Smithers Privacy Policy: Your Data, Your Rights
Last updated: 8th April 2025]
We respect your privacy and are committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights under UK and EU data protection law (including GDPR).
Information We Collect and Why
We collect or use the following personal information to provide you with goods, services, and a better website experience:
✔️ For processing orders and delivering products:
- Names and contact details
- Billing and delivery addresses
- Purchase and account history
- Website usage data (e.g. user journeys, cookie tracking)
✔️ For managing customer accounts and guarantees:
- Order and communication history
- Records of consent
✔️ For marketing and service updates:
- Names and contact details
- IP address and location data
- Marketing preferences
- Website and app usage
- Consent records
✔️ For crime prevention and legal protection:
- Contact details
- Account and transaction history
✔️ For research and archiving purposes:
- Names and contact information
- Location and IP data
- Consent records
- Admin and research-related data
✔️ For recruitment:
- Name and contact details (address, email, phone)
Lawful Bases for Using Your Data
We process your personal data under the following lawful bases:
- Consent – When you’ve given us permission (e.g. newsletter signup, marketing)
- Legitimate Interests – For activities that help us run our business (e.g. improving your experience, customer service, promotions)
- Legal Obligation – To comply with UK law (e.g. HMRC requirements)
Where We Get Your Information
- Directly from you (e.g. when you place an order, sign up, contact us)
- Through cookies and analytics tools when you use our website
How Long We Keep Your Data
We retain your data for 1 year, unless required by law to keep it longer (e.g. tax records, fraud prevention). After this, your data is securely deleted.
Your Data Protection Rights
You have the following rights under data protection law:
- Right of access – Request copies of your personal data.
- Right to rectification – Ask us to correct inaccurate or incomplete data.
- Right to erasure – Request deletion of your data in certain situations.
- Right to restrict processing – Ask us to limit how we use your data.
- Right to object – Object to how we use your data.
- Right to data portability – Ask us to send your data to you or another organisation.
- Right to withdraw consent – Withdraw your permission at any time, where we rely on consent.
We’ll respond within one calendar month of receiving your request. You will not have to pay a fee to exercise your rights.
To exercise your rights, contact us at [insert contact email or link to contact page].
How to Complain
If you're unhappy with how we use your data:
- Please contact us first – we’ll do our best to resolve any issues.
- If you're still not satisfied, you can contact the UK’s Information Commissioner’s Office (ICO):
ICO Contact Details:
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Make a complaint online