Privacy Policy
The purpose of this Privacy Notice is to provide you with a detailed explanation of the personal data we may collect when you interact with us, how we will store and handle your data, and our commitment to keeping it secure.
We understand that this notice contains a lot of information, but we believe it is important for you to be fully informed about your rights and how we use your data. This includes our procedures for credit checks and how we may combine data across our organization to create a profile of you.
We have included detailed sections below that we hope will address any questions you may have. However, if you require further information or clarification, please do not hesitate to contact us.
You have rights as an individual which you can exercise in relation to the information we hold about you:
- the right to ask what personal data we hold about you
- the right to ask us to move, delete, update and correct any out-of-date or incorrect personal data, that we hold about you
- the right to ask us to restrict processing and the right to object to processing regarding the personal data that we hold about you
- the right not to be subject to a decision based solely on automated processing, including profiling about automated decisions
- the right to opt out of any marketing communications that we may send you (please scroll to the bottom of an email you’ve received and click on ‘unsubscribe’ to stop receiving emails from us or contact customer services to amend your customer preferences)
- If you need to contact us about data privacy, then please contact our Data Protection Officer. Please send your concerns or correspondence to the following address:
Data Protection Officer
HR Department Lakestone Heating Ltd
Kentmill, Beezon Fields,
Kendal, Cumbria,
LA9 6BD
CEDA, or third party data processors acting on our behalf, may collect and use the following personal data that you provide us:
- Personal details such as name, age, date of birth, and gender
- Contact details including your phone number, email address, postal address including billing and delivery addresses
- Payment card details in the event that you place an order with us
- Your purchase and order history
- Your browsing activity on the CEDA websites
- Preferences, feedback, and survey responses
- Publicly available data including those shared on public platforms, this can also include details shared with us while communicating with our social media teams
- Personal details given to us during the creation of a Gift Card
- We will not retain your data for any longer than necessary unless required by a legal obligation
- The pursuit of Legitimate Interests.
- Contractual necessity engaging in commerce regarding products and services
- Compliance with Legal Obligations
- Contacting you about special offers, promotions, and products or services using the lawful basis of Consent. If you would like to change or withdraw your email marketing consent choices, then there will be al ink within the email to enable you to do so.
Below is how we use the data you share with us:
- To verify your identity when you shop with us
- For market research to provide you with more products you love
- To allow our customer service representatives to interact with you should you need them
- For the prevention and detection of fraud and crime, and related purposes
- With your consent, to contact you about special offers, promotions, and products or services that we feel you might be interested in
- Selling and supplying goods and services to our customers
- For instances when we have a legal duty or right to use or disclose your information, for example in legal disputes or when required by a local authority for an investigation
- To monitor and improve the CEDA websites
- In the event that you purchase through the CEDA websites, we will send you an email request which will enable you to review your order
- For analysis reporting, financial processing, risk management, legal obligations, and monitoring for our day-to-day business
- To provide an e-Receipt for store purchases, if you request one
Shared Data and Third Parties
We may also disclose any personal data you allow us to collect to third parties in instances such as those below:
- If you purchase goods from CEDA, we may have to disclose your details to our third party service providers to enable your order to be processed and fulfilled
- We may share your personal information with necessary third parties to enable checks to be carried out. All our credit and debit card holders are subject to validation checks and authorisation from the card issuer
- To support our business operations and audit purposes
- We may provide reputable organisations with information about sales and website usage for the purposes of research and analysis only
- Your personal information will be shared, safely and securely, with our third party service providers in order to process and fulfil your orders
Cookies are small pieces of data that are sent from a website and stored on a user’s device, such as a computer or a mobile phone. They are designed to enable the website to remember the user’s preferences or actions, such as login details, language, or shopping cart items.
There are two main types of cookies: session cookies and persistent cookies. Session cookies are temporary and are deleted when the user closes the browser, while persistent cookies remain on the user’s device until they expire or are deleted.
Cookies can also be categorized based on their purpose. Some cookies are strictly necessary for the website to function properly, while others are used for analytics or advertising purposes.
