Privacy Policy

Who we are

This Privacy Policy explains how Cut To The Smoke Limited collects, uses and protects personal information when you visit or purchase from https://cuttothesmoke.co.uk.

Cut To The Smoke Limited is the data controller responsible for your personal information.

Our contact details are:

Cut To The Smoke Limited
176 Gosport Road
Fareham
Hampshire
PO16 0QJ
United Kingdom

Email: he***@**************co.uk
Telephone: 07539 747843
Company number: 12765676

Information we collect

Depending on how you use our website, we may collect:

• Your name, billing address and delivery address
• Your email address and telephone number
• Your account username and account details
• Details of the products you purchase
• Order, payment, delivery, refund and correspondence information
• Gift messages and recipient details supplied with gift orders
• Information submitted through contact, stockist, affiliate or registration forms
• Newsletter preferences
• IP address, browser type, device information and website activity
• Cookie and consent preferences
• Information needed to prevent fraud, spam and misuse of the website

We do not intentionally collect special-category personal data through the website. Please avoid including sensitive personal information in contact forms, gift messages or order notes unless it is necessary.

How we use your information

We use personal information to:

• Process and fulfil orders
• Take payments and issue refunds
• Deliver products to customers and gift recipients
• Create and manage customer accounts
• Respond to enquiries and provide customer service
• Send order confirmations, dispatch notifications and other service messages
• Manage returns, complaints and damaged-order claims
• Process wholesale, stockist and affiliate applications
• Send marketing communications where permitted
• Maintain our financial, tax and business records
• Protect the website against fraud, spam and security threats
• Understand how visitors use our website and improve its performance
• Comply with legal and regulatory requirements

Our lawful bases for processing

Under UK data-protection law, we must have a lawful basis for using personal information.

We rely on:

• Contract: when information is needed to process an order, take payment, arrange delivery, provide customer service or manage an account.
• Legal obligation: when we must keep financial records, respond to legal requests or meet our tax and regulatory responsibilities.
• Legitimate interests: when necessary to operate and improve our business, respond to enquiries, prevent fraud, protect the website and understand business performance, provided those interests do not override your rights.
• Consent: when you choose to receive marketing emails or accept optional statistics or marketing cookies. You may withdraw consent at any time.

Payments

Card payments and Square gift-card payments are processed securely by Square.

We do not receive or store your complete payment-card number. Payment providers may collect and process payment information according to their own privacy policies and legal responsibilities.

Deliveries

We share the information needed to deliver your order with Royal Mail and, where necessary, another delivery or fulfilment provider.

This normally includes the recipient’s name, delivery address and relevant contact or delivery information.

If you purchase a gift for another person, you are responsible for ensuring that you are permitted to provide their name, address and any gift message to us.

Newsletter and marketing

If you subscribe to our newsletter, we use your name, email address and preferences to send news, product information and offers.

Our email marketing is managed through Mailchimp. Your information may therefore be processed by Mailchimp for the purpose of delivering and managing these communications.

You can unsubscribe at any time by using the unsubscribe link in an email or contacting he***@**************co.uk.

Unsubscribing from marketing will not prevent us from sending essential messages about an existing order or account.

Cookies and analytics

Our website uses cookies and similar technologies to operate the shop, remember preferences, understand website use and, where consent is provided, support statistics and marketing services.

These services may include Google Analytics, Hotjar, Google reCAPTCHA and social-media integrations.

Optional cookies are controlled through our consent banner. Further information, including cookie durations and how to change your preferences, is available in our Cookie Policy.

Contact forms and business applications

When you contact us or submit a stockist, wholesale or affiliate application, we use the information provided to assess and respond to your enquiry.

This may include your name, business name, contact details, website, social-media information and the content of your message.

Submitting an application does not guarantee acceptance into a trade, stockist or affiliate programme.

Customer accounts

If you create an account, we store the information supplied in your account profile and your order history.

You can view or update certain information through your account. You may also ask us to close your account, although we may need to retain information connected with previous orders for legal, accounting or dispute-resolution purposes.

Who we share information with

We do not sell or rent personal information.

Where necessary, information may be shared with:

• Square for payment processing
• Royal Mail and other delivery providers
• Mailchimp for newsletter management
• Website hosting, maintenance and technical-support providers
• Analytics, cookie-consent, security and spam-prevention services
• Accountants, professional advisers and insurers
• Government bodies, regulators, law-enforcement agencies or courts where legally required
• A purchaser or adviser if our business is restructured, sold or transferred

Service providers only receive the information reasonably required to perform their services.

International transfers

Some service providers, including Square, Mailchimp, Google and social-media platforms, may process information outside the United Kingdom.

Where personal information is transferred internationally, we expect appropriate legal safeguards to be used in accordance with UK data-protection law.

How long we retain information

We retain information only for as long as reasonably necessary for the purpose for which it was collected.

Generally:

• Order and transaction records may be retained for up to six years after the relevant accounting period to meet tax, accounting and legal obligations.
• Customer-account information is retained while the account remains active and afterwards where required for legal or operational purposes.
• General enquiries may be retained for up to two years after the enquiry is resolved.
• Wholesale, stockist and affiliate information may be retained for the duration of the business relationship and for a reasonable period afterwards.
• Newsletter information is retained until you unsubscribe or withdraw consent. Limited information may be retained to ensure that your marketing preference continues to be respected.
• Security logs and technical records are retained only for as long as required for security, troubleshooting and fraud prevention.
• Cookie durations are explained in our Cookie Policy.

Information may be retained for longer where necessary to establish, exercise or defend legal claims.

How we protect your information

We use appropriate technical and organisational measures designed to protect personal information from unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic-storage system can be guaranteed to be completely secure.

Your data-protection rights

Depending on the circumstances, you may have the right to:

• Ask for a copy of the personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Ask us to erase your information
• Ask us to restrict how your information is used
• Object to certain uses of your information
• Receive certain information in a portable format
• Withdraw consent where processing is based on consent
• Object to direct marketing at any time

Some rights are subject to legal limitations or exemptions.

To exercise a right, contact he***@**************co.uk. We may need to confirm your identity before completing a request.

Automated decision-making

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects.

Children’s information

Our website and products are not directed specifically at children, and we do not knowingly collect personal information directly from children.

Complaints

Please contact us first if you have concerns about how we use your information, and we will try to resolve the matter.

You also have the right to complain to the Information Commissioner’s Office:

Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113

Changes to this policy

We may update this Privacy Policy when our services, providers or legal responsibilities change. The latest version will always be published on this page.

Last updated: 22 July 2026