Privacy policy

This Privacy Policy describes how REDLAKE COMPANY (“we”, “us”, “our”) collects, uses, stores, discloses and protects your personal data when you visit or make a purchase from redlakecompany.co.uk (the “Site”) or otherwise interact with us (collectively, the “Services”). By using the Services, you agree to the collection and use of information as described.

1. Controller & Contact Information

Data controller: REDLAKE COMPANY
Email: info@redlakecompany.co.uk
If you are located in the UK or EEA and wish to contact our Data Protection Officer (DPO) or our UK representative, you can reach us at the email above.

2. What Personal Data We Collect

We collect different types of personal data depending on how you interact with us. These may include:

• Information you give us directly: name, address, phone number, email, order details, billing/shipping address, account credentials, customer support messages.

• Usage / automated data: device information, browser, IP address, cookies, analytics data, pages visited, items viewed or added to cart.

• From third parties: payment processors, shipping partners, marketing/advertising partners, social media integrations, external analytics providers.

3. Legal Bases for Processing & Purposes

We process your personal data under one or more of the following legal bases:

Where we rely on legitimate interests, we ensure that such interests are balanced against your rights and freedoms.

4. Cookies & Tracking Technologies

We use cookies, pixels and similar technologies to collect Usage Data and improve your experience.

• We may use necessary cookies, analytics cookies, marketing cookies.

• You can manage or disable cookies via your browser settings or via a cookie consent banner (if present).

• Disabling some cookies may affect your ability to use certain features of the Site.

5. Disclosure of Personal Data

We may share your data with:

• Service providers / processors: payment gateways, shipping carriers, customer service tools, marketing platforms, analytics providers.

• Affiliates or group companies (if applicable).

• Third parties you explicitly consent to (for example, for certain integrations or social logins).

• Legal / regulatory authorities if required by law or to protect rights and safety.

• In the event of a merger, acquisition, or restructuring, your personal data may be transferred as part of that transaction.

6. International Transfers

Your data may be transferred and stored outside the UK / EEA (for example, in the US or other jurisdictions).
We will implement appropriate safeguards, such as Standard Contractual Clauses (SCCs) or other mechanisms recognized under UK GDPR, to ensure that your data continues to receive adequate protection.

7. Retention of Your Data

We retain your personal data for as long as necessary to:

• provide the Services (e.g. until your order is completed and any obligations expire),

• comply with legal or tax obligations,

• resolve disputes or enforce our rights.

For some data (e.g. order history), this may be up to 5 years (or another period we specify). After that, data will be securely deleted or anonymized.

8. Your Rights

Depending on where you live, you may have the following rights subject to certain limitations:

• Access / know what personal data we hold about you

• Correction / rectification of inaccurate or incomplete data

• Deletion / erasure of your data

• Restriction of processing

• Data portability — receive a copy or transmit to another controller

• Withdrawal of consent (where processing is based on consent)

• Object to processing (e.g. for direct marketing)

To exercise your rights, contact us at the email above. We may request information to verify your identity before complying with a request. We will respond in accordance with applicable law (usually within one month).

If you are dissatisfied with our response, you may lodge a complaint with the UK Information Commissioner’s Office (ICO) or relevant supervisory authority.

9. Security

We implement technical and organizational measures such as encryption, secure access controls, regular security reviews to protect your data. However, no method is completely foolproof, and we cannot guarantee absolute security.

10. Children

Our Services are not intended for children under 16 years old. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy periodically. “Last updated” date at top will reflect the last revision.
We will post the updated version on our Site, and if changes are material, we may provide additional notice (e.g. via email).

12. Acceptance & Scope

By using the Services, you signify your acceptance of this Privacy Policy. If you do not agree, please do not use or access the Services.