It’s important to note that cookies do not contain any personally identifiable information, such as a user’s name or address. However, they can be used to track a user’s browsing behavior, which may raise privacy concerns.
Most web browsers allow users to control how cookies are used and stored on their device. Users can typically choose to block all cookies, block specific cookies, or accept cookies only from trusted websites.
Sometimes when you visit the CEDA website, you may notice cookies unrelated to CEDA. Web pages containing embedded content, for example YouTube videos, may send you cookies from third-party websites. Please visit these websites for information on their cookies and how to manage them.
Description: MailChimp sets the cookie to record which page the user first visited.
Duration: 1 month
Type: Functional
Cookie: _ga
Description: Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site’s analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.
Duration: 1 year 1 month 4 days
Type: Analytics
- Try to use different passwords for each of your online accounts. This way if one is ever compromised, the others remain inaccessible to unauthorised parties. Multiple passwords keep your information safer
- Keep passwords private and do not share accounts
- Avoid passwords that contain common phrases like ‘password’, your own name, or details like your phone number
- Try to use a mixture of upper and lower case letters, numbers, and special characters to make passwords stronger. We recommend making a password 8 characters or longer
- CEDA will never ask you to confirm any bank details or credit card details via email, post, or phone. If you receive an email requesting this information that claims to be from us, we recommend that you ignore it. If you’re contacting us regarding an order you have placed please do not include bank or credit card details in your communication
- To protect your privacy, we can only discuss an account or order with the account holder or individual that placed the order
- When you finish shopping online in a public location, logging out of any accounts you have used helps to ensure your data remains secure
The privacy and security of any payments you make with us are high priorities. We ensure your payment and personal details are protected when you shop with us.
- The CEDA website uses high-level, industry standard SSL Encryption (Secure Sockets Layer) technology. Currently, this is the most advanced security software available for online transactions
- Any sensitive information, such as credit card details, that you share with us is encrypted. This means information passed between your computer and our website cannot be read even in the unlikely event that it is intercepted by an unauthorised party
- We strongly recommend that you only connect to secure wireless networks that you trust. Using unsecured networks like those in public places can pose a risk
- You are always able to check that a page is secure as the beginning of the URL at the top of the page will change from ‘http’ to ‘https’ when you are browsing a protected page. A locked padlock symbol will also appear at the bottom of your window
- Our checkout processes involve security checks from third party services to keep your existing card account protected against any unauthorised use when you shop with us. We work with Verified by Visa and Mastercard SagePay to keep your information safe
- When purchasing in our showroom, SagePay provides our Managed Payment Service software. This is a fully integrated solution, which includes software for handing Point of Sale transactions. Software is certified as PCI compliant.
Your data is yours, and you have the right to ask what personal data we hold about you at any time. If you ever wish to know the data that CEDA has of yours, please see the Your Rights section.
How We Protect Your Data:
- CEDA fully complies with all applicable Data Protection and consumer legislation, and we treat any information shared with us as confidential
- Customer information is held on secure servers
- We employ security controls which protect the CEDA IT systems from external attack and unauthorised access
If you opted in for our marketing subscription we will send you updates via email. This is a completely optional service, and you can opt out at any time.
- Our contact with you will be relevant so you can enjoy great deals and new releases
- We will only ask you for things like feedback, and never for personal information such as payment details
- Tips, guidance, and lifestyle information will help you make the most of our products
- Alternatively, if you receive an email from us and you no longer want to be subscribed to our mailing list, you can scroll to the bottom and click on ‘unsubscribe’ to stop receiving emails from us, or contact customer services.
You have the right to lodge a complaint with the Information Commissioner’s Office. Further information, including contact details, is available at ico.org.uk.
For more information on Google Display Network, the company we use to help us create these advertisements please visit their website for more details.
Lakestone Heationg Ltd is a company, Registered in England and Wales under Company registration no.9747397 with the head office at
Kentmill, Beezon Fields,
Kendal, Cumbria,
LA9 6BD
