Privacy Policy

Last updated: 2 September 2026

Alderon ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your information when you visit https://alderon-uk.com, make a purchase from our store or otherwise interact with us, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Data Controller

Alderon is the data controller responsible for your personal data.

Contact: support@alderon-uk.com

2. Information We Collect

Information you provide directly:

• Full name
• Email address
• Postal address (billing and delivery)
• Phone number
• Payment details, which are processed securely by our payment providers — we never see or store your full card number
• Order history and preferences
• Communications with our customer service team, including reviews and feedback

Information collected automatically:

• IP address and the approximate location derived from it
• Browser type and version
• Device information
• Pages visited, products viewed and time spent on our site
• How you arrived at our site (for example, from a search engine or an advertisement)
• Cookies and similar technologies (see Section 9)

3. How We Use Your Information

We use your personal data for the following purposes:

• To process and fulfil your orders, including sharing your delivery details with our delivery partners
• To communicate with you about your orders, including dispatch and delivery updates
• To provide customer service, handle returns and respond to enquiries
• To send you marketing communications (see Section 5)
• To measure the performance of our website and advertising, and to improve our products and services
• To prevent fraud and ensure the security of our website
• To comply with our legal and regulatory obligations, including tax and accounting requirements

4. Legal Basis for Processing

Under the UK GDPR, we process your personal data on the following legal bases:

• Contractual necessity — to fulfil your order, deliver your goods and provide customer service
• Legitimate interests — to run and improve our business, secure our website, prevent fraud and, where permitted, send marketing to existing customers
• Consent — for marketing communications where consent is required, and for non-essential cookies
• Legal obligation — to comply with applicable UK laws, such as keeping tax and accounting records

5. Marketing Communications

We send email marketing only where you have opted in, or where you have bought from us and have not opted out of receiving news about similar products (the "soft opt-in" permitted under PECR). You can unsubscribe at any time using the link in every email or by contacting support@alderon-uk.com. We will keep a record of your preference so that we do not contact you again.

With your consent, we may also use advertising platforms to show you Alderon advertisements on other websites and social media, and to measure whether our advertising is effective. You can withdraw this consent at any time through our cookie preferences.

6. Sharing Your Information

We do not sell your personal data. We share it only with service providers who help us run our business and who may use it only for the purposes we specify:

• E-commerce platform: Shopify, which hosts our store and processes orders on our behalf
• Payment processors: Shopify Payments (including Shop Pay, Apple Pay and Google Pay) and any other payment provider you select at checkout
• Delivery partners: Evri, Royal Mail and DPD, who receive your name, delivery address and contact details in order to deliver your order
• Email marketing platform, used to send the communications described in Section 5
• Analytics and advertising platforms: Google (Google Analytics and Google Ads) and Meta (Meta Pixel), for measuring campaign performance and, with your consent, personalised advertising
• Customer service tools used to manage enquiries and returns
• Professional advisers such as accountants, and public authorities where we are required to do so by law

All service providers are bound by contracts requiring them to safeguard your data in accordance with the UK GDPR.

7. International Data Transfers

Some of our service providers are based outside the UK, including in Canada, the European Economic Area and the United States. When we transfer personal data outside the UK, we rely on one of the following safeguards: UK adequacy regulations (for example, for Canada and the EEA); the UK Extension to the EU-US Data Privacy Framework (the "UK-US Data Bridge") for certified US providers; or the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

8. Data Retention

We keep your personal data only for as long as necessary for the purposes described in this policy:

• Order and transaction records: 6 years after the end of the financial year in which the order was placed, as required by UK tax law
• Customer account and order history: while your account is active, and for 3 years after your last order unless you ask us to delete it sooner
• Marketing data: until you unsubscribe or withdraw consent, or after 2 years without any engagement
• Customer service correspondence: 2 years after the enquiry is resolved
• Website analytics data: up to 14 months

We may keep data for longer where necessary to resolve disputes or enforce our agreements.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Essential cookies are set automatically because the site cannot function without them. All other cookies are set only after you give consent through our cookie banner, and you can change or withdraw your choices at any time through the cookie preferences link on our site or through your browser settings.

• Essential cookies — required for the site to function, such as your basket and checkout (set by Shopify)
• Performance cookies — to analyse how visitors use the site (Google Analytics) — only with your consent
• Functionality cookies — to remember your preferences, such as language or region — only with your consent
• Marketing cookies — to deliver and measure personalised advertising (Meta Pixel, Google Ads) — only with your consent

10. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restrict processing — limit how we use your data
• Right to data portability — receive your data in a portable format
• Right to object — object to processing based on legitimate interests, including direct marketing
• Right to withdraw consent — at any time, where consent was the legal basis
• Right to lodge a complaint — with the UK Information Commissioner's Office (see Section 15)

To exercise any of these rights, please contact us at support@alderon-uk.com. We will respond within one month and will not charge a fee unless your request is manifestly unfounded or excessive. We may ask you to verify your identity before we act on your request.

11. Automated Decision-Making and Profiling

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our e-commerce platform uses automated fraud analysis to flag potentially fraudulent orders, which are then reviewed manually before any decision is made. With your consent, we may use your browsing and purchase behaviour to tailor the marketing you receive.

12. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including SSL/TLS encryption across our website, PCI DSS-compliant payment processing through our payment providers (we never store your full card details), restricted access to personal data on a need-to-know basis, and regular review of our security measures. However, no method of transmission over the internet is completely secure.

13. Children's Privacy

Our website is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the updated date, and we will notify you by email of any significant changes where we hold your contact details.

15. Complaints to the ICO

We would welcome the opportunity to resolve any concern first, so please contact us at support@alderon-uk.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office at any time:

Contact

For any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:

Email: support@alderon-uk.com