Privacy Policy

About this policy

RocwooD Global Ltd (“RocwooD”, “we”, “us”, or “our) is a company registered in England and Wales (Company No. 09393138)

Registered Office: RocwooD House, Lightwood Green Industrial Estate, Overton, Wrexham, LL13 0HU.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, RocwooD Global Ltd is the Data Controller responsible for your personal data.

If you have any questions regarding this Privacy Policy, please contact

Email: policies@rocwood.co.uk

RocwooD Global Ltd is not legally required to appoint a Data Protection Officer under Article 37 UK GDPR. However, we have appointed an internal data protection lead responsible for overseeing data protection compliance within the organisation.

What personal data we collect

We may collect and process the following categories of personal data:

Identity and Contact Data    

                Full name

                Billing and delivery address

                Email address

                Telephone number

Transaction Data

                Order details

                Products purchased

                Payment confirmation

                Refund and return history

Technical Data

                IP address

                Browser type and version

                Device information

                Operating system

                Time zone setting

Usage Data

                Pages viewed

                Time spent on website

                Navigation paths

                Interaction with marketing emails

Marketing & Communications Data

                Your communication preferences

                Consent records

                Review invitations

Account data

                Username

                Encrypted password

                Saved preferences

We do not intentionally collect or process special category data (such as health information, biometric data, racial or ethnic origin, political opinions, religious beliefs, or criminal offence data).

How we collect your data

We collect personal data:

                When you place an order

                When you create an account

                When you contact customer services

                When you leave a review

                When you subscribe to marketing preferences

                Through cookies and tracking technologies (see our cookie policy: RocwooD Cookie Policy)

                From third-party platforms (e.g. Amazon, eBay, payment providers) where you purchase our products

Lawful basis for processing

We process your personal data under the following lawful bases:

Contractual Necessity:

To:

                Process and fulfil orders

                Deliver goods

                Manage returns and refunds

                Provide customer support

Legal Obligation

To:        

                Comply with tax and accounting regulations

                Prevent fraud

                Meet consumer protection regulations

Legitimate Interests

To:        

                Improve our website and services

                Prevent fraud and ensure website security

                Manage business operations

                Respond to enquiries

We ensure legitimate interests are balanced against your rights.

Consent

For:

                Marketing communications

                Non-essential cookies

                Review notifications

You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Where we require personal data to fulfil a contract or comply with a legal obligation, failure to provide such data may result in us being unable to process your order or provide our services.

Payments

We use secure third-party payment providers such as:

                Stripe

                PayPal

                Klarna

                Card payment processors

We do not store full card details.

Payment providers act as independent data controllers and process data in accordance with their own privacy policies.

Children & age restrictions

Our website and products are intended for individuals aged 18 and over.

We do not knowingly enter into contracts with individuals under the age of 18.

By placing an order on our website, you confirm that:

  • You are at least 18 years old; and
  • You have the legal capacity to enter into a binding contract.

We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verified parental consent, we will take appropriate steps to delete that information.

If you believe we may have collected personal data from a minor, please contact us at policies@rocwood.co.uk.

Reviews

If you opt in at checkout to receive a review request, we may share your name, email address and order details with our review partner (CusRev) solely to send you a single review invitation email.

This processing is based on your consent, which you may withdraw at any time.

Cookies & tracking

We use cookies in accordance with our cookie policy.

RocwooD Cookie Policy

Cookies may process:

IP address

Device identifiers

Browsing behaviour

Consent preferences

Strictly necessary cookies are processed under legitimate interests.

Analytics, marketing, and functional cookies are only set with your consent.

You may change your cookie preferences at any time using our cookie management tool.

Sharing your personal data

We may share your data with:

                Payment processors

                Courier and delivery providers

                IT and hosting providers

                Review platforms

                Analytics providers (e.g. Google Analytics)

                Advertising partners (e.g. Google Ads, Meta, TikTok)

                Accountants, auditors and professional advisers

                Regulatory or law enforcement bodies (where legally required)

We only share your data necessary for the intended purpose.

For delivery purposes, we share your name, delivery address, email address and telephone number with courier providers to enable fulfilment and tracking of your order.

International transfers

Some of our service providers may process data outside of the United Kingdom.

Where international transfers occur, we ensure appropriate safeguards are in place, including:

                UK International Data Transfer Agreements (IDTA)

                UK Addendum to Standard Contractual Clauses

                Adequacy Regulations issued by the UK Government

Data retention

We retain personal data only as long as necessary for:

                Contractual purposes

                Legal obligations

                Warranty and product liability purposes

                Fraud prevention

Account and marketing data is retained until you request deletion or withdraw consent.

Consent records are retained for compliance purposes.

Your data protection rights

Under UK GDPR you have the right to:          

                Access your personal data

                Rectify inaccurate data

                Request erasure (“right to be forgotten”)

                Restrict processing

                Object to processing

                Data portability

                Withdraw consent (where applicable)

To exercise your right, contact policies@rocwood.co.uk

We may request identity verification before fulfilling your request.

We will respond to all valid data subject requests within one month of receipt. If your request is complex or numerous, we may extend this period by up to two additional months, and we will inform you accordingly. Requests are free of charge unless they are manifestly unfounded or excessive.

Automated decision making

We do not carry out fully automated decision-making that produces legal or similarly significant effects.

We may use automated systems for fraud detection and marketing optimisation.

Security

We implement appropriate technical and organisational measures to protect your data, including:

                SSL encryption

                Secure servers

                Access controls

                Regular security monitoring

However, no system is entirely secure, and transmission of your data is at your own risk.

In the event of a personal data breach that is likely to result in a risk to individuals’ rights and freedoms, we will notify the Information Commissioner’s Office within 72 hours where legally required and will inform affected individuals where necessary.

Complaints

If you are dissatisfied with how we process your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: www.ico.org.uk

RocwooD Global Ltd is registered with the Information Commissioner’s Office under registration reference: ZA861111.

We would appreciate the opportunity to resolve your concerns before you approach the ICO.

Third-party websites

Our website may contain links to third-party websites, including marketplaces and payment providers. We are not responsible for the privacy practices or content of such external websites. We encourage you to read their privacy policies before providing any personal data.

Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect legal, operational or technical changes.

The most recent version will always be published on our website.

Last Updated: June 2026