Privacy policy

Privacy Policy

Information about the protection of your personal data in accordance with the General Data Protection Regulation (GDPR).

Last updated: 3 September 2026

Protecting your personal data is important to us. We process personal data confidentially, transparently, and only in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), where applicable.

1. Data Controller

The company responsible for processing personal data on this website is:

FORESTRY FIREWOOD LIMITED
Summit House, 10 Waterside Court
Albany Street, Newport NP20 5NT
United Kingdom

Email: INFO@FORESTRYFIREWOODLIMITED.COM
Telephone: +44 7472 144958
Company Registration Number: 12760853

2. Personal Data We Process

We process personal data only to the extent necessary to operate our website, process orders, and communicate with our customers.

Depending on how you use our website, the following categories of personal data may be processed:

First and last name
Billing and delivery address
Email address
Telephone number
Order and product information
Payment and transaction information
IP address
Browser, device, and operating system information
Technical usage and access data

3. Purposes and Legal Bases for Processing

We process personal data in accordance with applicable data protection laws and the legal basis relevant to each processing purpose.

Purpose of processing	Legal basis
Processing and fulfilling orders	Article 6(1)(b) GDPR — performance of a contract
Delivery and shipping of goods	Article 6(1)(b) GDPR — performance of a contract
Responding to customer enquiries	Article 6(1)(b) or (f) GDPR, where applicable
Compliance with statutory record-keeping obligations	Article 6(1)(c) GDPR — legal obligation
Maintaining website security	Article 6(1)(f) GDPR — legitimate interests
Improving and maintaining website functionality	Article 6(1)(f) GDPR, where applicable

Where processing is based on your consent, the legal basis is Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

4. Orders and Customer Accounts

When you place an order through our website, we process the information you provide to the extent necessary to handle, fulfil, and deliver your order.

This may include your name, billing and delivery address, contact details, order information, and details of your chosen payment method.

Providing certain information is necessary to enter into and perform the purchase contract. If you do not provide the required information, we may be unable to process your order fully.

5. Payment Processing

Payment and transaction information may be processed to complete your order.

Where payment is made by bank transfer, we use the information necessary to identify, allocate, and verify the payment.

Payment information is processed only to the extent necessary to complete the payment, reconcile the transaction, and comply with applicable legal obligations.

6. Disclosure of Personal Data

We disclose your personal data only where necessary to fulfil our contractual obligations, comply with legal requirements, or pursue legitimate interests, where permitted by law.

Recipients may include the following categories of service providers:

Shipping and transport companies responsible for delivering your order
Payment service providers and banks involved in payment processing
IT, hosting, and technical service providers
Tax advisers and other professional service providers, where applicable

Any further disclosure will take place only where an appropriate legal basis exists.

7. Shopify and Technical Service Providers

Our website operates using technical services and platforms required to run an online store, including hosting, e-commerce, analytics, and security services where applicable.

Personal data may be processed as part of providing these technical services, fulfilling orders, and ensuring the proper operation of our website.

Where external service providers process personal data on our behalf, appropriate contractual and data protection safeguards will apply as required by applicable law.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Strictly necessary cookies may be required for functions such as:

Shopping cart and order functionality
Checkout processes
Saving technical preferences
Security and session management
Maintaining the stable operation of the website

Where required by law, we will obtain your consent before using non-essential cookies or similar technologies.

You can manage your cookie preferences through your browser settings or our cookie management tools, where available.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected.

Statutory retention periods may also apply, particularly in relation to accounting, tax, and other legal obligations.

Once the applicable retention periods have expired, personal data will be deleted unless another lawful basis requires or permits continued storage.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against loss, destruction, alteration, and unauthorised access.

Where technically available and appropriate, sensitive data transmissions are protected using modern encryption technologies.

11. Your Rights

Subject to the applicable legal requirements, you may have the following rights under the GDPR:

Right of access — Article 15 GDPR
Right to rectification — Article 16 GDPR
Right to erasure — Article 17 GDPR
Right to restriction of processing — Article 18 GDPR
Right to data portability — Article 20 GDPR
Right to object — Article 21 GDPR
Right to withdraw consent — where processing is based on consent

To exercise your rights, please contact us using the details below.

Email: INFO@FORESTRYFIREWOODLIMITED.COM
Telephone: +44 7472 144958

12. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data infringes applicable data protection laws, you may have the right to lodge a complaint with the competent data protection supervisory authority.

For individuals in the United Kingdom, the relevant authority is generally the Information Commissioner's Office (ICO).

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom

You can find further information and current contact details on the ICO's official website.

Where the GDPR applies and a different supervisory authority is competent, you may also have the right to contact that authority.

13. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy when required by changes in applicable law, technological developments, or changes to the services we provide.

The version published on our website is the current version.