Privacy policy

Privacy Policy

This Privacy Policy explains how Sandford ltd (referred to as "we", "us", or "our"), operating the website support@sandford.com, collects, uses, stores, and protects your personal data. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and applicable data protection laws.

Who We Are

Sandford is a company registered in England and Wales (Companies House Number: [COMPANIES HOUSE NUMBER]), with a registered address at Unit 13 Freeland Park Wareham Road, Lytchett Matravers, Poole, BH16 6FA, ENGLAND. We act as the data controller for the personal information collected through this website.

What Data We Collect

We may collect the following types of personal information when you use our website or place an order:

  • Identity data: name, username or similar identifier
  • Contact data: billing address, delivery address, email address, and telephone number
  • Financial data: payment card details (processed securely by third-party payment providers)
  • Transaction data: details about orders, purchases, and payments
  • Technical data: IP address, browser type, device identifiers, time zone settings, and operating system
  • Usage data: information about how you use our website and services
  • Marketing and communications data: your preferences for receiving marketing from us

How We Collect Your Data

We collect data through:

  • Direct interactions when you create an account, place an order, or contact us
  • Automated technologies such as cookies and similar tracking technologies when you browse our website
  • Third parties including payment processors, analytics providers, and advertising partners

Cookies

Our website uses cookies to improve your browsing experience and analyse website traffic. Cookies are small text files placed on your device. We use the following types of cookies:

  • Essential cookies: necessary for the website to function correctly
  • Analytical/performance cookies: help us understand how visitors use our site (e.g. Google Analytics)
  • Functionality cookies: allow the website to remember your preferences
  • Marketing/targeting cookies: used to deliver relevant advertisements

You can control and manage cookie settings through your browser. Please note that disabling certain cookies may affect website functionality.

How We Use Your Data

We use your personal data for the following purposes:

  • To process and fulfil your orders
  • To communicate with you about your orders and enquiries
  • To send marketing communications (where you have consented or we have a legitimate interest)
  • To improve our website, products, and services
  • To comply with legal and regulatory obligations
  • To prevent fraud and maintain security

Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Contract: processing necessary to fulfil your order
  • Legal obligation: compliance with applicable laws
  • Legitimate interests: improving our services and preventing fraud
  • Consent: for marketing communications and non-essential cookies

Third-Party Sharing

We may share your personal data with the following third parties:

  • Payment processors (e.g. Shopify Payments, PayPal, Stripe) to handle transactions securely
  • Shipping and fulfilment partners to deliver your orders
  • Analytics providers (e.g. Google Analytics) to help us understand website usage
  • Marketing platforms (e.g. Meta, Google Ads) for advertising purposes
  • IT and system administration providers supporting our website infrastructure

We do not sell your personal data to third parties. All third-party processors are required to handle your data securely and in accordance with applicable data protection laws.

International Transfers

Some of our third-party service providers may process your data outside the UK or European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the relevant authority.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Order data is typically retained for up to 7 years in accordance with UK tax and accounting regulations.

Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right to access your data
  • Right to correct inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time

To exercise any of these rights, please contact us at support@sandford.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

Contact Us

For any privacy-related enquiries, please contact: support@sandford.com.