This privacy notice explains how ECS Cash & Carry Ltd ("we", "us", the "Company"), registered at 14b Major Industrial Estate, Middleton Road, Middleton, Morecambe, England, LA3 3NT, collects and uses your personal data. We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.
What data we collect
We collect information you provide when you register, place an order, contact us or subscribe to marketing, including your name, email address, telephone number, delivery and billing addresses, account type and order history. We also collect limited technical data (IP address, browser type, referring pages) when you use our website.
How we use your data
We process your personal data for the following purposes:
- to fulfil orders, arrange delivery and provide customer support;
- to verify eligibility for age-restricted products;
- to operate, maintain and improve our website;
- to comply with legal, accounting and tax obligations;
- to send service emails such as order confirmations;
- where you have opted in, to send marketing communications about new products and offers.
Legal bases for processing
We rely on the performance of a contract when processing your order; legal obligation for tax and accounting records; legitimate interests for fraud prevention, analytics and non-marketing service communications; and consent for marketing emails and non-essential cookies.
Sharing your data
We share data only where necessary with trusted third parties: payment providers (for card processing), logistics partners (to deliver your order), email providers (to send transactional and marketing messages), cloud hosting providers, and our professional advisers. We do not sell your personal data.
Data retention
We keep your account data for as long as your account is active. Order records are retained for six years after the order to comply with UK tax law. Marketing contact data is retained until you unsubscribe.
Cookies
Our website uses essential cookies to keep you signed in and remember your basket. With your consent we also use analytics cookies to understand how the site is used. You can manage cookie preferences in your browser at any time.
Your rights under GDPR
You have the right to: access your personal data; request correction or deletion; restrict or object to processing; request data portability; and withdraw consent for marketing at any time. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Contact us
To exercise any of these rights or for any privacy-related query, please email admin@ecscashandcarry.co.uk or write to us at the address above. We will respond within one calendar month.