depending on the purpose, we may rely on one or more of the following lawful bases:
contract -
where processing is necessary to take steps at your request or fulfil a contract with you, such as processing an order, taking payment and arranging delivery.
legal obligation -
where we need to process information to comply with a legal requirement, such as accounting, tax or consumer-law obligations.
legitimate interests -
where processing is reasonably necessary for our business interests and those interests are not overridden by your rights. this may include fraud prevention, improving our website, understanding our customers and protecting our business.
consent -
where we ask you for permission, for example for certain marketing or non-essential cookies. where we rely on consent, you can withdraw it at any time.
UK data protection law requires businesses to identify a lawful basis for each use of personal data, and legitimate interests should only be used where the organisation has properly considered the impact on individuals.