Privacy Policy

---

 Dyffryn Clwyd Timber Co.

Effective Date: [1st May 2025]

Dyffryn Clwyd Timber Co. (“we”, “our”, or “us”) is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or otherwise interact with us.

⸻

1. Who We Are

Dyffryn Clwyd Timber Co. is a UK-based timber company. For the purposes of data protection law, we are the “data controller” of any personal information you provide to us.

Contact Details:

Email: dyffrynclwydtimberco@gmail.com

⸻

2. What Information We Collect

We may collect and process the following types of personal data:

• Identity Data – your name, title, and business/company name.

• Contact Data – email address, phone number, and postal address.

• Transaction Data – details about payments and orders made through our website.

• Technical Data – IP address, browser type, operating system, and browsing behaviour (via cookies).

• Communications Data – any messages or correspondence sent to us via the website, email, or phone.

⸻

3. How We Use Your Personal Data

We use your information to:

• Provide and manage our timber products and services.

• Respond to enquiries and fulfil orders.

• Communicate with you regarding updates, deliveries, or changes to services.

• Maintain business records and comply with legal obligations.

• Improve our website and services using analytics and feedback.

⸻

4. Legal Bases for Processing

We process your personal data under the following lawful bases:

• Contractual necessity – to fulfil our contract with you (e.g., process orders).

• Legitimate interests – to operate our business effectively and provide a quality service.

• Consent – for optional activities such as email marketing (where applicable).

• Legal obligation – where required by law (e.g., tax or accounting purposes).

⸻

5. Sharing Your Data

We only share your personal information when necessary, with:

• Delivery and logistics partners to fulfil your orders.

• Payment processors to handle transactions securely.

• IT service providers who support our website and systems.

• HMRC and regulatory authorities where legally required.

We never sell your data to third parties.

⸻

6. International Data Transfers

We store and process your data within the UK or European Economic Area (EEA). If we ever need to transfer your data outside the UK/EEA, we will ensure appropriate safeguards are in place.

⸻

7. How Long We Keep Your Data

We retain personal data only as long as necessary for the purposes we collected it, including satisfying legal, tax, or reporting obligations.

⸻

8. Your Data Protection Rights

Under the UK GDPR, you have the right to:

• Access your personal data.

• Correct inaccurate or incomplete data.

• Request erasure of your data (“right to be forgotten”).

• Object to or restrict certain types of processing.

• Request a copy of your data in a portable format.

• Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at the details provided above.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

www.ico.org.uk

⸻

9. Cookies

Our website uses cookies to enhance your experience and gather analytics. For details, please see our [Cookie Policy].

⸻

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website with the effective date shown at the top.