Privacy and Cookies - Clayaround

Last updated: [14^th August 2026

1. Who we are Clayaround.com operates the website Clayaround.co.uk ( com) [The Website]

We are the data controller responsible for personal data collected through the Website.

Our details are:

Legal name: Clayaround.com
Registered address:Larkrise, Garthmyl, Montgomery, Powys, SY15 6SB]
Email: letmeknow@clayaround.com

For data-protection enquiries, please contact us using the details above.

2. Personal data we collect

Depending on how you use the Website, we may collect:

Your name and contact details, such as email address, telephone number and postal address.
Information you provide through contact forms, enquiries, account registration or subscriptions.
Details of purchases, bookings, orders or other transactions.
Payment and billing information. Payment card details may be processed directly by our payment provider and may not be stored by us.
Technical information, such as IP address, browser type, device information, operating system and approximate location.
Website usage information, such as pages visited, links clicked and referring website.
Marketing preferences and records of your communications with us.
Information contained in messages, reviews, feedback or other content you submit.

Please do not provide special-category personal data—such as health, biometric, religious or political information

3. How we obtain your data

We collect personal data:

Directly from you when you contact us, submit a form, create an account, place an order or otherwise use the Website.
Automatically through cookies and similar technologies.
From service providers supporting our Website or business.
From publicly available sources, where lawful and appropriate.

Where we obtain personal data from another source, we will provide any additional information required by applicable data-protection law.

4. How we use your personal data

We may use personal data to:

Provide, operate and administer the Website.
Respond to enquiries and provide customer support.
Process orders, bookings, payments or registrations.
Create and manage user accounts.
Send service-related communications.
Send marketing communications where legally permitted and, where required, with your consent.
Improve, personalise and secure the Website.
Detect, prevent and investigate fraud, misuse and security incidents.
Maintain business records and comply with legal and regulatory obligations.
Establish, exercise or defend legal claims.

5. Our lawful bases

We rely on one or more of the following lawful bases under the UK GDPR:

Purpose	Lawful basis
Providing a product or service you requested	Necessary for a contract
Responding to general enquiries	Legitimate interests, or steps taken at your request before entering a contract
Processing payments and orders	Necessary for a contract and legal obligations
Sending essential service communications	Necessary for a contract or legitimate interests
Sending optional marketing	Consent or legitimate interests where permitted by law
Website security and fraud prevention	Legitimate interests and, where applicable, legal obligations
Accounting, tax and regulatory records	Legal obligation
Analytics and optional tracking	Consent, where required

Where we rely on legitimate interests, those interests are operating and improving the Website, preventing fraud or communicating with existing customers]. We will not use legitimate interests where they are overridden by your rights and interests.

6. Marketing communications

We may send you marketing communications where permitted by law.

You can unsubscribe at any time by:

Clicking the unsubscribe link in a marketing email;
Contacting us at Pennyonly@theraftersmind.co.uk

Unsubscribing from marketing will not stop essential messages relating to a purchase, account, booking or service you have requested.

7. Who we share personal data with

We may share personal data with:

Website hosting, security and technology providers.
Payment processors and financial institutions.
Delivery, fulfilment or booking providers.
Customer-support and communications providers.
Email marketing providers.
Analytics and advertising providers, where permitted and where you have provided any required consent.
Professional advisers, such as lawyers, accountants and insurers.
Regulators, law-enforcement bodies or courts where required or permitted by law.
A buyer, investor or successor in connection with a business sale, restructuring or similar transaction.

Our service providers may process personal data only for authorised purposes and under appropriate contractual arrangements.

We do not sell your personal data.

8. International

We do not ship to any country outside of the UK.

Our digital products and downloads may be purchased and accessed by customers in the United Kingdom and Europe. We may restrict availability where required by law, licensing conditions, tax rules or other regulatory requirements. If you access the Website from outside the UK, you do so at your own initiative and are responsible for complying with local laws that apply to you.

Some of our service providers may process personal data outside the UK. Where this occurs, we use a lawful transfer mechanism and appropriate safeguards as required by applicable UK data-protection law

9. How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including to meet legal, accounting, tax, reporting and dispute-resolution requirements.

Our usual retention periods are:

Enquiry and contact records: 12 months
Customer and transaction records: 6 years
Marketing preferences and suppression records: until consent is withdrawn.
Account information: while the account is active then delete after 12 months of inactivity.
Website and security logs: 90 days
Cookie and analytics data: 2 years

When the applicable retention period ends, we securely delete or anonymise the data unless we have a lawful reason to retain it for longer.

10. Cookies and similar technologies

The Website may use cookies and similar technologies.

We use:

Strictly necessary cookies to operate, secure and provide requested features of the Website.
Preference cookies to remember settings such as language or display preferences.
Analytics cookies to understand how visitors use the Website.
Marketing cookies to measure advertising or provide personalised advertising, where applicable.

Non-essential cookies will be used only where you have given the required consent. UK rules generally require organisations to explain what cookies do and obtain consent before setting non-essential cookies; strictly necessary cookies may be exempt in limited circumstances.

11. Your data-protection rights

Subject to legal exceptions, you may have the right to:

Request access to your personal data.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data.
Request restriction of processing.
Object to processing based on legitimate interests or direct marketing.
Request data portability where applicable.
Withdraw consent where processing relies on consent.
Request information about automated decision-making and profiling, where applicable.

To exercise a right, contact us at letmeknow@clayaround.com We may need to verify your identity before completing a request.

We normally respond within one month. This period may be extended by up to two further months where a request is complex or numerous, in which case we will explain why.

13. Children’s data

We do not knowingly collect personal data from children without appropriate consent or authorisation. If you believe a child has provided us with personal data, please contact us at Pennyonly@thecraftersmind.co.uk.

14. Data security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no online transmission or storage system can be guaranteed to be completely secure. If we become aware of a personal-data breach, we will assess it and take any steps required by applicable law.

15. Third-party websites

The Website may contain links to third-party websites, applications or services. We are not responsible for their privacy practices. You should read the privacy policies of third-party websites before providing them with personal data.

16. Changes to this policy

We may update this policy from time to time. The latest version will be published on this page with the revised date.

17. Complaints

Please contact us first if you have concerns about how we use your personal data.

You also have the right to complain to the UK Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk