Privacy notice

Who is responsible

Outdoor Design Logistics Ltd is the controller for the information we use to run the CRUX shop and support our customers. Contact carol@odl.uk.com about privacy, or write to our warehouse address on the contact page. Our registered office is Bede House, Belmont Business Park, Durham, United Kingdom, DH1 1TW; company number 03885962.

Information we use

When you order, we receive your name, email address, telephone number, billing and delivery addresses, the products and options ordered, amounts paid, and payment references and status. Stripe collects the checkout details and provides the information needed to process your order. Our shop does not receive or store your full card number or card security code.

We also use information you give us in emails, calls, return requests and warranty enquiries. Browsing creates basket/session information, and hosting or security logs may record your IP address, browser details, requested pages, time and technical errors. You do not need to create a CRUX account to use this shop.

Why we use it

• Your order and support: to quote, take payment, deliver goods and deal with cancellations, returns and contractual warranty claims. Our basis is taking steps at your request or performing our contract with you.
• Required records: to meet accounting, tax and other legal obligations.
• Running and protecting the business: to keep the shop secure, investigate problems, prevent abuse and handle disputes, using our legitimate interests in reliable services and protecting customers and the business.

We need contact, payment and delivery information to fulfil an order. Without it, checkout or delivery may not be possible. We do not use shop order details to enrol you in a mailing list, and the shop does not run advertising trackers or Google Analytics.

Who receives information

Information is available to staff handling orders and enquiries and, where needed, our hosting, email and technical support providers, delivery carriers, payment provider Stripe, professional advisers and public authorities where disclosure is required. Only information needed for the relevant task should be shared. Order notifications and receipts are also held in our business email and order-handling records.

Stripe handles payment processing, security and fraud checks under its own responsibilities as well as providing services to us. Read Stripe’s privacy notice for its practices, payment data, automated fraud checks and rights.

International processing

Stripe operates internationally and may process information outside the UK. Its privacy notice describes the transfer mechanisms it uses, including adequacy arrangements and contractual safeguards. An overseas delivery also requires relevant name, address and shipment details to be shared with carriers and, where required, customs authorities in the destination country. Contact us if you need more information about recipients or safeguards for your order.

How long information is needed

Retention depends on the purpose: order and payment records support accounting and tax obligations; correspondence may be needed to complete an enquiry, return or repair; and relevant purchase or claim records may be needed during the ten-year warranty or a dispute. Legal record-keeping requirements, the age of the order and any outstanding claim determine when those records can be removed.

Session data is separate from permanent order records. The browser’s session cookie normally lasts for the browsing session; server-side session data is eligible for routine cleanup after seven days of inactivity. Email copies, order records and backups have separate retention arrangements. Contact us to ask what we hold and to request deletion where applicable; deletion rights do not override records we must keep by law.

Your rights and choices

Depending on the circumstances, you can ask for access to your data, correction, deletion, restriction of use or a portable copy. We may need to verify your identity before acting on a request.

You have the right to object to processing based on our legitimate interests. Email carol@odl.uk.com and explain your request. We will consider the circumstances and explain any lawful reason for continuing the processing.

You can also complain directly to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would welcome the opportunity to resolve a concern with you, but contacting us first is not a condition of making a complaint.

See our cookie information for browser controls. If the way this shop uses information changes, we will update this notice and provide additional information or request consent where required.