Privacy Policy
1. Introduction
This Privacy Policy explains how Redleys collects, uses, stores and protects your personal data when you visit our website, contact us, request a quotation, place an order, or otherwise interact with our business.
We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are
Redleys Ltd is the data controller responsible for your personal data.
Registered Address: Top Floor Office Suite, Holme Court, Bakewell, Derbyshire, DE45 1GQ
Company Registration Number: 17370862
Email: info@redleys.com
Telephone: 01629 363717
3. Information We Collect
We may collect and process the following categories of personal data:
Identity Data
-
Name
Contact Data
-
Email address
-
Telephone number
-
Billing address
-
Delivery address
Order Data
-
Products purchased
-
Order history
-
Product specifications
-
Delivery information
-
Payment data
-
Payment status
-
Transaction reference numbers
-
We do not store your full payment card details. Card payments are securely processed by our authorised payment providers
Enquiry and Project Data
-
Information submitted through contact forms
-
Quotation requests
-
Measurements
-
Drawings
-
Technical specifications
-
Photographs, images and other information provided in connection with bespoke products, quotation requests or customer enquiries
Technical Data
-
IP address
-
Browser type
-
Device information
-
Operating system
Usage Data
-
Information about how you use our website
Marketing Data
-
Your preferences regarding marketing communications
4. How We Collect Your Information
We may collect personal information when you:
-
Visit our website
-
Submit an enquiry form
-
Request a quotation
-
Place an order
-
Contact us by email
-
Contact us by telephone
-
Contact us via WhatsApp
-
Upload files, photographs or technical drawings in connection with an enquiry or order
-
Communicate with us through social media
-
Subscribe to marketing communications
5. How We Use Your Information
We use your personal data to:
-
Process and fulfil orders
-
Manufacture and supply bespoke products
-
Provide quotations and project advice
-
Communicate with you regarding enquiries and orders
-
Arrange delivery of products
-
Provide customer support
-
Manage guarantees and warranties
-
Improve our website, products and services
-
Analyse website performance and visitor behaviour. This may include the use of website analytics tools to help us understand how visitors use our website and improve the user experience.
-
Send marketing communications where you have consented to receive them
-
Prevent fraud and protect our business
-
Comply with legal and regulatory obligations
6. Legal Basis for Processing
Under UK GDPR, we rely on one or more of the following legal bases:
Contract
Where processing is necessary to fulfil an order, provide a quotation, or supply products and services requested by you.
Legal Obligation
Where processing is required to comply with legal, accounting, taxation, or regulatory obligations.
Legitimate Interests
Where processing is necessary for the legitimate interests of our business, including improving our services, responding to enquiries, managing customer relationships and preventing fraud, protecting our legal rights and resolving disputes.
Consent
Where you have provided consent, such as subscribing to marketing communications.
You may withdraw your consent at any time.
7. Sharing Your Information
We may share your personal data with:
-
Delivery companies and couriers
-
Payment processors
-
Website hosting providers
-
Analytics and marketing service providers
-
IT service providers
-
Professional advisers such as accountants, solicitors and insurers
-
Government authorities or regulators where required by law
We do not sell, rent or trade your personal information to third parties for marketing purposes.
We only share personal data where necessary and ensure appropriate safeguards are in place.
8. Service Providers
We require all third-party service providers to respect the security of your personal data and to process it only in accordance with our instructions and applicable data protection laws.
9. International Transfers
Some of our service providers may process personal data outside the United Kingdom.
Where this occurs, we ensure appropriate safeguards appropriate safeguards, such as approved contractual safeguards or other lawful transfer mechanisms are in place to protect your personal data in accordance with UK data protection laws.
10. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected.
Typically:
-
Order records may be retained for up to 7 years to comply with accounting and tax obligations.
-
Information relating to guarantees and warranties may be retained for the duration of the applicable guarantee period.
-
Enquiry and quotation information will typically be retained for up to 24 months.
-
Marketing preferences will be retained until you withdraw your consent or unsubscribe.
Where information is no longer required, it will be securely deleted or anonymised. We may retain information for longer where required to establish, exercise or defend legal claims.
11. Automated Decision Making
We do not use your personal data to make decisions based solely on automated processing that produce legal or similarly significant effects.
12. Your Rights
Under UK data protection law, you have the right to:
-
Access your personal data
-
Request correction of inaccurate or incomplete data
-
Request deletion of your personal data
-
Restrict processing of your personal data
-
Object to certain processing activities
-
Request transfer of your personal data to another organisation
-
Withdraw consent where processing is based on consent
-
Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise any of these rights, please contact us using the details provided in this Privacy Policy.
We may request proof of identity before responding to certain requests.
13. Cookies
Our website uses cookies and similar technologies to ensure the website functions correctly, improve user experience and analyse website performance. Some cookies are essential for the operation of our website, while others help us analyse website performance and improve your browsing experience.
Where required by law, we will obtain your consent before placing non-essential cookies on your device.
For further information, please refer to our Cookie Policy.
14. Data Security
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, alteration or disclosure.
These measures may include:
-
Secure website hosting
-
Encryption technologies where appropriate
-
Regular software and security updates where appropriate
-
Access controls and password protection
-
Restricting access to authorised personnel only
While we take reasonable steps to protect your information, no method of transmission over the internet can be guaranteed to be completely secure.
15. Third-Party Links
Our website may contain links to third-party websites.
We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies before providing any personal information.
16. Changes to This Policy
We may update this Privacy Policy from time to time.
Any updates will be published on this page and take effect immediately upon publication.
17. Contact Us
If you have any questions or wish to exercise any of your data protection rights regarding this Privacy Policy or how we process your personal data, please contact:
Redleys Ltd
Email: info@redleys.com
Telephone: 01629 363717
Address: Top Floor Office Suite, Holme Court, Bakewell, Derbyshire, DE45 1GQ
18. Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Information Commissioner's Office (ICO)
Website: https://ico.org.uk/
Telephone: 0303 123 1113
We would appreciate the opportunity to address your concerns before you contact the ICO, although you are under no obligation to do so.
Last Updated: June 2026
