made about you.

If you’d like to exercise any of these rights or have any other query, please use the following contact details:

Email: data.protection@cfh.com

Address: CFH Docmail Ltd. St Peter's Park, Wells Rd, Westfield, Radstock, BA3 3UP.

To fulfil your request, depending on our relationship with you, we may need to ask you for proof of identity. We’ll handle any requests as soon as possible, at least within one calendar month.

If you’re concerned about the way in which we have collected and used your personal information, please contact us and we’ll do our best to resolve this with you. If you remain unhappy with how we have handled your personal information, you have the right to raise a complaint with the UK’s Information Commissioner’s Office.

We take appropriate steps to make sure personal information is stored in a secure environment to prevent any unauthorised access.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Other organisations: We won’t share your personal information with any other businesses for them to use for their own marketing purposes, unless we have specifically informed you. We may disclose your personal data if required to do so by law.

Service providers: We use external service providers to support the efficient running of our business. For example, to host our online platform, or to collect payment from you.

Where a service provider is based outside the UK the transfer of personal information (including access to it) is based on one of the following safeguards: an EU Adequacy decision (recognised by the UK), EU Standard Contractual Clauses (SCCs) and the UK Addendum to EU SCCs. If you would like further information, please email data.protection@cfh.com.

Other third parties: In the event of a sale or acquisition, we may share personal data with the other party if that party uses personal information for the same purposes, you originally gave it to us for.

We keep your personal details for as long as is necessary for the reasons we are using them for. How long, varies depending on our relationship with you. If you would like more information about this, please contact us at data.protection@cfh.com.

Please remember if you use a link to go from our website to another website, or you request a service from a third party, this Privacy Statement will no longer apply once you have left our website. Your browsing and interaction on any other website is subject to that website’s own rules and policies.