Who we are
This is the privacy notice of Reedsmore Ltd, trading as Trufford’s (the “Business”, “we”, “us”, “our”). We respect your privacy and are committed to protecting your personal data. This notice explains how we look after your personal data when you visit our website and when you buy from us, and tells you about your rights and how the law protects you.
Important information
This website is not intended for children and we do not knowingly collect data relating to children. Please read this notice together with any other privacy information we provide on specific occasions (for example, in checkout notices), as this notice supplements those and is not intended to override them.
1) Who is the controller and how to contact us
- Controller: Reedsmore Ltd (Company registered in England & Wales)
- Registered address: 114 Westminster Road, Macclesfield, Cheshire, SK10 3AJ, UK
- Website: truffords.com
- Email for privacy matters: contact@truffords.com
- Data Controller contact: Data Controller, Reedsmore Ltd, at the above email.
Third‑party links
Our website may include links to third‑party websites, plug‑ins and applications. Clicking those may allow third parties to collect or share data about you. We are not responsible for their privacy statements; please read their notices.
2) The data we collect about you
“Personal data” means any information about an individual from which that person can be identified.
We may collect, use, store and transfer the following categories:
- Identity Data: first name, last name, title.
- Contact Data: billing address, delivery address, email address, telephone number.
- Transaction Data: details about payments to and from you and other details of products you have purchased from us.
- Technical Data: IP address, login data, browser type and version, time zone setting and location, browser plug‑in types and versions, operating system and platform, and other technology on the devices you use to access the website.
- Profile Data: your account details (if you create one), purchase history, preferences, feedback, and survey responses.
- Usage Data: information about how you use our website and services.
- Marketing & Communications Data: your preferences in receiving marketing from us and your communication preferences.
- Aggregated Data: we also create and use aggregated (statistical) data for analytics. Aggregated data is not personal data unless it can identify you; if it does, we treat it as personal data.
We do not collect any Special Category Data (e.g., health, biometric, ethnicity) and we do not collect information about criminal convictions and offences.
If you fail to provide personal data
Where we need personal data by law or under a contract and you fail to provide it, we may not be able to perform the contract (for example, deliver your order). We’ll notify you if that’s the case.
3) How your personal data is collected
We use different methods to collect data:
- Direct interactions: you may give us Identity, Contact, and Transaction Data by placing an order, creating an account, subscribing to marketing, entering a competition or survey, or contacting us.
- Automated technologies: as you interact with our site, we automatically collect Technical and Usage Data using cookies, server logs, and similar technologies.
- Third parties: we may receive Technical, Payment, and Delivery Data from third parties such as payment processors, analytics providers, advertising networks, and delivery partners.
4) How we use your personal data and lawful bases
We will only use your personal data when the law allows. The table below explains purposes and lawful bases. We rely on Performance of a Contract, Legitimate Interests, Consent (for electronic marketing where required), and Legal Obligations.
| Purpose/Activity | Data types | Lawful basis |
| Create an account and register you as a new customer | Identity, Contact, Profile | Performance of a contract |
| Process and deliver your order (including payments, fees and charges), and arrange delivery/returns | Identity, Contact, Transaction, Profile, Marketing & Communications | Performance of a contract; Legitimate interests (to recover debts, prevent fraud) |
| Customer service and warranty/complaint handling | Identity, Contact, Profile, Transaction | Performance of a contract; Legal obligation (consumer law) |
| Manage our relationship with you (e.g., updates to terms/privacy, asking for reviews or surveys) | Identity, Contact, Profile, Marketing & Comms | Performance of a contract; Legal obligation; Legitimate interests (keep records updated and study how customers use products) |
| Administer and protect our business and website (troubleshooting, data analysis, testing, system maintenance, support, reporting, hosting) | Identity, Contact, Technical, Usage | Legitimate interests (running our business, IT services, network security, fraud prevention) |
| Deliver relevant website content and ads; measure or understand the effectiveness of advertising; develop products/services | Identity, Contact, Profile, Usage, Marketing & Comms, Technical | Legitimate interests (study how customers use products, grow our business, inform marketing) |
| Use of analytics (e.g., site performance, audience insights) | Technical, Usage | Legitimate interests (improve our website, products, marketing) |
| Send direct marketing via email/SMS (Trufford’s news, offers) | Identity, Contact, Marketing & Comms | Consent (where required) or Legitimate interests for existing customers (soft opt‑in). You can opt out anytime. |
| Comply with legal and regulatory obligations (e.g., tax, accounting, product safety, regulatory reporting) | Identity, Contact, Transaction | Legal obligation |
Marketing, opt‑out and preferences
You can ask us to stop sending marketing messages at any time by clicking the “unsubscribe” link in our emails or emailing contact@truffords.com. Opting out of marketing does not affect service emails about orders, deliveries, or legal notices.
