Privacy policy

This Privacy Policy describes how Iron-Mills LTD ("we", "us", "our") collects, uses and shares your personal information when you visit or make a purchase from iron-mills.co.uk (the "Site").

1. Personal information we collect

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies installed on your device.
As you browse the Site, we also collect information about the individual pages or products you view, the websites or search terms that referred you to the Site, and how you interact with the Site.
We refer to this automatically collected data as "Device Information".

We collect Device Information using the following technologies:

  • Cookies – small data files placed on your device, often including an anonymous unique identifier. For more information, and for instructions on disabling cookies, visit www.allaboutcookies.org.
  • Log files – these track actions taken on the Site and record data including your IP address, browser type, internet service provider, referring and exit pages, and date/time stamps.
  • Web beacons, tags and pixels – electronic files that record how you browse the Site.

When you make a purchase or attempt to make a purchase, we also collect certain information from you, including your name, billing address, shipping address, payment information (including card details), email address and telephone number. We refer to this as "Order Information".

Where we refer to "Personal Information" in this Policy, we mean both Device Information and Order Information.

2. How we use your personal information

We use the Order Information we collect to fulfil orders placed through the Site – including processing payment, arranging shipping and customs clearance, and providing invoices and order confirmations. We also use this information to:

  • communicate with you about your order;
  • screen orders for potential risk or fraud;
  • where you have agreed to it, send you information or advertising about our products and services.

We use Device Information to help screen for potential risk and fraud (in particular your IP address), and more generally to improve and optimise the Site – for example by analysing how customers browse and interact with it, and by assessing the performance of our marketing campaigns.

3. Legal basis for processing

Under the UK GDPR and the EU General Data Protection Regulation, we process your personal data on the following bases:

  • Performance of a contract – to process and deliver your order.
  • Consent – for example, where you subscribe to our mailing list or accept marketing cookies. You may withdraw consent at any time.
  • Legitimate interests – fraud prevention, improving the Site, and providing customer service.
  • Legal obligation – for example, retaining transaction records for tax and accounting purposes.

4. Sharing your personal information

We share your personal information with third parties who help us operate our business, as described above. For example:

We may also share your personal information to comply with applicable laws and regulations, to respond to a lawful request for information, or otherwise to protect our rights.

5. Behavioural advertising

As described above, we may use your personal information to show you targeted advertisements or marketing communications we believe may interest you. For more information about how targeted advertising works, see the Network Advertising Initiative's educational page at networkadvertising.org.

You can opt out of targeted advertising here:

You can also opt out of some of these services through the Digital Advertising Alliance's portal at http://optout.aboutads.info/.

6. International transfers

Your personal information may be transferred to, and processed in, countries outside the United Kingdom and the European Economic Area – including Canada and the United States – by the service providers described above. Where this happens, we rely on appropriate safeguards such as UK and EU approved standard contractual clauses or adequacy decisions.

7. Data retention

We retain Order Information for as long as necessary to fulfil the purposes described in this Policy, and to meet our legal, accounting and tax obligations. You may ask us to delete information we are not legally required to keep.

8. Your rights

If you are a resident of the United Kingdom or the European Economic Area, you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected or updated;
  • request erasure of your data;
  • object to, or request restriction of, certain processing;
  • request portability of your data;
  • withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at info@iron-mills.co.uk.

If you believe we have not handled your data properly, you also have the right to complain to the UK Information Commissioner's Office (ico.org.uk), or to your local supervisory authority if you are in the EEA.

9. Do Not Track

Please note that we do not alter the Site's data collection and use practices when we receive a Do Not Track signal from your browser.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons. The current version is always available on this page.

11. Contact us

For more information about our privacy practices, to ask a question, or to make a complaint, contact us at:

Iron-Mills LTD
Re: Privacy Compliance Officer
Unit 8 Windsor Courtyard, 83 Prestbury Road, Cheltenham, GL52 2DR, United Kingdom
Email: info@iron-mills.co.uk