Privacy Policy
Data Controller
Andy Townsend
Collected Personal Data
GDPR Privacy Policy – ASARUM Ltd
1. Who We Are and Important Information
ASARUM Ltd ("we", "us", "our") is the data controller responsible for your personal data. Our registered office is 5 Chigwell Road, London, E18 1LR, United Kingdom. Company registration number: [insert number]. For all data matters, please contact Andy Townsend at andy@asarum-ltd.co.uk or 02381 924800.
This privacy notice explains how we collect, use, and protect your personal data when you visit our website or engage with our services. It supplements other notices and is not intended to override them.
We do not knowingly collect personal data from children under the age of 16. If you believe we have inadvertently collected such data, please contact us so we can delete it.
2. The Personal Data We Collect
We may collect, use, store, and transfer the following types of personal data:
Identity Data: first name, last name, username, marital status, title, date of birth, gender.
Contact Data: billing address, delivery address, email address, telephone numbers.
Financial Data: bank account and payment card details.
Marketing and Communications Data: preferences in receiving marketing and communication preferences.
Technical and Usage Data: IP address, browser type, usage statistics.
We do not collect special categories of personal data (e.g., race, religion, health data) or criminal conviction data.
3. How We Collect Your Personal Data
We collect data through:
Direct interactions (forms, correspondence by post, phone, email).
Automated technologies (cookies, server logs).
Third parties (analytics providers, payment processors).
4. How We Use Your Personal Data
We process your personal data under the following lawful bases:
Performance of Contract: to provide products or services.
Legitimate Interests: to manage our business, improve services, and market relevant offerings.
Legal Obligations: to comply with applicable laws.
Consent: for marketing communications and cookies.
We do not use your personal data for automated decision-making or profiling.
5. Marketing and Cookies
You may receive marketing communications if you have requested information or purchased services and have not opted out. You can withdraw consent at any time by contacting andy@asarum-ltd.co.uk.
We use cookies to improve website functionality and analytics. You can manage cookie preferences through your browser or our Cookie Policy.
6. Who We Share Your Personal Data With
We may share your data with:
Internal staff and contractors.
External service providers (IT, payment, marketing).
All third parties are required to respect your data and process it only under our instructions.
7. International Transfers
We do not transfer your personal data outside the United Kingdom or European Economic Area (EEA). If transfers are required, we will implement safeguards such as the UK International Data Transfer Agreement (IDTA) or EU Standard Contractual Clauses (SCCs).
8. Data Security
We implement appropriate technical and organisational measures to protect your data against loss, misuse, or unauthorised access. We have procedures to deal with suspected breaches and will notify you and regulators where legally required.
9. Data Retention
We retain personal data only as long as necessary:
Customer account data: 6 years after last transaction (to comply with HMRC requirements).
Marketing data: 2 years unless consent is withdrawn earlier.
We may anonymise data for statistical purposes, which may be used indefinitely.
10. Your Legal Rights
You have the following rights:
Access to your data.
Rectification of inaccurate data.
Erasure of data when no longer necessary.
Withdrawal of consent.
Data portability.
Restriction of processing.
Objection to processing based on legitimate interests.
Requests will be processed within one month. No fee is required unless requests are excessive.
11. Changes to This Notice
We keep this notice under regular review and will update it when necessary to reflect changes in law or our practices. This version was last updated on 05/12/2025.
12. Queries, Requests or Concerns
For all data protection matters, contact Andy Townsend at andy@asarum-ltd.co.uk. If unresolved, you may lodge a complaint with the Information Commissioner’s Office (ICO):
Phone: 0303 123 1113
Website: https://ico.org.uk/global/contact-us/email/
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, UK.