Legal
Privacy Policy
Last updated: April 2025
1. Who We Are
This privacy policy applies to Clixaro Ltd (company number 17157098), a wholesale supplier registered in England and Wales. Our registered email address is hello@clixaro.co.uk. References to "we", "us" or "our" in this policy refer to Clixaro Ltd.
2. Information We Collect
We may collect and process the following personal data:
- Name, business name, and contact details (email address, phone number)
- Billing and delivery addresses
- Order history and account preferences
- Communications you send to us via email or our contact form
- Website usage data via cookies and analytics tools (see our Cookie Policy)
3. How We Use Your Information
We use the personal data we collect to:
- Process and fulfil your trade orders
- Manage your account and respond to enquiries
- Send transactional communications (order confirmations, dispatch notifications)
- Send marketing communications where you have consented or where we have a legitimate interest
- Comply with our legal and regulatory obligations
- Improve our website and services
4. Legal Basis for Processing
We process your personal data under the following lawful bases:
- Contract: Processing necessary to fulfil orders you have placed with us
- Legitimate interests: Improving our services, fraud prevention, and direct marketing to business customers
- Legal obligation: Compliance with applicable laws (e.g., tax, accounting)
- Consent: Where you have specifically opted in to receive marketing communications
5. Data Sharing
We do not sell your personal data. We may share it with trusted third parties only where necessary, including:
- Delivery and logistics partners to fulfil your orders
- Payment processors for secure transaction handling
- IT and software providers who support our operations
- Professional advisers (accountants, legal counsel) under confidentiality obligations
- Regulatory authorities where required by law
6. Data Retention
We retain personal data for as long as necessary to provide our services and comply with legal obligations. Order and account data is typically retained for 7 years in line with HMRC requirements. Marketing preferences are retained until you withdraw consent.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Request erasure of your data (where applicable)
- Object to or restrict processing of your data
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, please contact us at hello@clixaro.co.uk. We will respond within 30 days.
8. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All payment information is processed through PCI-DSS compliant payment providers — we do not store card details.
9. Complaints
If you have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
10. Changes to This Policy
We may update this privacy policy from time to time. When we do, we will revise the "last updated" date at the top of this page. We encourage you to review it periodically.