Privacy Policy

Craven Cooling Sales Limited understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who visits this website, cravencooling.co.uk (“Our Site”), and will only collect and use personal data in the ways described here and in line with our obligations and your rights under the law.

Please read this Privacy Policy carefully. If you have any questions, contact us using the details in section 2.

1. Who We Are

Our Site is owned and operated by Craven Cooling Sales Limited, a company registered in England and Wales under company number 12129985, whose registered office is:

Craven Cooling Sales Ltd, c/o Bevan Buckland, Ground Floor, Cardigan House, Swansea, Wales, SA7 9LA.

FridgeSmart is a trading name of Craven Cooling Sales Limited (it has its own website and phone number, but it is the same company — your data is not shared with a separate business).

For the purposes of UK GDPR and the Data Protection Act 2018, the data controller is Craven Cooling Sales Limited (“we”, “us”, “our”).

2. How to Contact Us

By email: sales@cravencooling.co.uk
By phone: 01792 732702
By post: Craven Cooling Sales Ltd, c/o Bevan Buckland, Ground Floor, Cardigan House, Swansea, SA7 9LA

If you have a concern about how we handle your data, please contact us first and we’ll do our best to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data-protection regulator, at ico.org.uk.

3. What Data We Collect

Depending on how you use Our Site, we may collect:

• name;
• business/company name;
• job title;
• contact details (email address, telephone number, delivery and billing address);
• postcode and, where you tell us, your preferences and interests;
• your IP address, browser type and version, and operating system;
• information about how you use Our Site.

We do not collect or store your card details. Card payments are handled securely by our payment providers, Elavon and iwocaPay, on their own systems. The full card number is never seen or stored by us.

4. How We Use Your Data and Our Lawful Basis

We only use your data where the law allows. The lawful basis depends on what we are doing:

What we do with your data	Lawful basis
Process and deliver your order, manage your account	Performance of a contract with you
Reply to your enquiries and provide customer service	Legitimate interests
Send marketing you have opted into (email/phone/post)	Consent
Marketing to existing business customers about similar products	Legitimate interests (you can opt out at any time)
Improve Our Site and understand how it is used	Legitimate interests

You can withdraw consent or object to marketing at any time — use the unsubscribe link in our emails or contact us using the details in section 2.

Our ICO registration number is ZC202467. You can verify our registration on the ICO’s public register at ico.org.uk.

5. How Long We Keep Your Data

We keep personal data only as long as we need it:

Data type	Retention period	Reason
Order and transaction records	6 years from the end of our relationship	Required by HMRC for tax
Account details (registered customers)	While your account is active, plus 6 years	Customer service and tax records
Marketing contact data	Until you unsubscribe, plus a short period afterwards	Consent / legitimate interest
Enquiry and customer-service correspondence	As long as needed to deal with the query	Customer service

6. Who We Share Your Data With

We do not sell your data, and we do not share it with other businesses for their own use. We do use trusted third-party suppliers (“processors”) who handle data on our behalf, under contract, only to run our services:

Supplier	What they do	Location
Elavon	Card payment processing	Ireland (EEA)
iwocaPay (iwoca Ltd)	“Buy now, pay later” / finance	United Kingdom
Cloudflare	Website security and performance (CDN)	United States

We may also share data where we are legally required to (for example, a court order or to comply with the law).

7. Sending Data Outside the UK

Some suppliers listed above process data outside the UK (for example, Cloudflare in the United States). Where we transfer personal data outside the UK, we rely on the UK Government’s adequacy regulations or, where none applies, on the UK International Data Transfer Agreement (IDTA) — or the EU Standard Contractual Clauses with the UK Addendum — so your data stays protected to UK GDPR standards.

8. Your Rights

Under UK GDPR you have the right to: be informed about how we use your data; access the data we hold about you; have inaccurate data corrected; ask us to delete your data; restrict or object to how we use it; and data portability. To exercise any of these, contact us using the details in section 2. We will respond within one month, free of charge.

9. Cookies

Cookies are small text files placed on your device when you visit Our Site. We use them to make the site work and to improve your experience. The cookies used on Our Site are:

Strictly necessary (no consent needed) — these make the site and checkout work:

Cookie	Set by	Purpose	Duration
WooCommerce cart/session cookies (e.g. woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_*)	WooCommerce	Keep your basket and checkout working	Session / up to 2 days
wordpress_*, wp-settings-*	WordPress	Log in and remember display settings (account area)	Session / 1 year
__cf_bm / Cloudflare cookies	Cloudflare	Security and performance	Up to 30 minutes / session
Elementor functional cookies	Elementor	Remember layout and display preferences	Session

Analytics and advertising: we do not use analytics or advertising cookies on Our Site. Because we only use strictly necessary cookies, we do not need to ask for your consent to a cookie banner.

You can block or delete cookies through your browser settings, though the site may not work fully without the strictly necessary ones.