Privacy Policy

Last updated: 4 November 2026

This policy explains how Cane Grove Co. Limited, a company registered in England and Wales (company number 13007801) with its registered office at 39 Grange Avenue, Kenilworth, CV8 1DD ("Cane Grove", "we", "us") collects and uses your personal data when you visit canegroveco.co.uk, buy from us, enter our promotions or sign up to hear from us. We are the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Questions about this policy or your data: contact@canegroveco.co.uk.

The data we collect

  • Contact and order details: your name, email address, phone number, billing and delivery addresses, what you ordered, order value and order history.
  • Payment details: payments are handled by our payment providers. We don't see or store your full card details.
  • Account details: if you create an account, your login details and saved preferences.
  • Communications: messages you send us, and your marketing preferences.
  • Device and browsing data: your IP address, browser and device type, pages viewed, and how you arrived at our site. This is collected through cookies and similar technologies.

How we use your data, and why we're allowed to

  • To process and deliver your order, handle returns and exchanges, and keep you updated about your order. Legal basis: performing our contract with you.
  • To run the Lucky Seven promotion: to check whether an order qualifies, carry out the draw, contact winners and process prize refunds. Legal basis: performing our contract with you (the promotion terms).
  • To answer your questions and provide customer service. Legal basis: our legitimate interests in helping our customers.
  • To send marketing emails or messages about new drops and offers. Legal basis: your consent. You can unsubscribe at any time using the link in any email or by contacting us.
  • To show you relevant adverts on social media and measure how well our adverts work, using tools such as the Meta (Facebook and Instagram) pixel and Conversions API. Legal basis: your consent, given through our cookie banner.
  • To keep our site secure and prevent fraud. Legal basis: our legitimate interests in protecting our business and customers.
  • To meet our legal obligations, such as keeping tax and accounting records. Legal basis: legal obligation.

Who we share your data with

We only share your data where it's needed for the purposes above. This includes:

  • Shopify, which hosts our store and processes orders, and Shopify apps we use for email, forms and automation.
  • Payment providers, to take payment and process refunds.
  • Delivery companies, to deliver your order.
  • Production and fulfilment partners, where needed to make or send your order.
  • Advertising and analytics partners such as Meta, where you have consented to marketing cookies.
  • Professional advisers, such as accountants, and authorities where the law requires it.

We never sell your personal data.

International transfers

Some of our service providers, including Shopify and Meta, process data outside the UK, for example in Canada, the United States and the European Economic Area. Where this happens, the transfer is covered by safeguards approved under UK law. These include UK adequacy regulations, the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework.

Cookies

Our site uses cookies that are essential for it to work, such as keeping items in your basket. With your consent, we also use analytics and marketing cookies. You can accept or reject non-essential cookies through our cookie banner, and change your choice at any time. You can also control cookies through your browser settings.

How long we keep your data

  • Order and transaction records: 6 years from the end of the financial year they relate to, as required for tax purposes.
  • Lucky Seven draw records: 12 months after the promotion ends, so we can answer any questions about the draw.
  • Marketing data: until you unsubscribe, or after 2 years without any engagement from you.
  • Customer service messages: up to 2 years after we last hear from you.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you
  • ask us to correct inaccurate data
  • ask us to delete your data
  • object to or restrict how we use your data
  • ask us to transfer your data to another organisation
  • withdraw your consent at any time, where we rely on consent

To use any of these rights, email contact@canegroveco.co.uk. We'll respond within one month. Some rights have exceptions, such as where we must keep data for legal reasons.

Complaints

If you're unhappy with how we've handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Children

Our site is not aimed at children under 13, and we don't knowingly collect their data. Our promotions are open to people aged 18 and over only.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.