Privacy Policy
Privacy Policy
Last updated: 14 September 2026
Stewart Timber (2012) Ltd (“Stewart Timber”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share your personal information when you visit our website, purchase from us, contact us or otherwise interact with Stewart Timber.
1. Who We Are
Stewart Timber (2012) Ltd is the data controller responsible for the personal information covered by this Privacy Policy.
Company: Stewart Timber (2012) Ltd
Company number: SC442314
Registered office: 5b Mid Road, Cumbernauld, Glasgow, Scotland, G67 2TT
Email: sales@stewart-timber.co.uk
If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the details above.
2. Information We Collect
Depending on how you interact with us, we may collect and process information including:
- your name;
- billing and delivery addresses;
- email address and telephone number;
- order and purchase information;
- payment and transaction information;
- information associated with your customer account, where applicable;
- correspondence and information you provide when contacting us;
- information submitted through forms on our website;
- marketing preferences and records of consent;
- reviews, feedback, photographs or other content you choose to submit to us;
- information about how you use our website, such as pages visited, interactions with the website, device and browser information, IP address and approximate location; and
- cookie identifiers and similar technical information, where applicable.
We do not normally receive or store your full payment card details. Online payments may be processed through third-party payment providers including Opayo and PayPal, depending on the payment method you choose.
3. How We Use Your Personal Information
Processing and fulfilling orders
We use information such as your name, contact details, billing and delivery addresses and order details to:
- process and fulfil your order;
- take or arrange payment;
- arrange collection or delivery;
- contact you regarding your order;
- manage returns, refunds, cancellations and complaints; and
- provide customer service.
We generally process this information because it is necessary to enter into or perform our contract with you.
Deliveries
We use your name, address, telephone number and relevant order information to arrange delivery of your purchases.
We may deliver orders ourselves or use third-party courier or haulage providers, including where an order is being delivered outside our usual delivery area.
Where a third-party delivery provider is used, we may provide them with the personal information reasonably required to complete your delivery. This may include your name, delivery address, telephone number and relevant delivery instructions.
Payments and fraud prevention
We use appropriate information to process payments, confirm transactions, prevent fraudulent transactions and protect Stewart Timber and our customers.
Online payments may be processed using Opayo or PayPal, depending on the payment method selected. These payment providers may process information in accordance with their own privacy policies and legal obligations.
We may also process information where necessary for our legitimate interests in protecting our business and customers against fraud and misuse.
Customer enquiries
If you contact us by telephone, email, through our website or by another method, we use the information you provide to respond to your enquiry and provide the assistance you have requested.
Depending on the nature of the enquiry, we process this information because it is necessary in connection with a contract or potential contract with you, or because we have a legitimate interest in responding to customers and operating our business.
Reviews and customer feedback
After you make a purchase, we may contact you to ask about your experience or invite you to leave a review of Stewart Timber or a product you have purchased.
This may include invitations to leave a Google review and requests to review products purchased through our website.
We use MailerLite to assist with certain customer communications, including Google review requests. WooCommerce functionality and plugins may also be used to send product review requests.
Where applicable, you can opt out of further email communications using the unsubscribe or opt-out option included in the email.
Email marketing
If you choose to receive marketing emails from Stewart Timber, we may use your name, email address, purchase history and other relevant information to send you information about products, offers, promotions, sales and other Stewart Timber news that we think may interest you.
Where we rely on your consent, you can withdraw that consent at any time.
You can unsubscribe from our marketing emails at any time by clicking the unsubscribe link included in our marketing emails or by contacting us.
We currently use MailerLite to help manage and send our email communications.
Website analytics and advertising measurement
With your consent, we use analytics and advertising technologies to understand how visitors use our website, measure website performance and assess the effectiveness of our advertising.
These technologies may include Google Analytics, Google Tag Manager and Google Ads tracking.
Information processed through these services may include information about your device, browser, IP address, pages visited, interactions with our website and how you arrived at our website.
We use this information to understand website usage, improve our website and services, and measure the performance of our advertising.
Non-essential analytics and advertising cookies and similar technologies are subject to your consent where required. You can accept, reject or manage these technologies through the cookie consent and preference controls available on our website.
Website security and spam prevention
We use security and anti-spam measures to help protect our website, customers and online forms against fraud, spam, automated submissions and other misuse.
These measures may include Google reCAPTCHA. Where consent is required before a particular technology is loaded, it is controlled through our cookie consent system.
Legal, accounting and business administration
We may process and retain personal information where necessary to:
- maintain appropriate business and financial records;
- comply with tax, accounting and other legal obligations;
- establish, exercise or defend legal claims;
- recover unpaid amounts;
- resolve disputes; and
- prevent or investigate fraud or other unlawful activity.
Depending on the circumstances, this processing may be necessary to comply with a legal obligation or for our legitimate interests in managing and protecting our business.
4. Our Lawful Bases for Processing
Under UK data-protection law, we must have a lawful basis for using your personal information.
Depending on why we are using your information, we may rely on:
Contract – where processing is necessary to enter into or fulfil a contract with you, such as processing and delivering an order.
Legal obligation – where we need to process information to comply with a legal requirement, including certain tax, accounting and regulatory requirements.
