1. Data Controller
For UK GDPR purposes, the Data Controller is:
Lindenham
2 Summerseat Close, M5 3JQ, Salford
Email: customerservice@lindenham.com
2. Personal Data We Collect
We collect and process personal data in accordance with UK GDPR Article 6 (Lawful Bases for Processing).
2.1 Data You Provide
- Name
- Email address
- Phone number
- Billing & shipping address
- Order details
- Account login information (if you create an account)
- Customer support messages
Lawful Basis:
- Contract (processing your order)
- Legitimate interests (customer service, fraud prevention)
- Consent (newsletter marketing)
2.2 Payment Information
We do not store full card numbers.
Payments are processed securely via third-party PCI DSS–compliant services (e.g., Stripe, PayPal).
2.3 Automatically Collected Data
- IP address
- Browser type & device details
- Pages visited
- Time on site
- Cookies (see Section 8)
Lawful Basis: Legitimate interests (site performance, security)
2.4 Data from Third Parties
- Payment processors
- Delivery carriers
- Advertising networks
- Analytics platforms
- Social media platforms (if you interact with our accounts)
3. How We Use Your Personal Data
We use your data to:
- Process and deliver orders
- Provide customer support
- Manage your account
- Improve website functionality
- Analyse performance and user behaviour
- Send marketing emails (only with your consent)
- Prevent fraud and ensure website security
- Comply with legal obligations
4. Lawful Bases for Processing (UK GDPR Article 6)
We rely on the following lawful bases:
- Contract – processing necessary to fulfil an order
- Consent – email marketing, non-essential cookies
- Legitimate Interests – analytics, fraud prevention, customer service
- Legal Obligation – tax, accounting, and regulatory compliance
You may withdraw consent at any time.
5. Data Sharing & Disclosure
We share your information only when necessary, and we do not sell your personal data.
5.1 Service Providers
- Payment processors
- Shipping/delivery companies
- Email marketing providers
- IT hosting & analytics services
- Fraud prevention tools
5.2 Legal Requirements
We may disclose information if required to:
- Comply with law or court order
- Respond to requests from law enforcement
- Protect our rights or website security
6. International Data Transfers
Some third-party service providers may store data outside the UK.
When data is transferred internationally, we ensure protection through:
- UK-approved International Data Transfer Agreements (IDTA)
- Addendum to EU Standard Contractual Clauses
- Adequacy regulations (when applicable)
7. Data Retention
We retain personal data only as long as necessary for:
- Completing orders
- Providing service
- Fulfilling legal obligations
- Accounting and tax requirements
You may request deletion of your account or data at any time (see Section 9).
8. Cookies & Tracking Technologies (PECR Compliance)
We use:
- Essential cookies (required for site operation)
- Performance and analytics cookies
- Personalisation cookies
- Advertising/retargeting cookies
Non-essential cookies require your consent under UK law.
You can manage cookie preferences anytime via your browser or our cookie banner.
9. Your Rights Under UK GDPR
You have the following rights:
- Right to access – request a copy of your data
- Right to rectification – correct inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Rights related to automated decision-making and profiling
To exercise any rights, contact:
📧 customerservice@lindenham.com
We respond within one month as required by UK GDPR.
10. Children’s Privacy
Our website is not intended for individuals under 13.
We do not knowingly collect children’s data.
If you believe a child has provided data, contact us immediately.
11. Data Security
We use industry-standard measures to protect your personal data, including:
- SSL/HTTPS encryption
- Restricted access to systems
- Secure payment processing
- Firewalls and intrusion monitoring
No online transmission is completely secure, but we strive to safeguard your data.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in law or business practices.
Updates will be posted on this page with a new “Last updated” date.
13. Contact Information
For questions or data requests:
📧 customerservice@lindenham.com
🌐 lindenham.com
You may also contact:
UK Information Commissioner’s Office (ICO) – ico.org.uk
