Privacy
Policy

We may collect personal information when you:

• visit or use our Site;
• create an account;
• place an order;
• subscribe to our newsletter or marketing communications;
• respond to a survey;
• complete a form;
• contact us; or
• otherwise interact with our products, services or Site.

The information we may collect includes:

Personal identification information

This may include:

• your name;
• email address;
• billing or delivery address; and
• telephone number.

Payment information

Payment information is processed securely by our third-party payment providers. We do not store your full payment card details on our own servers.

Order information

We may collect information about:

• products you purchase;
• your orders;
• delivery details; and
• transaction history.

Account information

If you create an account, we may process information associated with that account, including your login and registration details.

Communication information

We may keep records of correspondence and communications between you and us, including customer service enquiries.

Technical data

We may automatically collect technical information when you use our Site, including:

• IP address;
• browser type and version;
• time zone and approximate location;
• browser plug-in information;
• operating system;
• device or platform information; and
• other technical information relating to your use of the Site.

Usage data

We may collect information about how you interact with our Site, products and services.

We may use your personal information to:

• process, fulfil and deliver your orders;
• process payments, charges and refunds;
• administer your customer account;
• provide customer service and support;
• communicate with you about your orders;
• send information about our products, services and promotions where you have consented to receive marketing;
• improve our Site, products and services;
• personalise your experience;
• understand how customers use our Site;
• prevent, detect and investigate fraudulent or suspicious activity; and
• comply with our legal and regulatory obligations.

Where permitted, we may also send service-related emails concerning your account, orders or transactions.

Marketing communications can be unsubscribed from at any time using the unsubscribe option provided in the communication or by contacting us.

We only process personal data where we have a lawful basis to do so. Depending on the circumstances, we may rely on:

Consent

Where you have given us clear consent to process your personal information for a particular purpose, such as receiving certain marketing communications. You may withdraw your consent at any time.

Contract

Where processing is necessary to enter into or perform a contract with you. For example, we need certain information to process your payment, fulfil your order and arrange delivery.

Legal obligation

Where we need to process information to comply with applicable legal or regulatory requirements.

Legitimate interests

Where processing is necessary for our legitimate business interests or those of a third party, provided those interests do not override your fundamental rights and freedoms. This may include activities such as improving our services, preventing fraud and protecting our business and Site.

We do not sell, trade or rent your personal information to third parties.

We may share relevant personal information with third-party service providers that perform services for us or on our behalf. These may include providers involved in:

• payment processing;
• order fulfilment;
• delivery and logistics;
• website hosting;
• ecommerce services;
• analytics;
• email delivery and marketing services;
• data processing; and
• customer service.

We expect service providers processing personal data on our behalf to protect that information and use it only for appropriate purposes.

We may also disclose personal information where:

• required by law;
• required in response to a valid request from a public authority;
• necessary to protect our rights, property or safety, or those of our customers or others; or
• connected with a merger, financing, acquisition, restructuring or sale of all or part of our business or assets.

Some service providers we use may process personal information outside the United Kingdom or European Economic Area.

Where personal data is transferred internationally, we take appropriate steps to ensure that it receives an adequate level of protection. Depending on the destination and service provider, this may include:

• transferring information to countries recognised as providing an adequate level of data protection; or
• using appropriate contractual safeguards approved for international transfers of personal data.

You may contact us if you would like further information about the safeguards used in connection with international data transfers.

We use appropriate technical and organisational measures designed to protect personal information against:

• unauthorised access;
• loss;
• misuse;
• alteration;
• disclosure; or
• destruction.

However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure. We therefore cannot guarantee the absolute security of information transmitted to or through our Site.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected. We may also retain information where necessary to comply with legal, accounting, tax or reporting requirements.

When deciding how long information should be retained, we may consider:

• the amount of information;
• its nature and sensitivity;
• the purposes for which it is processed;
• the risk associated with unauthorised use or disclosure;
• whether the purpose can be achieved in another way; and
• applicable legal requirements.

When personal information is no longer required, we will delete, anonymise or otherwise appropriately dispose of it where reasonably practicable.

Under UK data protection law, you may have a number of rights relating to your personal information. These include:

Right of access

You may ask us for a copy of the personal information we hold about you.

Right to rectification

You may ask us to correct information that you believe is inaccurate or complete information that you believe is incomplete.

Right to erasure

In certain circumstances, you may ask us to delete your personal information.

Right to restriction of processing

In certain circumstances, you may ask us to restrict how your personal information is processed.

Right to object

In certain circumstances, you may object to our processing of your personal information. You may object to the use of your personal information for direct marketing.

Right to data portability

In certain circumstances, you may ask us to provide personal information you supplied to us in a transferable format or to transfer it to another organisation.

You will not normally be required to pay a fee to exercise these rights. We normally have one month to respond to a valid request.

To exercise your rights, contact us at hello@cannumo.co.uk or write to:

CANNUMO LIMITED
10 Fuchsia Close
Priorslee
Telford
England
TF2 9PG

You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. We would appreciate the opportunity to address your concerns directly first, so please contact us if you have a privacy-related complaint.

Our Site may use cookies and similar technologies, including pixels and web beacons, to operate the Site, understand how it is used and improve your experience.

Essential cookies

Certain cookies are required for the Site to operate correctly. They may be used for purposes such as:

• maintaining sessions;
• providing core website functionality;
• maintaining security; and
• enabling shopping and checkout functions.

Non-essential cookies

Subject to your consent where required, we may use non-essential cookies including:

• analytics cookies, which help us understand how visitors use the Site;
• advertising cookies, which may be used to measure advertising performance and provide relevant advertising; and
• preference cookies, which remember settings such as language and other preferences.

Where consent is required, non-essential cookies will not be placed until you have provided that consent.

You can manage your cookie preferences through the cookie consent controls available on our Site or through your browser settings. Disabling certain cookies may affect the functionality or availability of some parts of the Site.

For further information, please refer to our Cookie Policy.

We may update this Privacy Policy from time to time.

When changes are made, the updated version will be published on this page and the Last updated date will be revised.

We recommend reviewing this Privacy Policy periodically to stay informed about how we handle your personal information.

If you have any questions about this Privacy Policy, your personal information or our privacy practices, please contact us:

Email:
hello@cannumo.co.uk

By post:

CANNUMO LIMITED
Company number: 16219662

10 Fuchsia Close
Priorslee
Telford
England
TF2 9PG