Privacy Policy
1. Who We Are
CloudSpun Cashmere ("we", "us", "our") is the data controller for personal data collected via this website. If you have any questions about how we handle your data, please contact us at the address in our footer.
2. What Data We Collect
We collect the following categories of personal data:
- Identity data: first name, last name
- Contact data: email address, phone number, postal address
- Transaction data: details of your purchases and payment method (we do not store full card details)
- Technical data: IP address, browser type, pages visited (via analytics)
- Marketing data: newsletter subscription preferences
3. How We Use Your Data
We use your data to:
- Process and fulfil your orders
- Send transactional emails (order confirmation, dispatch notification)
- Respond to your enquiries
- Send marketing emails if you have opted in (you may unsubscribe at any time)
- Improve our website via aggregated analytics
4. Legal Basis for Processing
We process your data on the following legal bases: performance of a contract (to fulfil your order), legitimate interests (fraud prevention, analytics), and consent (marketing emails).
5. Data Sharing
We share your data only with third-party service providers who help us operate our business, including payment processors (PayPal, Razorpay), shipping carriers, and email delivery services. These parties are contractually bound to keep your data secure and use it only as directed by us.
We do not sell your personal data to third parties.
6. Cookies
We use essential cookies to operate our shopping cart and session management, and analytics cookies (e.g. Google Analytics) to understand how visitors use our site. You can disable non-essential cookies in your browser settings.
7. Data Retention
We retain order data for 7 years to comply with financial regulations. Marketing preferences are retained until you unsubscribe. You may request deletion of your account data at any time.
8. Your Rights
Under UK GDPR, you have the right to access, correct, delete, or port your personal data, and to object to or restrict its processing. To exercise any right, email us at the address in our footer.
9. Changes to This Policy
We may update this policy periodically. The current version will always be available on this page.
Last updated: 31 March 2026