Privacy Policy

This privacy notice explains how Cawdor Worktops (“we”, “us”, “our”) collects, uses and protects personal data when you use our website at www.cawdorworktops.co.uk, request a quote, book a showroom visit or otherwise interact with us. We are the “data controller” under the UK GDPR and Data Protection Act 2018.

1. Who we are

Cawdor Worktops is the online arm of the Cawdor Group. Our showroom and fabrication facility is at Cawdor House, London Road, Woolmer Green, Hertfordshire SG3 6JE.

• Phone: 01438 818 599
• Email: [email protected]

2. What personal data we collect

We collect the following categories of personal data, depending on how you interact with us:

When you request a quote

• Your name, email address and phone number
• Your installation address and postcode
• Kitchen worktop measurements, product selections and any files you upload (e.g. kitchen plans)
• Your preferred kitchen-ready date
• A draft of your in-progress quote (captured automatically as you type, so we can help if you experience a submission problem). Each browser is identified by a random identifier stored in your browser's local storage — this is not linked to your name until you submit the form.

When you book a showroom visit

• Your name, email address and phone number
• Your postcode and address (optional, used to calculate distance to our showroom)
• The date, time and materials you want to view

When you register for a trade account

• Your business name, contact details and login credentials (password stored as a one-way hash)
• Your assigned trade tier (used to apply your discount)

Automatically when you browse

• Your IP address, browser type and pages visited (server logs, retained for diagnostics)
• Cookie and local-storage data described in section 7

3. How and why we use your data

4. Who we share your data with

We do not sell your data to third parties. We share limited data with trusted service providers (“processors”) that help us run our website and respond to your enquiry:

• Railway — hosts our website and database (servers within the EU).
• Cloudflare — content delivery network, DNS and DDoS protection.
• Resend — sends our transactional emails (quote confirmations, booking notifications).
• Ideal Postcodes — UK postcode lookup to help you enter your address accurately.
• Postcodes.io — calculates distance between your postcode and our showroom.
• Prism (supraai.co) — handles showroom booking availability and confirmations on our behalf.
• Microsoft Bing IndexNow — receives the public URLs of our product and blog pages so they appear in search results. No personal data is shared.
• Google Analytics 4 (Google Ireland Ltd) — measures aggregate website usage. Only loaded if you accept analytics cookies via our consent banner. IP addresses are anonymised.
• Microsoft Clarity (Microsoft Corporation) — captures anonymised session recordings and heatmaps so we can improve our user experience. Only loaded if you accept analytics cookies via our consent banner.
• CookieYes — provides our cookie consent banner and stores a record of your cookie preferences.
• Members of the Cawdor Group — our showroom team at Cawdor Stone Gallery, who may handle your quote, booking or installation.

We may also disclose personal data where required to comply with a legal obligation or to protect our rights, property or safety.

5. How long we keep your data

• Quote enquiries and showroom bookings: up to 3 years from your last interaction, to support warranty queries and repeat business.
• Completed orders and invoices: at least 6 years, to meet UK tax and accounting obligations.
• Abandoned quote drafts: up to 90 days, then deleted.
• Trade account data: for as long as your account is active, plus 12 months after it is closed.
• Server logs: typically 30 days.

6. Your rights

Under UK data protection law you have the right to:

• Be told what personal data we hold about you and request a copy
• Have inaccurate data corrected
• Ask us to delete your data (subject to our legal obligations)
• Restrict or object to certain uses of your data
• Receive your data in a portable format
• Withdraw consent at any time, where consent is the basis for processing

To exercise any of these rights, please email [email protected] or call us on 01438 818 599. We will respond within one month.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

7. Cookies and local storage

When you first visit our website, our cookie banner (provided by CookieYes) asks you which categories of cookies you accept. You can change your preferences at any time by clicking the cookie icon in the bottom corner of any page. We use the following categories:

Strictly necessary (always on)

• A session cookie that keeps you signed in if you have a trade account.
• A random identifier stored in your browser's local storage that links your in-progress quote to its draft record so we can help you if you get stuck.
• Cookies set by Cloudflare for bot protection and site security.
• The CookieYes cookie that remembers your consent choices.

These cookies are required for the site to function and do not need your consent.

Functional (local storage)

Your quote selections, measurements and extras are saved in your browser's local storage so you can continue where you left off across sessions. This data stays on your device until you clear it.

Analytics (only with your consent)

• Google Analytics 4 sets cookies (typically _ga and_ga_*) that allow us to count visits, see which pages are popular and understand how users move through the site. IP addresses are anonymised before processing.
• Microsoft Clarity sets cookies (typically _clck,_clsk, CLID, MUID) and records anonymised session replays and heatmaps so we can spot usability issues. Sensitive form inputs are masked.

These cookies only load if you accept the “Analytics” category in our consent banner. They do not directly identify you.

For a complete, always-current list of the individual cookies in use (including durations and providers), open the cookie banner and click “Show details”. You can clear cookies and local storage at any time in your browser settings.

8. How we protect your data

Our site uses HTTPS encryption end-to-end. Our database is hosted in a private network with restricted access, and only authorised members of the Cawdor team can see customer enquiries. Trade account passwords are stored as one-way hashes — we cannot see your password.

9. International transfers

Some of our service providers — including Google (Analytics) and Microsoft (Clarity) — may process data on servers outside the UK, including in the United States. Where personal data is transferred outside the UK or EEA, we rely on the UK's adequacy regulations (e.g. the UK-US Data Bridge) or appropriate safeguards such as the International Data Transfer Addendum to the EU Standard Contractual Clauses.

10. Children

Our services are aimed at adults purchasing kitchen worktops. We do not knowingly collect personal data from anyone under 16.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of the page shows when it was last revised. Significant changes will be flagged on our homepage.

See our terms & conditions for the contractual terms covering worktop quotes, supply and installation. To get in touch, visit our contact page.