Customer information
Privacy policy
Last updated 01/11/2026
This policy explains what personal information we collect when you visit or buy from CS-SELECT, why we use it, who we share it with, how long we keep it and what your rights are. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
CS-SELECT is a trading name of C.S Trading International Limited, company number 17392655, registered office 29 Lord Avenue, Bacup, England, OL13 0RY. We are the controller of the personal information described in this policy.
For any question about your personal information, email [email protected] or write to us at 29 Lord Avenue, Bacup, England, OL13 0RY.
What we collect
When you place an order: your name, email address, telephone number, delivery address, billing address, the items you order, the amount you pay, any discount code you use and the delivery option you choose.
When you pay: Stripe or PayPal takes your payment details on its own secure page. We receive confirmation of the payment, its reference and limited details such as the type of payment method. We never receive your full card number.
When you contact us: your name, email address, order number if you give one, the content of your message and our reply.
When you track an order: the order number and email address you enter.
When you use the website: your IP address, which we record with orders and messages to help prevent fraud and misuse, and technical information that your browser sends, such as its type. If you allow analytics cookies, we also collect information about how you use the site. Our cookie policy explains this.
If you ask for marketing emails: your email address and a record of when you agreed.
We collect this information from you directly, from your browser, and from Stripe, PayPal and our fulfilment partners when they report on your payment or delivery.
You need to give us your name, email address and delivery address to place an order. Without them we cannot take or deliver it.
How we use it, and our lawful basis
| What we do | Lawful basis under UK GDPR |
|---|---|
| Take and process your order, take payment, arrange delivery and keep you updated | Performance of our contract with you |
| Handle cancellations, returns, refunds and faulty goods | Performance of our contract with you, and our legal obligations under consumer law |
| Answer your messages and resolve complaints | Our legitimate interest in helping our customers; performance of our contract where your message is about an order |
| Prevent fraud and keep the website secure | Our legitimate interest in protecting our customers and our business |
| Keep accounting and tax records | Legal obligation |
| Understand how the website is used, through analytics cookies | Your consent |
| Send you marketing emails | Your consent |
| Establish, exercise or defend legal claims | Our legitimate interest in protecting our rights |
Where we rely on legitimate interests, we have balanced them against your rights. You can ask us for details.
You can withdraw your consent at any time. For analytics cookies, use Cookie settings at the bottom of any page. For marketing emails, use the unsubscribe link in any email or email [email protected]. Withdrawing consent does not affect what we did before.
We do not make decisions about you based solely on automated processing. Stripe and PayPal use automated checks to detect fraudulent payments, which can lead to a payment being declined. If this happens, contact us and we will review your order.
Who we share it with
We share personal information only with the organisations that help us run the shop, and only what each needs.
| Recipient | What they do | What they receive |
|---|---|---|
| Stripe | Card payments | Your payment details, email address and, where needed, billing address |
| PayPal | PayPal payments | The details PayPal needs to take your payment |
| CJdropshipping, our fulfilment partner | Picks, packs and dispatches your order | Your name, delivery address, telephone number and the items ordered |
| Delivery carriers, through our fulfilment partner | Deliver your parcel | Your name, delivery address and telephone number |
| Contabo GmbH, through our own mail server | Sends our order, dispatch and service emails | Your name, email address and the content of the email |
| Contabo GmbH, on servers in France | Hosts our website and database | All information held on our systems |
These organisations act on our instructions. Stripe and PayPal also use some of your information for their own purposes, such as preventing fraud and meeting their legal duties. For that use, their own privacy notices apply: Stripe and PayPal.
We also share information where the law requires it, for example with HMRC, the police or a court, and with professional advisers such as our accountant.
Transfers outside the UK
Some of these organisations process information outside the UK. Our fulfilment partner CJdropshipping is based in China, with orders dispatched from its UK warehouse.
Where information goes to a country that the UK has not approved under UK data protection law, we protect it with the International Data Transfer Agreement (IDTA) issued by the Information Commissioner, or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for a copy of these safeguards at [email protected].
How long we keep it
| Information | How long |
|---|---|
| Orders, payments, refunds and the related correspondence | Six years from the end of the financial year the order falls in, as UK tax and company law require |
| Messages that are not about an order | 24 months |
| Marketing consent | Until you unsubscribe or ask us to stop |
| Website session | Expires after two hours of inactivity |
| Your cookie choice | Six months, after which we ask again |
When the period ends, we delete the information or make it anonymous.
How we protect it
The website uses an encrypted connection. Card details are handled by Stripe and PayPal and never reach our systems.
Your rights
You have the right to:
- access the personal information we hold about you;
- have inaccurate information corrected;
- have your information erased in some circumstances;
- restrict how we use it in some circumstances;
- object to our use of it where we rely on legitimate interests, and to direct marketing at any time;
- receive information you gave us in a portable format, where we use it on the basis of contract or consent;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email [email protected]. We may need to confirm your identity. We reply within one month. If your request is complex, we may extend this by up to two further months, and we will tell you why.
There is no charge for using your rights.
Complaints
If you are unhappy with how we have handled your personal information, please tell us first. Email [email protected] with "Privacy complaint" in the subject line. We acknowledge every complaint within 30 days, look into it without undue delay and tell you the outcome.
You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection:
- Website: ico.org.uk/make-a-complaint
- Telephone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Changes to this policy
We update this policy when the way we use personal information changes. The date at the top of the page shows when it was last updated.