Last updated: January 2026

1. Introduction

This Privacy Policy explains how Nottage Timber Merchants (“we”, “us”, “our”) collects, uses, stores and protects your personal data when you:

• Visit our website

• Place an order or create an account

• Contact us

• Use any of our online services

We are committed to protecting your privacy and handling your data transparently and responsibly, in line with applicable data protection laws.

2. Who We Are

Nottage Timber Merchants is the trading name of Nottage Timber Ltd, a UK-based timber merchant.

If you have any questions about this policy or how your data is handled, you can contact us using the details provided at the end of this document.

3. The Data Protection Laws We Follow

We process personal data in accordance with:

• UK General Data Protection Regulation (UK GDPR)

• Data Protection Act 2018

• Privacy and Electronic Communications Regulations (PECR)

Where EU GDPR applies (for example, if you are based in the EU), equivalent protections apply.

4. Information We Collect When You Visit Our Website

When you visit our website, we automatically collect certain technical information, including:

• IP address

• Browser type and version

• Device type and operating system

• Time zone and general location (city/region level)

• Pages viewed and time spent on pages

• Referring website or search terms

This information is referred to as Device Information.

Purpose

We use Device Information to:

• Operate and secure the website

• Detect fraud or misuse

• Understand how visitors use our site

• Improve website performance and usability

• Measure marketing and advertising effectiveness

Device Information does not directly identify you as a named individual.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website.

Essential Cookies

Some cookies are strictly necessary for the website to function, such as:

• Shopping basket functionality

• Session management

• Security features

These cookies do not require consent.

Optional Cookies

We may also use optional cookies for:

• Analytics (e.g. website performance and usage)

• Marketing and advertising

• Conversion tracking

Where required by law, these cookies are only placed with your consent, which you can manage through our cookie banner or settings.

6. Information We Collect When You Place an Order or Create an Account

When you make a purchase, register for an account, or contact us, we may collect Personal Information, including:

• Name

• Billing and delivery address

• Email address

• Telephone number

• Account login details

• Order history and preferences

Payment Information

Payment details are processed securely via third-party payment providers.

• We do not store full card details

• Card data is handled by PCI-DSS compliant payment processors

• Where card details are saved, this is done using secure tokens

• We may retain limited reference data (e.g. last four digits, card type, expiry) for identification purposes

You can remove saved payment methods at any time through your account.

7. How We Use Your Personal Information

We use your Personal Information to:

• Process and fulfil orders

• Deliver goods and services

• Communicate about your order or account

• Provide customer support

• Prevent fraud and misuse

• Meet legal and accounting obligations

With your consent, we may also:

• Send marketing emails

• Notify you about products or services you may be interested in

You can opt out of marketing communications at any time.

8. Legal Basis for Processing

We process your data under one or more of the following lawful bases:

• Contract – to fulfil orders and provide services

• Legal obligation – for accounting, tax, and regulatory compliance

• Legitimate interests – to operate and improve our business

• Consent – for marketing and optional cookies

9. Sharing Your Information

We may share your data with trusted third parties who act as data processors, including:

• Website and ecommerce platform providers

• Payment processors

• Delivery and logistics partners

• IT and hosting providers

• Analytics and marketing platforms

These third parties only receive the data necessary to perform their services and are required to protect it.

We may also disclose data where required to:

• Comply with legal obligations

• Respond to lawful requests

• Protect our rights, property, or safety

10. Marketing, Analytics & Behavioural Advertising

We may use third-party services (such as Google, Meta, or similar platforms) to:

• Measure advertising performance

• Deliver relevant marketing content

This may involve sharing limited device or usage data, subject to cookie consent where required.

11. Data Retention

We retain personal data only for as long as necessary:

• Order and accounting records are retained in line with legal requirements

• Account data is retained while your account remains active

• Marketing data is retained until you withdraw consent

When data is no longer required, it is securely deleted or anonymised.

12. Your Data Protection Rights

You have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion of your data (where applicable)

• Restrict or object to processing

• Withdraw consent at any time

• Request data portability

To exercise your rights, please contact us using the details below.

13. Do Not Track Signals

Our website does not currently respond to browser “Do Not Track” signals.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices.

The most current version will always be available on our website.

15. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Nottage Timber Merchants
📞 01656 745959
📧 websales@nottagetimber.co.uk
📍 Heol Mostyn, Pyle, Bridgend, CF33 6BJ