Privacy & Cookie Policy for Carton Developments Ltd (“we”, “us”, “our”)

1. Introduction

We are committed to protecting and respecting your privacy. This policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website (www.carton-developments.com) and use our services. It also describes your rights and how you may exercise them.

This policy applies to all visitors, users, and others who access the website (“you”, “your”). By using our website or providing us information, you agree to the practices described in this policy.

2. Data Controller / Contact Details

Data controller: Carton Developments Ltd
Address: 1 Macdowall St, Paisley PA3 2NB
Email: info@carlton-developments.com
Telephone: 0141 280 4191

3. The Types of Data We Collect

We may collect the following categories of personal data:

Category Examples / Details
Identity data Name, title, job title
Contact data Email address, telephone number, postal address
Technical data IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, device identifiers
Usage data Information about how you use the website (pages visited, time spent, search terms, etc.)
Marketing & communications data Your preferences in receiving marketing from us, and your communication preferences
Cookies / tracking data Cookie identifiers, analytics data, usage of third-party services (see section 7)

We collect some of this data directly from you (for example, when you fill in a contact form), and some automatically via cookies and other tracking technologies.

4. How We Use Your Personal Data — Purposes & Legal Basis

We will only process your personal data where we have a lawful basis to do so under UK GDPR. Here are examples of how and why we use your data:

Purpose Legal basis Notes
To respond to your enquiries, requests or communications Contract / Legitimate interest We need your contact data to communicate with you
To send you marketing communications (if you opt in) Consent You may withdraw consent at any time
To operate, maintain, and improve our website and services Legitimate interest Data about usage and technical performance
To detect and prevent fraud, security threats or misuse Legitimate interest To protect our site and users
For analytics and understanding visitor behavior Consent / Legitimate interest Depending on how tracking is set up

Where we rely on consent, you have the right to withdraw it at any time (see section 11).

5. Disclosure of Your Data / Third Parties

We may share your personal data with third parties under certain circumstances, such as:

  • Service providers / processors who help us deliver the website, host data, send emails, run analytics, etc.

  • Legal or regulatory authorities, when required by law or to enforce our rights.

  • Business transfers: in the event of a merger, acquisition or sale of assets, your personal data may be one of the transferred assets (subject to confidentiality obligations).

Whenever we share data, we ensure there are appropriate contractual or legal safeguards in place (e.g. data processing agreements).

6. International Transfers

If your data is transferred outside the UK (or European Economic Area), we will ensure appropriate safeguards, such as:

  • Use of standard contractual clauses

  • Adequacy decisions

  • Binding corporate rules

We will inform you in advance if such transfers occur.

7. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to collect information about how you use the site, to improve performance, remember your preferences, and facilitate analytics.

We classify cookies into categories such as:

  • Strictly necessary (essential for site operation)

  • Performance / analytics (e.g. Google Analytics)

  • Functional / preference

  • Targeting / advertising

You may be able to block or disable non-essential cookies via a cookie banner or browser settings, though doing so may affect your experience on the site.

We include a separate Cookie Policy (or section) that lists each cookie we use, its purpose, duration, and whether it is third-party.

8. Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes set out in this policy, unless a longer retention period is required or permitted by law. When data is no longer needed, we will securely delete or anonymise it.

9. Security of Your Data

We implement appropriate technical and organisational measures to protect personal data from loss, misuse, alteration, or unauthorized access. These may include encryption, access controls, secure servers, and regular review of security procedures.

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Rights of Data Subjects

Under the UK GDPR, you have various rights concerning your personal data, including:

  1. Right of access — you may request a copy of the personal data we hold about you.

  2. Right to rectification — you may request changes to inaccurate or incomplete data.

  3. Right to erasure (“right to be forgotten”) — you may request we delete your data under certain conditions.

  4. Right to restrict processing — you may ask us to pause processing under certain conditions.

  5. Right to data portability — you may request your data in a structured, commonly used format.

  6. Right to object — you may object to processing (e.g. for direct marketing).

  7. Rights in relation to automated decision making and profiling — if applicable.

  8. Right to withdraw consent — where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the contact details above. We may need to verify your identity before granting your request.

If you are unhappy with our handling of your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.

11. Changes to This Policy

We may update this policy from time to time to reflect changes to our practices or legal obligations. We will post the updated policy with a new “last updated” date. Significant changes may be notified to you by other means (e.g. email) where appropriate.

12. Other Websites / Links

Our website may contain links to other websites operated by third parties. This policy does not apply to those external sites. You should check their privacy policies before submitting personal data there.

13. How to Contact Us

If you have any questions, concerns or requests regarding this policy or how we handle your personal data, please contact:

Carton Developments Ltd
Address: 1 Macdowall St, Paisley PA3 2NB
Email: info@carlton-developments.com
Telephone: 0141 280 4191