Privacy Policy

1. Who We Are

This website is operated by CXF Ltd.

CXF Ltd
1st Floor, Saxon House
Hellesdon Park Road
Norwich
NR5 9JJ

Telephone: 01603 337147

For privacy-related enquiries, please contact CXF Ltd using the details above.

2. Information We Collect

We may collect and process personal information when you interact with us, use our website, submit an enquiry, request a quotation, create an account or place an order.

This may include:

• your name;
• business name;
• billing and delivery address;
• email address;
• telephone number;
• order details and purchase history;
• payment status and transaction information;
• messages, enquiries or quotation requests you send to us;
• technical information such as IP address, browser type, device type and website usage information.

We do not intentionally collect special category personal data through this website.

3. How We Use Your Information

We use personal information for the following purposes:

• to respond to enquiries and quotation requests;
• to process and fulfil orders;
• to manage customer accounts;
• to arrange delivery of Goods;
• to issue invoices, receipts, credits and order confirmations;
• to provide customer support;
• to keep records for accounting, tax and business administration;
• to improve our website, products and services;
• to protect our website and business from fraud, misuse and security threats;
• to comply with legal and regulatory obligations.

4. Lawful Bases for Processing

We rely on different lawful bases depending on how and why we use your personal information.

• Contract: where processing is necessary to provide quotations, process orders, supply Goods or manage our relationship with you.
• Legal obligation: where we are required to keep records for tax, accounting or regulatory purposes.
• Legitimate interests: where we need to run and protect our business, respond to enquiries, improve services, prevent fraud or manage customer relationships.
• Consent: where required, for example for certain cookies or optional marketing communications.

5. Orders and Payments

When you place an order through our website, we collect the information required to process that order, including your name, address, email address, telephone number, order details and payment method.

We do not store full card details on this website. Where card or online payment options are used, payments are processed by third-party payment providers. Those providers process payment information securely in accordance with their own terms and privacy policies.

If payment is made by bank transfer or on account, we may retain payment and invoicing records for business, accounting and legal purposes.

6. Delivery Providers and Order Fulfilment

We may share relevant order and delivery information with couriers, delivery companies, suppliers or fulfilment partners where necessary to supply Goods to you.

This information may include your name, delivery address, telephone number, email address and order details.

7. Contact Forms and Enquiries

If you contact us through a form, email or telephone, we will use the information you provide to respond to your enquiry and manage any resulting customer relationship, quotation or order.

We may retain enquiry records where necessary for business administration, customer service, legal or accounting purposes.

8. Cookies and Analytics

Our website may use cookies and similar technologies to help the website work properly, remember preferences, improve performance, understand website usage and support analytics or marketing activity.

Some cookies are necessary for the website and online shop to function, including basket, checkout, login and security cookies. Other cookies, such as analytics or marketing cookies, may require your consent.

You can manage your cookie preferences using the cookie banner or settings available on the website, where provided.

You can also control cookies through your browser settings. Blocking some cookies may affect how the website or checkout functions.

9. Marketing

We may contact business customers or enquirers about relevant CXF Ltd products or services where we have a lawful basis to do so.

Where consent is required for marketing communications, we will ask for it. You can opt out of marketing communications at any time by contacting us or by using any unsubscribe option provided in the communication.

10. Who We Share Information With

We may share personal information with trusted third parties where necessary to operate our business and provide our services. This may include:

• website hosting providers;
• email and IT service providers;
• payment processors;
• couriers and delivery companies;
• professional advisers, such as accountants or legal advisers;
• analytics and website performance providers;
• law enforcement, regulators or public authorities where required by law.

We do not sell personal information.

11. International Transfers

Some service providers we use may process personal information outside the United Kingdom. Where this happens, we expect appropriate safeguards to be in place to protect personal information in accordance with applicable data protection law.

12. How Long We Keep Information

We keep personal information only for as long as necessary for the purposes for which it was collected.

Retention periods may vary depending on the type of information and the reason we hold it. For example:

• order, invoice and accounting records may be kept for the period required for tax, accounting and legal purposes;
• customer service and enquiry records may be kept for as long as needed to manage the enquiry or customer relationship;
• website analytics data may be kept for a shorter period depending on the analytics service used;
• marketing preferences may be kept until you withdraw consent or opt out.

When information is no longer required, we will delete it or anonymise it where appropriate.

13. Security

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction.

However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

14. Your Rights

Under data protection law, you may have rights in relation to your personal information. These may include the right to:

• request access to the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your information in certain circumstances;
• request restriction of processing in certain circumstances;
• object to processing based on legitimate interests;
• request data portability in certain circumstances;
• withdraw consent where processing is based on consent.

The availability of these rights depends on the circumstances and the lawful basis for processing.

To exercise any of these rights, please contact CXF Ltd using the contact details above.

15. Complaints

If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the matter.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection matters.

Information Commissioner’s Office
Website: ico.org.uk

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page.

Last updated: May 2026