Privacy Policy

1. Who We Are

This privacy policy applies to Rimmington-Bridges Co. ("we", "us", "our"). We are the data controller responsible for your personal information.

If you have any questions about this policy or how we handle your data, please contact us at info@rimmingtonbridges.co.uk.

2. What Data We Collect

We may collect the following categories of personal data when you interact with our website or purchase from us:

• Name and contact details (email address, postal address)
• Payment information (processed securely by our payment provider — we do not store card details)
• Order and transaction history
• Communications you send us
• Website usage data (pages visited, browser type, IP address) via anonymised analytics

3. How We Use Your Data

We use your personal data only for the purposes for which it was collected, including:

• Processing and fulfilling your orders
• Sending order confirmations and shipping updates
• Responding to enquiries and customer service requests
• Complying with our legal and accounting obligations
• Improving our website and services

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases for processing your personal data:

• Contract — to fulfil an order you have placed with us
• Legal obligation — to comply with our financial and tax record-keeping duties
• Legitimate interests — to improve our services and respond to customer enquiries
• Consent — where you have explicitly agreed, such as for marketing communications

5. Data Processors

We use the following trusted third-party services to operate our business. Each acts as a data processor on our behalf and is bound by appropriate data protection agreements:

• Shopify — our e-commerce platform, used to process orders and payments. Shopify Inc. is certified under the EU–US Data Privacy Framework. See Shopify's Privacy Policy.
• Zoho Books — our accounting software, used to manage invoices and financial records. See Zoho's Privacy Policy.

These processors only handle your data to the extent necessary to provide their services to us, and are not permitted to use it for their own purposes.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes set out in this policy, or as required by law. Order and financial records are kept for a minimum of six years in line with HMRC requirements. After this period, your data is securely deleted or anonymised.

7. International Transfers

Some of our data processors (including Shopify and Zoho) may store or process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place — such as UK adequacy decisions, Standard Contractual Clauses, or equivalent frameworks — in accordance with UK GDPR requirements.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data where there is no lawful reason to retain it
• Right to restriction — to ask us to limit how we use your data
• Right to portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@rimmingtonbridges.co.uk. We will respond within one calendar month.

9. Cookies

Our website may use cookies and similar technologies to improve your browsing experience and collect anonymised usage data. You can control cookie settings through your browser preferences. Essential cookies required for the website to function cannot be disabled.

10. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
ico.org.uk/make-a-complaint
Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with a revised "last updated" date. We encourage you to review this policy periodically.