Privacy policy

CORTIJO OUTDOOR LIVING LTD is the controller of your personal information. We are registered in England and Wales under company number 17384696. Our registered office is 43 Firwood Drive, Tuffley, Gloucester, England, GL4 0AD.

For privacy questions or to exercise your rights, email hello@cortijooutdoorliving.com.

We may collect information you give us, including:

• your name, email address, telephone number and password-protected account details;
• basket, order, billing and delivery details;
• payment support information, but not your complete card details;
• delivery access, site, measurements and installation information; and
• messages, enquiries, complaints and other support records.

We also receive technical information when your device requests a page or service, such as IP address, request and error logs, browser or device type, operating system, referring page and request time.

Information normally comes directly from you or your device. It may also come from someone placing an order for you, our payment, delivery or installation providers, or public records where needed to manage a transaction or legal requirement.

• Contract and steps before a contract: to manage accounts, baskets, quotations, orders, payment support, delivery, installation, returns and customer service.
• Legal obligation: to keep required transaction and tax records, respond to lawful requests, protect consumer rights and meet other legal duties.
• Legitimate interests: to secure and operate the website, prevent fraud, diagnose faults, improve service, manage our business and establish or defend legal claims. We consider whether these interests are outweighed by your rights.
• Consent: only where we introduce an optional use that genuinely relies on consent. You may withdraw consent at any time without affecting earlier lawful use.

We share only what is reasonably needed with categories such as:

• commerce platform and account and order infrastructure providers;
• hosting and infrastructure providers used to run our online services;
• Stripe, which processes payments and applies its own privacy information;
• delivery and installation providers where needed to fulfil your order;
• IT, support and security providers working for us; and
• accountants, insurers, lawyers, regulators, courts and law enforcement where needed or required.

We do not sell your personal information. We may share information in connection with a business sale or reorganisation, subject to appropriate confidentiality and data protection safeguards.

We use the following cookies because they are necessary to provide the storefront, basket, sign-in and country selection you request:

We do not currently use analytics or advertising cookies. If we introduce non-essential technology, we will update this policy and obtain appropriate consent before using it where required.

Some service providers may process information outside the United Kingdom. Where UK data protection law requires it, we use a lawful transfer safeguard, such as UK adequacy regulations or approved contractual protections, and apply any additional measures that are appropriate. Contact us if you would like more information about the safeguard relevant to your information.

We use proportionate technical and organisational measures intended to protect personal information, including access controls and the security features of our service providers. No website or transmission method is completely secure, so we cannot guarantee absolute security.

We keep information only as long as reasonably needed for the purpose collected. We consider the life of an account or order, support and installation needs, legal and tax record duties, limitation periods, disputes, fraud prevention and security logs. We then delete or anonymise information unless the law requires or permits us to keep it.

Depending on the circumstances, UK data protection law may give you the right to ask for access to your information, correction, deletion, restriction, or transfer of information you provided. You may also withdraw consent where consent is the lawful basis.

You have the right to object to processing based on legitimate interests. We will stop unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims. These rights can have legal qualifications and exceptions. We may need to verify your identity before acting on a request.

Email us to exercise a right. You also have the right to complain to the Information Commissioner's Office. Visit ico.org.uk/make-a-complaint or call 0303 123 1113. We would welcome the chance to address your concern first, but you do not have to contact us before the ICO.

We do not make solely automated decisions about you that have legal or similarly significant effects.

We may update this policy when our services, providers or legal duties change. We will publish the revised policy here with a new effective date and provide a more prominent notice where a change materially affects how we use personal information.