Privacy Policy for The Cast Iron Outlet
Last Updated: 8 July 2025
1. Introduction
Welcome to The Cast Iron Outlet. We are committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect the personal data you provide to us when you use our website, www.castironoutlet.co.uk (our "Site"), or otherwise interact with us.
The Cast Iron Outlet is a trading name of Fornacis UK Limited, company number 15728236 which is the data controller responsible for your personal data.
Our registered address is Holyhead Road, Ketley, Telford, UK. TF1 5AD.
2. The Data We Collect About You
We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:
- Identity Data: Includes first name, last name, and title.
- Contact Data: Includes billing address, delivery address, email address, and telephone numbers.
- Financial Data: Includes payment card details.
- Transaction Data: Includes details about payments to and from you and other details of products you have purchased from us.
- Technical Data: Includes your internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Usage Data: Includes information about how you use our website, products, and services. This includes data collected via Google Analytics.
- Marketing and Communications Data: Includes your preferences in receiving marketing from us and your communication preferences.
3. How We Collect Your Data
We use different methods to collect data from and about you, including through:
- Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms on our Site or by corresponding with us by post, phone, or email. This includes data you provide when you:
- Purchase products from our Site;
- Create an account on our website;
- Subscribe to our newsletter;
- Request marketing to be sent to you;
- Give us feedback or contact us.
- Automated Technologies: As you interact with our website, we will automatically collect Technical Data about your equipment and browsing actions. We collect this personal data by using cookies and other similar technologies. Our Cookie Policy has more details.
- Third Parties: We may receive personal data about you from various third parties, such as analytics providers like Google.
4. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
| Purpose/Activity | Type of Data | Lawful Basis for Processing |
|---|---|---|
| To process and deliver your order | Identity, Contact, Financial, Transaction | Performance of a contract with you |
| To manage our relationship with you | Identity, Contact, Marketing & Communications | Performance of a contract; Necessary for our legitimate interests (to keep our records updated and to study how customers use our products) |
| To improve our website, products, and user experience | Technical, Usage | Necessary for our legitimate interests (to define types of customers for our products, to keep our website updated and relevant) |
| To administer and protect our business and this Site | Identity, Contact, Technical | Necessary for our legitimate interests (for running our business, provision of IT services, network security) |
| To deliver relevant website content and advertisements to you and measure the effectiveness of the advertising we serve | Identity, Contact, Usage, Marketing & Communications, Technical | Necessary for our legitimate interests (to develop our products/services and grow our business) |
Google Analytics: We use Google Analytics to analyse the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered is used to create reports about the use of our website. Google's privacy policy is available at: https://www.google.com/policies/privacy/.
5. Data Sharing
We may share your personal data with the parties set out below for the purposes outlined in the table above:
- Internal Third Parties: Other companies within the P.A.M. Building Group acting as joint controllers or processors.
- External Third Parties:
- Service providers acting as processors who provide IT and system administration services.
- Professional advisers including lawyers, bankers, auditors, and insurers.
- HM Revenue & Customs, regulators, and other authorities.
- Third-party delivery companies (e.g., couriers) to send you your order.
- Third-party payment gateways to process payments.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
6. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees and third parties who have a business need to know.
7. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.
8. Your Legal Rights
Under UK data protection law, you have rights including:
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data.
- Object to processing of your personal data.
- Request restriction of processing your personal data.
- Request transfer of your personal data.
- Right to withdraw consent.
If you wish to exercise any of the rights set out above, please contact us.
9. How to Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us at:
- Email: hello@castironoutlet.co.uk
- Postal Address: Holyhead Road, Ketley, Telford, UK. TF1 5AD.
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.