Privacy Policy

1. Introduction

This Privacy Policy explains how Draughtsmith (trading name of IKOU LTD, IKOU LTD, Unit 13A, Galaxy Business Park, Newburn Bridge Road, Blaydon-on-Tyne, NE21 4SQ ) collects, uses, protects, and processes your personal information in accordance with UK GDPR and the Data Protection Act 2018.

We are committed to protecting your privacy and handling your personal data in an open and transparent manner. Please read this policy carefully to understand how we handle your personal information.

2. Who We Are

Data Controller: IKOU LTD, (trading as Draughtsmith)
Registered Address: IKOU LTD, Unit 13A, Galaxy Business Park, Newburn Bridge Road, Blaydon-on-Tyne, NE21 4SQ
Contact Email: [email protected]
Contact Phone: 03301225722
Website: draughtsmith.com

3. What Personal Information We Collect

We may collect the following types of personal information when you interact with our website or services:

Information You Provide Directly:

  • Name
  • Email address
  • Postal address
  • Telephone number
  • Payment information (processed securely through our payment provider)
  • Age verification (to confirm you are 18 or over)
  • Business information (for trade accounts)
  • Installation location details
  • Service appointment preferences

Information Collected Automatically:

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent on site
  • Referral source
  • Cookie data (see Section 7)

4. When We Collect Information

We collect information from you when you:

  • Place an order for equipment or beer kegs
  • Create an account on our website
  • Subscribe to our newsletter or marketing communications
  • Complete a contact form or enquiry
  • Book an installation or service appointment
  • Subscribe to Draughtsmith on Demand services
  • Apply for finance through Payl8r
  • Participate in surveys or provide feedback
  • Interact with our website

5. How We Use Your Information

We use your personal information for the following purposes:

Order Processing & Fulfilment:

  • Processing and delivering your orders
  • Arranging installation appointments
  • Managing service and maintenance bookings
  • Processing payments and refunds
  • Communicating about your order status

Customer Service:

  • Responding to enquiries and support requests
  • Managing warranty claims
  • Providing technical support
  • Handling returns and refunds

Business Operations:

  • Managing subscriptions and recurring payments
  • Maintaining customer accounts
  • Improving our products and services
  • Fraud prevention and security

Marketing (with your consent):

  • Sending promotional emails and newsletters
  • Providing information about new products and services
  • Offering special promotions and discounts
  • Sending service reminders and maintenance notifications

Legal Obligations:

  • Age verification for alcohol sales
  • Compliance with financial regulations
  • Fulfilling legal and regulatory requirements

6. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract Performance: To fulfil orders and provide services you’ve requested
  • Consent: For marketing communications (you can withdraw consent at any time)
  • Legal Obligation: To comply with age verification and other legal requirements
  • Legitimate Interests: To improve our services, prevent fraud, and operate our business effectively

7. Cookies

What Are Cookies?

Cookies are small text files stored on your device that help us recognise your browser and remember certain information.

How We Use Cookies:

  • Essential Cookies: Required for the website to function (shopping basket, checkout process)
  • Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
  • Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness
  • Preference Cookies: Remember your settings and preferences

Managing Cookies:

You can control cookies through your browser settings. Please note that disabling certain cookies may affect website functionality, including your ability to complete purchases.

For more information about cookies and how to manage them, visit: www.aboutcookies.org or www.allaboutcookies.org

8. How We Protect Your Information

We take the security of your personal information seriously and implement appropriate technical and organisational measures:

  • Secure Connections: All data transmission is encrypted using SSL/TLS technology
  • Payment Security: Payment card details are processed by PCI DSS compliant payment providers and are never stored on our servers
  • Access Controls: Personal information is only accessible to authorised personnel who require it for their role
  • Regular Security Audits: Our systems are regularly scanned for vulnerabilities
  • Data Minimisation: We only collect and retain data that is necessary
  • Staff Training: Our team is trained in data protection practices

9. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We only share your information with trusted partners who help us operate our business:

Service Providers:

  • Payment Processors: Stripe, Payl8r (for processing transactions)
  • Delivery Couriers: UPS and other courier services (for order fulfilment)
  • Email Service Providers: Klaviyo (for sending marketing emails, with your consent)
  • CRM Systems: Capsule CRM (for managing customer relationships)
  • Website Hosting: Secure hosting providers
  • Analytics: Google Analytics (anonymised data)

All third-party service providers are required to maintain appropriate security measures and process data only as instructed by us.

Legal Requirements:

We may disclose your information if required by law, court order, or to protect our rights and property.

10. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal information we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data (subject to legal obligations)
  • Right to Restrict Processing: Request limitation on how we use your data
  • Right to Data Portability: Receive your data in a structured, commonly used format
  • Right to Object: Object to processing based on legitimate interests or for marketing purposes
  • Right to Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise any of these rights, please contact us at [email protected] or call 03301225722.

11. Marketing Communications

Opting In:

We will only send you marketing communications if you have:

  • Opted in during account registration or checkout
  • Signed up for our newsletter
  • Previously purchased from us (soft opt-in for similar products)

Opting Out:

You can unsubscribe from marketing emails at any time by:

  • Clicking the “unsubscribe” link at the bottom of any marketing email
  • Emailing us at [email protected]
  • Calling us on 03301225722
  • Updating your preferences in your account settings

Please allow up to 7 working days for your request to be processed.

12. Data Retention

We retain your personal information only for as long as necessary:

  • Order Information: 7 years (for tax and accounting purposes)
  • Customer Accounts: Until you request deletion or the account becomes inactive
  • Marketing Data: Until you unsubscribe or withdraw consent
  • Warranty Records: Duration of warranty period plus 1 year
  • Website Analytics: 26 months (Google Analytics default)

13. Third-Party Websites

Our website may contain links to third-party websites (such as payment providers or social media platforms). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.

14. Children’s Privacy

Our products and services are not intended for anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

15. International Transfers

Your personal data is primarily stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last Updated” date at the top of this policy indicates when it was last revised.

Significant changes will be communicated via:

  • Email notification (to registered customers)
  • Prominent notice on our website
  • Update to this page

17. Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

  • Notify the Information Commissioner’s Office (ICO) within 72 hours
  • Notify affected individuals without undue delay
  • Take immediate steps to mitigate the breach

18. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the UK’s supervisory authority:

Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113

19. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data:

📩 Email: [email protected]
📞 Phone: 03301225722
🌍 Website: draughtsmith.com
📍 Address: IKOU LTD, Unit 13A, Galaxy Business Park, Newburn Bridge Road, Blaydon-on-Tyne, NE21 4SQ