Change of purpose
We will only use your personal data for the purposes we collected it for, unless we reasonably consider we need to use it for another compatible purpose; if we need to use it for an unrelated purpose, we will notify you and explain the legal basis.
5) Cookies
Cookies help our site work and help us understand performance. You can set your browser to refuse some or all cookies, or to alert you when websites set or access cookies. Some parts of the site may not work if you disable cookies. See our Cookie Policy for details of the cookies we use and how to control them.
6) Disclosures of your personal data (who we share it with)
We may share your data with:
- Service providers (processors): companies providing IT, hosting, ecommerce, payment, email, analytics, and delivery services who process data on our instructions.
- Payment processing: Stripe and/or PayPal (card processing, fraud prevention).
- Email marketing & automation: Omnisend (campaigns, flows, email/SMS delivery).
- Website hosting / ecommerce: WordPress + WooCommerce.
- Analytics & optimisation: e.g., Google Analytics, Meta Pixel.
- Fulfilment & couriers: e.g., Royal Mail, Evri, DPD.
- Professional advisers: lawyers, bankers, auditors, and insurers, who provide consultancy, banking, legal, insurance and accounting services.
- Authorities: HM Revenue & Customs, regulators and other authorities where required.
- Business transfers: third parties to whom we may sell, transfer, or merge parts of our business or assets. If a change happens, the new owners may use your personal data in the same way as set out in this notice.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. They may not use your personal data for their own purposes and may process it only for specified purposes under our instructions.
7) International transfers
Some of our external service providers may be based outside the UK, so their processing of your personal data will involve a transfer of data outside the UK. Where we transfer your data outside the UK, we ensure a similar degree of protection is afforded by using approved safeguards such as: (i) UK Addendum/IDTA to the EU Standard Contractual Clauses; and/or (ii) an adequacy regulation for the destination country, where applicable. If you want more information on the specific transfer mechanism, contact us.
8) Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know; they will only process your personal data on our instructions and are subject to a duty of confidentiality. We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.
9) Data retention – how long we keep your data
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including to satisfy any legal, regulatory, tax, accounting or reporting requirements. Typical retention periods we apply are:
- Order records (contracts, invoices, tax): 6 years from the end of the financial year of the transaction (statutory limitation & tax).
- Customer account data: kept while your account remains active; if inactive for 24 months, we will delete or anonymise unless we must retain for legal reasons.
- Customer service correspondence: 3 years from closure of the case.
- Marketing consent & preference records: kept while consent/soft opt‑in is valid and for 2 years after opt‑out (audit trail).
- Website analytics data: 14–26 months depending on tool settings. [ACTION: confirm tool and retention].
In some circumstances, you can ask us to delete your data (see Your rights below).
10) Your legal rights
Under data protection law, you have rights which may include:
- Access to your personal data.
- Rectification of inaccurate or incomplete data.
- Erasure (“right to be forgotten”) in certain circumstances.
- Restriction of processing in certain circumstances.
- Portability of your data to you or another controller where technically feasible (where our processing is based on consent or contract and carried out by automated means).
- Objection to processing where we rely on legitimate interests; and to direct marketing at any time.
- Withdraw consent at any time where we rely on consent for processing.
To exercise any of these rights, email contact@truffords.com. You won’t usually have to pay a fee, but we may charge a reasonable admin fee if a request is unfounded, repetitive, or excessive, or we may refuse to comply in these circumstances. We may need to request specific information to confirm your identity and to help us respond. We aim to respond within one month and will let you know if it will take longer for complex or multiple requests.
Complaints
We hope to resolve any privacy concerns. You also have the right to complain to the UK Information Commissioner’s Office (ICO): 0303 123 1113, or via https://ico.org.uk/global/contact-us/, or Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
11) Changes to this notice and your duty to inform us of changes
We may update this notice from time to time to reflect changes to our processing.
Historic versions are available on request. Please keep us informed if your personal data changes during your relationship with us.
12) Contact details for privacy queries
Email: contact@truffords.com
Postal: Data Controller, Reedsmore Ltd, 114 Westminster Road, Macclesfield, Cheshire, SK10 3AJ, UK.
We aim to respond within one month.