Last updated: April 2026
Introduction
Richardson's of Norwich Ltd is committed to protecting the privacy and security of all our customers and website users. This policy explains how we collect, use, store and protect your personal data in line with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
By using our website, contacting us or making a purchase, you agree to the terms set out in this policy.
Who We Are
Richardson's of Norwich Ltd is the data controller for all personal data collected through our website and business operations. This means we are responsible for deciding how your personal data is used and protected.
Registered Address: 185 Plumstead Road, Norwich, NR1 4PN
Company Registration Number: [INSERT NUMBER]
Contact Email: info@richardsonsnorwich.co.uk
Telephone: 01603 434242
What Personal Data We Collect
We only collect information that is necessary to provide our services and process your orders. This may include:
- Personal details: Your name, billing address, delivery address, email address and telephone number.
- Order information: Details of the products and services you have purchased or enquired about.
- Payment information: We do not store your full card details. All payments are processed securely through trusted third-party payment providers.
- Communication records: Copies of emails, letters or phone call details when you contact us with enquiries or requests.
- Website usage data: Anonymous information about how you use our website, collected through cookies and analytics tools.
How We Use Your Data
We use your personal data only for the purposes for which it was collected, and always in line with legal requirements. We use your data to:
- Process and deliver your orders, including arranging delivery and processing payments.
- Respond to your enquiries and provide information about our products and services.
- Comply with legal obligations, such as keeping records for tax purposes.
- Improve our website, products and services based on feedback and usage data.
- Contact you regarding your order or important updates to our services or policies.
We will never use your personal data for marketing purposes unless you have given us explicit permission to do so, and you can withdraw this permission at any time.
Legal Basis For Processing Your Data
Under GDPR, we must have a legal reason to process your data. The main reasons we rely on are:
- Contract performance: Processing is necessary to fulfil our obligations under a contract with you (for example, delivering goods you have ordered).
- Legitimate interests: Processing is necessary for our legitimate business interests, provided this does not override your rights and freedoms.
- Legal obligation: Processing is necessary to comply with laws and regulations that apply to us.
- Consent: Where you have given us clear permission to use your data for specific purposes.
Who We Share Your Data With
We will never sell, rent or trade your personal data to third parties for marketing purposes. We only share your data with trusted partners when it is necessary to provide our services or fulfil your order, such as:
- Payment service providers (to process transactions securely).
- Delivery and courier companies (to deliver your goods).
- Our IT and website hosting providers (who store data on our behalf).
- Government or regulatory bodies, where we are legally required to do so.
All third parties are required to keep your data secure and use it only as instructed by us.
How Long We Keep Your Data
We only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Typically, we keep order and accounting records for a period of 7 years after your transaction is complete, in line with tax and legal requirements. Data used for marketing purposes is kept only until you unsubscribe or request deletion.
Your Rights
Under data protection law, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that any inaccurate or incomplete data is corrected.
- Erasure: Request that your data is deleted, where there is no compelling reason for its continued processing.
- Restrict processing: Request that we stop processing your data in certain circumstances.
- Data portability: Request to receive and reuse your data for your own purposes across different services.
- Object: Object to processing where we rely on legitimate interests or direct marketing.
To exercise any of these rights, please contact us using the details at the top of this policy. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at any time.
Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We also limit access to your data to those employees, agents, contractors and other third parties who have a business need to know.
Changes To This Policy
We may update this policy from time to time. Any changes will be posted on this page and, where appropriate, notified to you by email or other means. Please check back regularly to see any updates or changes.
Contact Us
If you have any questions, comments or requests regarding this privacy policy, please contact us at:
Email: info@richardsonsnorwich.co.uk
Telephone: 01603 434242
Address: 185 Plumstead Road, Norwich, NR1 4PN