Privacy Policy

Last updated: 29th August 2025

1. Introduction

Crystal Foothill Electronics ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website, use our services, or interact with us.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

  • Name and contact details (email address, phone number, postal address)
  • Payment information (processed securely through third-party payment providers)
  • Order history and preferences
  • Account login credentials
  • Communication preferences

2.2 Technical Information

We automatically collect technical information including:

  • IP address and location data
  • Browser type and version
  • Device information
  • Website usage data and analytics
  • Cookies and similar technologies

3. How We Use Your Information

We use your personal data for the following purposes:

  • Processing orders and providing services
  • Customer support and communication
  • Marketing and promotional activities (with your consent)
  • Website improvement and analytics
  • Legal compliance and fraud prevention
  • Account management and security

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

  • Contract performance: To fulfil our contractual obligations to you
  • Legitimate interests: For business operations and service improvement
  • Consent: For marketing communications and non-essential cookies
  • Legal obligation: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

We may share your information with:

  • Service providers: Payment processors, delivery companies, and IT support
  • Legal authorities: When required by law or to protect our rights
  • Business partners: With your explicit consent for joint services

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against:

  • Unauthorised access or disclosure
  • Accidental or unlawful destruction
  • Loss, alteration, or damage

Our security measures include encryption, secure servers, and regular security assessments.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Generally:

  • Customer account data: Until account deletion or 7 years of inactivity
  • Order information: 7 years for tax and legal requirements
  • Marketing data: Until you withdraw consent or 2 years of inactivity
  • Website analytics: 26 months maximum

8. Your Rights

Under UK GDPR, you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your personal data
  • Restriction: Limit how we process your data
  • Data portability: Receive your data in a portable format
  • Object: Object to processing based on legitimate interests
  • Withdraw consent: For consent-based processing

9. Cookies and Tracking

Our website uses cookies and similar technologies. Please refer to our Cookie Policy for detailed information about:

  • Types of cookies we use
  • How to manage cookie preferences
  • Third-party cookies and tracking

10. International Transfers

We primarily process data within the UK and EU. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

  • Adequacy decisions by the UK government
  • Standard Contractual Clauses
  • Certification schemes and codes of conduct

11. Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal information from children under 16 without parental consent.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending you an email notification (if you have an account)
  • Displaying a prominent notice on our website

13. Contact Information

For questions about this privacy policy or to exercise your rights, please contact us:

  • Email: [email protected]
  • Phone: 6661 229 4513
  • Post: Crystal Foothill Electronics, 42 High Street, Manchester M1 2PQ, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data appropriately.

14. Data Protection Officer

If you have specific concerns about data protection, you can contact our Data Protection Officer at: [email protected]