Privacy Policy

1. Introduction

CASTROS CONVENIENCE STORE LIMITED ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or contact us.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website, you consent to the practices described in this policy.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information when you contact us:

• Name and contact details (email address, phone number)
• Information you provide in your messages or enquiries
• Any other information you choose to provide

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and browser type
• Device information
• Pages visited and time spent on our website
• Referring website addresses

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries: We use your contact information to reply to your messages and questions.
• To improve our services: We analyse website usage to enhance user experience.
• To communicate with you: We may send you updates about our services if you have consented to receive them.
• To comply with legal obligations: We may process your data to comply with applicable laws and regulations.

4. Legal Basis for Processing (GDPR)

Under the UK GDPR, we process your personal data based on the following legal grounds:

• Consent: When you provide your information through our contact form, you consent to us processing it to respond to your enquiry.
• Legitimate Interests: We process data to improve our website and services, provided this does not override your rights.
• Legal Obligation: We may process data to comply with legal requirements.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We may share data with trusted service providers who assist us in operating our website (e.g., hosting providers).
• Legal Requirements: We may disclose your information if required by law or to protect our rights.
• Business Transfers: In the event of a merger or acquisition, your data may be transferred.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Enquiry data: Retained for 12 months after our last communication
• Website analytics: Retained for 26 months
• Legal compliance data: Retained as required by applicable law

8. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. We use:

• Essential Cookies: Required for the website to function properly
• Analytics Cookies: Help us understand how visitors interact with our website

You can control cookies through your browser settings. Please note that disabling cookies may affect website functionality.

9. Your Rights (GDPR)

Under the UK GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us using the details below.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., Google Maps, social media). We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.

11. Children's Privacy

Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.