Privacy Policy

Last updated: 27.11.2025

CNMART™ (“we”, “us”, “our”) is operated by Lily Trading Co. Limited, a company registered in England and Wales (Company No. 08555739).
We are committed to protecting your privacy and handling your personal information safely, legally, and transparently in accordance with the UK GDPR and the Data Protection Act 2018.

This Privacy Policy explains:

  • what information we collect
  • how we use it
  • who we share it with
  • how long we keep it
  • your rights under UK law

By using our website, you agree to the practices outlined in this policy.

 

1. Information We Collect

We collect personal information in the following situations:

1.1 Information you provide to us

When you:

  • place an order
  • create an account
  • request a delivery
  • contact customer service
  • request a return or refund

We collect:

  • name
  • billing and delivery address
  • email address
  • phone number
  • order details
  • return/refund information

If you opt-in to receive marketing emails, we collect:

  • your email marketing preferences

1.2 Information collected automatically

When you browse the website, we automatically collect:

  • IP address
  • device type
  • browser type
  • pages viewed
  • time spent on site
  • referrer source

1.3 Cookies and tracking technologies

Our site uses cookies to:

  • enable essential website functions
  • remember your cart
  • improve website performance
  • help us understand site usage

We may also use third-party analytics tools (e.g. Google Analytics) and advertising pixels (e.g. Meta Pixel, TikTok Pixel) in the future.
These tools may collect anonymous or pseudonymous technical data such as:

  • device identifiers
  • browsing behaviour
  • interaction with ads

You can control cookies in your browser settings at any time.

 

2. How We Use Your Information

We use your information for the following purposes:

2.1 To process orders

  • confirm and fulfil your order
  • process payments
  • arrange delivery
  • send order updates
  • manage returns and refunds

2.2 To operate and secure our website

  • maintain website performance
  • prevent fraud and misuse
  • diagnose technical issues

2.3 To provide customer service

  • respond to enquiries
  • resolve delivery or product issues

2.4 Marketing communications (optional & consent-based)

We may send marketing emails only if you have explicitly opted-in.

These may include:

  • promotions and discounts
  • new product updates
  • store announcements

You can withdraw consent at any time by clicking “unsubscribe” or emailing:
📧 info@cnmart.co.uk

 

3. Legal Basis for Processing (UK GDPR)

We rely on the following lawful bases:

  • Contract: to process your order
  • Legal obligation: tax and accounting compliance
  • Legitimate interest: fraud prevention, site security
  • Consent: marketing communications, non-essential cookies

 

4. Disclosure of Your Information

We may share your data with trusted third parties, including:

4.1 Service providers

  • Shopify (website hosting)
  • Royal Mail / courier companies (delivery)
  • Payment processors (PayPal, Shopify Payments, etc.)
  • Email marketing platforms (if you opt-in)

4.2 Legal requirements

We may disclose information if:

  • required to comply with UK law
  • necessary to prevent fraud or protect our rights

We do not sell your personal data.

 

5. Payment Processing

Payments are securely handled by third-party processors such as:

  • Shopify Payments
  • PayPal

All payment information is encrypted according to PCI-DSS standards.
Your credit card details are not stored on our servers.

 

6. International Data Transfers

Some service providers (e.g. Shopify, payment gateways) may store or process data outside the UK, including Canada, the USA, or the EU.

Where data is transferred internationally, Shopify and our payment providers implement:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • industry-standard security controls

 

7. Data Retention

We retain personal information only for as long as necessary for:

  • order processing
  • legal obligations
  • tax and accounting requirements

Typical retention periods:

  • Order & payment records: 6 years (HMRC requirement)
  • Customer emails: up to 2 years
  • Marketing data: until you unsubscribe
  • Cookies: according to expiry in your browser

 

8. Your Rights Under UK GDPR

You have the right to:

  • access your personal data
  • correct inaccurate data
  • request deletion (“right to erasure”)
  • restrict processing
  • object to processing
  • withdraw marketing consent at any time
  • request a copy of your data (data portability)

To exercise your rights, contact:
📧 info@cnmart.co.uk

If you believe your data has been mishandled, you may also contact the Information Commissioner’s Office (ICO):

📍 ICO Website: https://ico.org.uk/
📧 casework@ico.org.uk

 

9. Cookies

We use cookies to support the website’s core functionality.
Details are available in our Cookie Notice.

You can manage cookies by adjusting your browser settings.

 

10. Age Restrictions

By using this site, you confirm:

  • you are at least 18 years old, and
  • you are legally permitted to purchase age-restricted products (e.g., alcohol)

Deliveries of alcohol require age verification (“Challenge 25”).

 

11. Changes to This Privacy Policy

We may update this policy occasionally.
Changes take effect once posted on this page.

If changes are significant, we will notify customers via:

  • website notice
  • email (if appropriate)

 

12. Contact Information

For access requests, corrections, complaints, or questions:
📧 info@cnmart.co.uk

Data Controller:
Lily Trading Co. Limited
United Kingdom