International Transfers
Where personal information is transferred outside the United Kingdom,
we will ensure appropriate safeguards are in place in accordance with
UK GDPR and applicable data protection legislation.
Data Retention
We retain personal information only for as long as necessary to fulfil
the purposes for which it was collected and to comply with legal,
accounting and regulatory obligations.
Order and transaction records may be retained for up to six years where
required by law.
When information is no longer required, it will be securely deleted or
anonymised.
Keeping Your Information Secure
We take appropriate technical and organisational measures to protect
personal information against unauthorised access, misuse, loss or
disclosure.
Third parties processing information on our behalf must maintain
appropriate security standards and comply with applicable data
protection legislation.
Where legally required, we will notify the relevant supervisory
authority and affected individuals of any reportable personal data breach.