The law requires us to determine the lawful basis under which we process different categories of your personal information and to notify you of the basis for each category.

If a basis on which we process your personal information is no longer relevant, we shall stop processing your data on that basis.

If the basis changes, where required by law we shall notify you of the change and of any new basis under which we have determined that we can continue to process your information.

1. Information we process because we have a contractual obligation with you

When you create an account on our website, buy a product or service from us, or otherwise agree to our terms and conditions, a contract may be formed between you and us.

In order to carry out our obligations under that contract, we must process the information you give us. Some of this information may be personal information.

We may use it to:

1. verify your identity for security purposes;
2. sell products to you;
3. provide you with our services; and
4. provide you with suggestions and advice about products and services and how
   to obtain the most from using our website.

We process this information on the basis that there is a contract between us, or that you have requested that we use the information before entering into a legal contract.

Additionally, we may aggregate this information and use it to provide statistical or class information, for example to monitor our performance in relation to a particular service. If we use it for this purpose, you will not be personally identifiable.

We shall continue to process this information for as long as necessary in connection with the contract between us.

2. Information we process with your consent

Through certain actions where there is no contractual relationship between us, such as when you browse our website or ask us to provide you with more information about our business, products or services, you may provide your consent for us to process information that could include personal information.

Wherever possible, we aim to obtain your explicit consent to process this information, for example by asking you to agree to our use of cookies.

Sometimes you may provide consent implicitly, such as when you send us an email to which you would reasonably expect us to reply.

Except where you have consented to our use of your information for a specific purpose, we do not use your information in a way that identifies you personally. We may aggregate it and use it to provide statistical information, for example to monitor the performance of a particular page on our website.

If you have given us explicit permission to do so, we may from time to time pass your name and contact information to selected associates whom we consider may provide services or products that you would find useful.

We continue to process your information on this basis until you withdraw your consent or it can reasonably be assumed that your consent no longer exists.

You may withdraw your consent at any time by contacting us at privacy@cavendishgroup.co.uk.
However, withdrawing consent may affect your ability to use certain aspects of our website or services.

3. Information we process because we have a legal obligation

We may sometimes be required to process your information in order to comply with a statutory or legal obligation.

For example, we may be required to provide information to legal authorities where they have appropriate authority to request it, such as under a court order or search warrant.

This may include your personal information.

4. Information provided on the understanding that it will be shared with a third party

Our website may allow you to post information with a view to that information being read, copied, downloaded or otherwise used by other people.

Examples may include:

1. posting a message on a forum;
2. tagging an image; or
3. clicking on an icon next to another visitor’s message to convey agreement,
   disagreement or thanks.

When posting personal information, it is your responsibility to consider the privacy implications of making that information available to other people.

We do not specifically use this information other than to enable it to be displayed or shared.

We store this information and may use it where appropriate in accordance with this privacy notice and applicable law.

Once information enters the public domain, we may have limited control over what third parties do with it.

Provided your request is reasonable and there is no legal basis for us to retain the information, we may agree to delete personal information that you have posted.

You can make a request by contacting privacy@cavendishgroup.co.uk.