Legitimate interests – where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. These interests may include providing customer service, improving and protecting our business, preventing fraud, recovering debts and understanding how our business and services are performing.
Consent – where you have given us permission to process your information for a particular purpose, such as receiving certain marketing communications or allowing non-essential cookies and tracking technologies.
Where we rely on consent, you can withdraw your consent at any time.
5. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Cookies are small files stored on your device which can help websites function, remember preferences and provide information about how a website is being used.
We use essential or functional cookies that are necessary for our website and online shop to function. These may include cookies required for features such as shopping baskets, checkout, security, payments and customer sessions. These cookies may be used without consent where they are strictly necessary to provide a service you have requested.
We also use non-essential cookies and similar technologies, including technologies associated with website analytics and advertising measurement.
Where required, we ask for your consent before these non-essential technologies are used.
When you visit our website, you can use our cookie banner and preference controls to accept, reject or manage non-essential cookies and similar technologies. You can change your preferences using the cookie settings available on our website.
You can also control cookies through your browser settings, although disabling certain essential cookies may affect the operation of our website.
Further information about the cookies and technologies used on our website, including their purposes and retention periods, is available in our Cookie Policy and cookie preference settings.
6. Who We Share Your Information With
We do not sell your personal information.
We may share personal information where necessary with organisations that help us operate our business and provide our services, including:
- payment processing providers, including Opayo and PayPal;
- delivery, courier and haulage providers where required to deliver your order;
- website hosting, ecommerce, security and IT service providers;
- WordPress and WooCommerce-related service providers;
- email and communications providers, including MailerLite;
- analytics and advertising service providers, including Google, where the required consent has been provided;
- professional advisers such as accountants, insurers, solicitors and other advisers;
- debt recovery agents or solicitors where an account remains unpaid or is disputed; and
- government bodies, regulators, law-enforcement agencies, courts or other parties where we are legally required or permitted to disclose information.
If all or part of our business is sold, transferred or reorganised, personal information may also be disclosed to prospective purchasers, advisers or the organisation acquiring the relevant business or assets, subject to appropriate safeguards.
We only provide third parties with personal information reasonably required for the relevant purpose.
7. Unpaid and Disputed Accounts
If an account remains unpaid or a payment is disputed, we may provide relevant personal information to our appointed debt recovery agents, solicitors or other professional advisers where reasonably necessary to recover money owed to us, resolve the dispute or establish, exercise or defend our legal rights.
We will only share information relevant to the matter.
8. International Transfers
Some organisations that provide services to us may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure the transfer complies with applicable UK data-protection law.
Depending on the destination and provider, this may include transferring information to a country covered by UK adequacy regulations or using approved contractual safeguards or another lawful transfer mechanism.
You can contact us if you would like further information about safeguards relevant to your personal information.
9. How Long We Keep Your Information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, tax, regulatory and reporting requirements.
The appropriate retention period depends on the nature of the information, why we hold it, applicable legal requirements and whether it may be required to establish, exercise or defend legal claims.
For example, information relating to purchases and financial transactions may need to be retained for a number of years after the transaction to comply with accounting and tax requirements.
Marketing information is retained while it remains relevant for our marketing activities or until you unsubscribe or withdraw your consent, subject to retaining limited information where necessary to record and respect your opt-out.
We periodically review the information we hold and delete or anonymise information when we no longer have a lawful reason to retain it.
10. Keeping Your Information Secure
We take appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.
However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.
Where we use third parties to process personal information on our behalf, we take appropriate steps to ensure our arrangements with those providers address the protection of personal information as required by applicable law.
11. Your Data Protection Rights
Under UK data-protection law, you may have rights in relation to your personal information, including the right to:
- access personal information we hold about you;
- correct personal information that is inaccurate or incomplete;
- request deletion of your personal information in certain circumstances;
- restrict how we use your personal information in certain circumstances;
- object to certain processing of your personal information;
- receive or transfer certain personal information in a portable format where the right to data portability applies; and
- withdraw your consent at any time where we rely on consent.
These rights are not absolute and whether a particular right applies will depend on the circumstances and our lawful basis for processing your information.
You have the right to object at any time to the use of your personal information for direct marketing purposes.
You will not normally be required to pay a fee to exercise your data-protection rights.
To exercise your rights, please contact us at sales@stewart-timber.co.uk.
We may need to ask you for information to confirm your identity before responding to a request.
12. Complaints
If you have concerns about how Stewart Timber uses your personal information, please contact us so that we have an opportunity to investigate and address your concerns.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.
Information about making a complaint and the ICO’s current contact details can be found at www.ico.org.uk.
13. Third-Party Websites
Our website may contain links to websites operated by third parties.
We are not responsible for the privacy practices of third-party websites. If you follow a link to another website, we recommend reviewing that organisation’s privacy information before providing personal information.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, services or legal and regulatory requirements.
When we make changes, we will update the “Last updated” date at the top of this Privacy Policy. Where appropriate, we may also bring significant changes to your attention by other means.
15. Contact Us
If you have questions about this Privacy Policy, want to exercise your data-protection rights or have concerns about how we use your personal information, please contact:
Stewart Timber (2012) Ltd
5b Mid Road
Cumbernauld
Glasgow
Scotland
G67 2TT
Email: sales@stewart-timber.co.uk