Chateau Ltd operates the website www.chateau.co.uk and is committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal information when you browse our website, make a purchase, or contact us. We comply with UK data protection law including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using this website, you agree to the terms set out in this policy.

1. Information We Collect

We may collect and process the following types of personal information:

Information you provide directly:

Name
Billing and delivery address
Email address
Telephone number
Payment information (processed securely through third party payment providers)
Communication records such as enquiries and order updates

Information collected automatically:

IP address and device information
Browser type and operating system
Pages viewed, time spent on site, and referring sources
Cookies and tracking technologies (see Section 7)

Information from third parties

We may receive limited information through payment providers, delivery couriers, or digital marketing tools where necessary to complete your order or improve user experience.

2. How We Use Your Information

We use your information to:

Process and fulfil orders including payment, packaging, and delivery
Contact you regarding enquiries, order updates, returns, or support requests
Improve website performance, customer experience, and product offerings
Detect and prevent fraudulent or unlawful activity
Maintain accurate internal records
Send marketing communications where you have opted in (you may unsubscribe at any time)

We will only process your personal information where we have a lawful basis to do so, such as performance of a contract, legitimate interests, or your explicit consent.

3. Marketing and Communication Preferences

If you subscribe to our newsletter or mailing list, we may send you updates about new stock, offers, or news from Chateau. You may opt out at any time by clicking "unsubscribe" in any email or by contacting us using the details in Section 10.

We will never sell or share your information with unrelated third parties for marketing purposes.

4. Sharing Your Information

We may share your personal data with trusted third parties only when necessary for business operations, including:

Payment gateways and fraud-prevention services
Delivery and logistics companies
Website hosting and IT support providers
Analytics and website performance platforms (e.g. traffic analysis tools)
Professional advisers such as accountants or legal consultants where required

All third parties are required to protect your information and may only process it on our instructions.

5. Data Storage and Security

We take appropriate technical and organisational steps to keep your information secure. Data may be stored on secure servers within the UK or European Economic Area. Where data is processed outside the UK, we ensure appropriate safeguards are in place to protect your information.

While we take all reasonable precautions, no transmission of data over the internet is completely secure. You accept this when submitting information online.

6. How Long We Keep Your Information

We retain personal data only for as long as necessary for the purposes outlined in this policy. For example:

Order and account records may be retained for up to 7 years for tax and audit purposes
Email correspondence is retained as needed to support customer service
Marketing subscriptions are stored until you request removal

You may request deletion of your data at any time, except where we are legally required to keep it.

7. Cookies and Tracking Technology

This website uses cookies to improve your browsing experience, analyse site performance, and remember preferences such as your basket or login status.

You may disable cookies through your browser settings, but doing so may affect website functionality. A full Cookie Policy is available separately and may be updated from time to time.

8. Your Rights Under UK GDPR

You have the right to:

Request access to the personal data we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your data where legally permitted
Object to processing or request restriction of use
Transfer your data to another provider (data portability)
Withdraw consent for marketing at any time

To exercise any of these rights, contact us using the details below.

9. Children's Privacy

Our website and products are not intended for children and we do not knowingly collect personal information from individuals under 16 years of age.

10. Contact Details

If you have questions about this policy or wish to exercise your rights, you may contact us using the information on the 'Contact Us' page of out website.

11. Policy Updates

This policy may be updated periodically. Any changes will be posted on this page with a revised date. Continued use of the website will signify acceptance of the updated terms.