Effective Date: October 2025
At CN Wholesale, we are committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, store, and share your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
CN Wholesale is a trading name operated within the United Kingdom. We act as the Data Controller for the personal data we collect and process in connection with our business operations.
For any data protection matters, please contact our Data Protection Officer (DPO):
Email: dpo_request@cn-wholesale.co.uk
2. The Information We Collect
We only collect information necessary to perform our business duties and provide you with the best service possible. This may include:
- Full name and contact details (email, phone, address)
- Company or business information (for trade accounts)
- Order and fulfilment details
- Payment and billing information (processed securely by third-party providers)
- Return or warranty claim details and communication history
- Courier tracking information for delivery updates
3. How We Use Your Data
Your data is used strictly for lawful business purposes, including:
- Processing and fulfilling orders
- Shipping and delivery management
- Processing returns, RMAs, and warranty claims
- Providing customer support and responding to enquiries
- Maintaining accurate transaction and account records
- Compliance with tax, audit, and legal obligations
4. Lawful Basis for Processing
We process personal data under one or more of the following lawful bases:
- Contractual necessity – to fulfil your orders and manage your account.
- Legal obligation – to comply with accounting, tax, and consumer law.
- Legitimate interests – to improve our services, prevent fraud, and manage communications.
- Consent – when you opt in to marketing communications or newsletters (you can withdraw consent at any time).
5. Data Sharing and Third Parties
We only share your data with trusted partners necessary to complete your order and provide our services. These may include:
- Shipping couriers and logistics providers
- Payment processors (e.g., Shopify Payments, PayPal, etc.)
- Customer service and warranty partners
- Technical providers hosting our website and data securely
We do not sell or rent your personal data to any third party.
6. Data Retention
We retain your personal data only as long as necessary for the purposes outlined above, or as required by law. Once no longer needed, data is securely deleted or anonymised.
7. Your Rights
Under the UK GDPR, you have the following rights:
- Access to your personal data (Subject Access Request)
- Rectification of inaccurate or incomplete data
- Erasure ("Right to be Forgotten")
- Restriction of processing
- Data portability
- Objection to processing (including marketing)
To exercise any of these rights, please contact our DPO at dpo_request@cn-wholesale.co.uk.
8. Data Security
We employ appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. All connections are encrypted, and payment details are handled securely by approved processors.
9. International Data Transfers
Where we use service providers located outside the UK, we ensure appropriate safeguards (such as the UK International Data Transfer Agreement or equivalent) are in place to protect your information.
10. Cookies and Website Tracking
Our website uses cookies to improve user experience, track performance, and provide secure login sessions. You can manage cookie preferences via your browser settings. For full details, please see our Cookie Policy.
11. Complaints
If you have concerns about how we process your data, please contact us first so we can resolve the issue. If you remain unsatisfied, you may contact the UK’s supervisory authority:
Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Telephone: 0303 123 1113
12. Updates to This Policy
We may update this GDPR Policy from time to time to reflect legal or operational changes. The latest version will always be available on this page.
Contact our Data Protection Officer:
Email: dpo_request@cn-wholesale.co.uk
