Privacy Policy
Last updated: June 2026
This Privacy Policy explains how Cwt Tatws (“Cwt Tatws”, “we”, “us” or “our”) processes your personal data in connection with:
- your use of our website;
- purchases made through our website or in-store;
- communications with us by email, telephone or social media; and
- any other interaction you may have with us.
This Privacy Policy should be read alongside our Terms and Conditions and Cookie Policy.
For the purposes of applicable data protection law, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, we are the “data controller” of your personal data.
Who We Are
We are Cwt Tatws Cyf, a company registered in England and Wales.
- Company number: 08821221
- Registered office: Adeilad St Davids Building, Porthmadog, Gwynedd, LL49 9AP.
- Trading address: Cwt Tatws, Towyn, Tudweiliog, Pwllheli, Gwynedd, LL53 8PD.
- VAT number: GB180997952
If you have any questions about this Privacy Policy or how we process your personal data, you can contact us at: post@cwt-tatws.co.uk
What Personal Data We Collect
Personal Data Collected Directly From You
We may collect and process the following categories of personal data:
- Personal identification information, such as your name and title;
- Contact information, including billing address, delivery address, email address and telephone number;
- Account information, including login credentials where applicable;
- Transaction and payment information relating to purchases made through our website or in-store;
- Communications and correspondence with us;
- Marketing preferences and consent choices; and
- Any information you submit through forms, reviews, surveys, competitions or customer enquiries.
Personal Data Collected Automatically
When you visit our website, we may automatically collect certain technical and usage information, including:
- IP address;
- Browser type and version;
- Device type and operating system;
- Referral source;
- Website pages viewed and browsing activity;
- Date and time of access; and
- Cookie and tracking technology information.
Please see our Cookie Policy for further information on how cookies and similar technologies are used.
Personal Data From Third Parties
We may also receive certain personal data from trusted third parties, including:
- Payment service providers;
- Delivery and logistics providers;
- Fraud prevention and verification providers; and
- Website analytics and marketing providers.
How We Use Your Personal Data
We process your personal data for the following purposes:
Contractual Necessity
We process your personal data where necessary to fulfil a contract with you, including:
- Processing and fulfilling orders;
- Taking payment and issuing refunds;
- Arranging delivery or collection of products;
- Providing customer service and support; and
- Communicating with you regarding your order or account.
Legitimate Interests
We may process your personal data where necessary for our legitimate business interests, including:
- Operating, maintaining and improving our website and services;
- Preventing fraud, misuse and security incidents;
- Analysing website usage and customer behaviour;
- Managing customer accounts and purchase history;
- Responding to enquiries and complaints; and
- Protecting our legal rights and business interests.
Where we rely on legitimate interests, we ensure that your rights and freedoms are appropriately protected.
Legal Compliance
We may process personal data where necessary to comply with legal and regulatory obligations, including accounting, taxation, consumer protection and fraud prevention requirements.
Consent
Where required by law, we will obtain your consent before:
- Sending electronic marketing communications; or
- Placing non-essential cookies or tracking technologies on your device.
You may withdraw your consent at any time.
Marketing Communications
Where you have consented, or where otherwise permitted by law, we may send you marketing communications relating to our products, services, offers and updates by email or other electronic means.
You can unsubscribe from marketing communications at any time by:
- Clicking the unsubscribe link in our emails; or
- Contacting us at post@cwt-tatws.co.uk
We will never sell your personal data to third parties for their own marketing purposes.
Fraud Prevention and Security
To help protect our customers and business from fraud and unauthorised transactions, we may use fraud detection and verification tools when processing purchases.
Orders may be declined where payment verification fails or where suspicious activity is identified.
We may share relevant information with trusted fraud prevention providers where necessary for these purposes.
Payments made through our website are processed securely by third-party payment service providers. We do not store or have access to your full payment card details.
Who We Share Your Personal Data With
We may share your personal data with trusted third parties where reasonably necessary for the purposes described in this policy, including:
- Payment processors;
- Delivery and courier companies;
- Website hosting and IT providers;
- Marketing and analytics providers;
- Professional advisers including legal, accounting and insurance providers; and
- Regulatory authorities, law enforcement agencies or courts where required by law.
All third parties are required to process your personal data securely and in accordance with applicable data protection law.
International Transfers
Some of our third-party service providers may process personal data outside the United Kingdom.
Where this occurs, we will ensure that appropriate safeguards are implemented to protect your personal data in accordance with UK data protection law.
Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to satisfy legal, accounting, tax and regulatory requirements.
Retention periods may vary depending on the nature of the information and the purpose for which it was collected.
Your Rights
Under applicable data protection law, you may have the right to:
- Request access to your personal data;
- Request correction of inaccurate or incomplete data;
- Request erasure of your personal data;
- Restrict or object to certain processing activities;
- Request transfer of your personal data to another provider;
- Withdraw consent where processing is based on consent; and
- Lodge a complaint with the Information Commissioner’s Office (“ICO”).
These rights may be limited in certain circumstances where we are legally permitted or required to continue processing your personal data.
To exercise any of your rights, please contact us at post@cwt-tatws.co.uk
You may also contact the Information Commissioner’s Office if you have concerns about how your personal data is handled.
Children’s Privacy
Visitors under 16 years of age should not submit personal information to our website without consent from a parent or guardian.
We do not knowingly collect personal data from children under 16 without appropriate consent.
Website Security
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, misuse, disclosure or alteration.
However, no method of electronic transmission or storage can be guaranteed to be completely secure.
Third-Party Websites
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices, content or security of third-party websites and encourage you to read their privacy policies before providing any personal information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business practices, legal obligations or website functionality.
Any updates will be published on this page and will take effect immediately upon publication.
Contact Us
If you have any questions about this Privacy Policy or how we process your personal data, please contact:
Cwt Tatws Cyf
Towyn
Tudweiliog
Pwllheli
Gwynedd
LL53 8PD
Email: post@cwt-tatws.co.uk