What we hold, and why.
Compound Cave is the data controller for the information you give us. We collect what an order needs and nothing else, and we never sell or share it for marketing.
What we collect
UK GDPR ART. 13 RECORD
| DATA | PURPOSE | LAWFUL BASIS | RETENTION |
|---|---|---|---|
| Name and delivery address | To pack and deliver your order | Contract | 6 years (tax record) |
| Email address | Order confirmation and transfer details | Contract | 6 years (tax record) |
| Email address (updates opt-in) | Restock and new-material notices, only if you tick the box | Consent | Until you unsubscribe |
| Order history | Traceability of the material supplied to you | Legal obligation | 6 years |
| Bank transfer reference | Matching your payment to your order | Contract | 6 years |
| Site analytics (aggregate) | Understanding which pages are used | Legitimate interests | 14 months |
Consent, not a mailing list
Restock and new-material notices are sent only if you tick the box. Consent is recorded with a timestamp, every message carries a one-click unsubscribe, and withdrawing it does not affect your order record.
Couriers and nobody else
Your name, address and phone number go to the carrier to make the delivery. Our email and hosting providers process data on our instruction under contract. We share nothing with advertising networks, data brokers or third-party marketers.
Access, correction, erasure, portability
Email us and we respond within one month. Tax and traceability records we are legally required to keep cannot be erased on request, but everything outside that can. You may complain to the Information Commissioner's Office at any time.
Data requests
info@compoundcave.co.uk. Put “data request” in the subject line. Include the order reference if your request concerns an order, so we can find the record without asking for more personal data than we need.