Privacy Policy

Last updated: October 2026

1. Who we are
Cleworth Building Supplies Ltd, trading as Cleworth Building Supplies (CBS), is an independent building and landscaping supplies merchant operating in Pulborough and Cranleigh, serving customers across Sussex and Surrey.
For the purposes of data protection legislation, Cleworth Building Supplies Ltd is the data controller responsible for the personal information we collect and use.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, request a quotation, open an account, place an order or otherwise interact with our business.

Company name: Cleworth Building Supplies Ltd
Trading name: Cleworth Building Supplies (CBS)
Website: https://cbsupplies.co.uk
Contact details:
Head Office
The Common
Cranleigh
Surrey
GU6 8RZ
01483 378 441
hayley@cbsupplies.co.uk

 

Click Here To Access Our GDPR Data Complaints Policy

2. What personal information we collect
Depending on how you interact with CBS, we may collect the following information:

• Contact details: Your name, business name, address, email address and telephone number.

• Customer account information: Account application details, credit account information, payment records and relevant business information.

• Orders and quotations: Products requested, quotations, orders, delivery addresses, delivery instructions and transaction history.

• Communications: Emails, telephone enquiries, WhatsApp messages, website enquiries, complaints and other correspondence with us.

• Supplier information: Contact details and business information relating to our suppliers and their representatives.

• Website information: Technical information such as your IP address, browser type and information about how you use our website, where collected through cookies or similar technologies.

• Marketing preferences: Your preferences and choices regarding marketing communications.

• ​

We only collect personal information that is relevant to our business activities and the purposes explained in this policy.

3. How we collect your information
We may collect personal information directly from you when you:

• Contact us by telephone, email, WhatsApp or through our website.

• Visit either of our branches.

• Request a quotation or place an order.

• Apply for a cash or credit account.

• Arrange a delivery or collection.

• Subscribe to marketing communications or interact with our social media pages.

• Make a complaint or exercise your data protection rights.

​

We may also receive information from your employer or business, credit reference agencies, payment providers, delivery partners and other third parties where relevant and lawful.

4. How we use your personal information
We use personal information for the following purposes:

• Managing enquiries and quotations

• To respond to questions, prepare quotations, discuss products and provide customer service.

• Processing orders and deliveries

• To process purchases, arrange deliveries and collections, communicate about orders and resolve any issues.

• Managing customer accounts

• To assess account applications, administer cash and credit accounts, manage payments and outstanding balances, and carry out appropriate credit checks where applicable.

• Managing our business

• To maintain business records, manage supplier relationships, administer payments, handle complaints and protect our legal rights.

• Communicating with customers

• To provide important information about orders, account arrangements, changes to our services and other relevant business matters.

• Marketing and promotions

• To share relevant news, offers, promotions and updates about CBS where permitted by law and in accordance with your marketing preferences.

• Operating and improving our website

• To maintain website security, understand website usage and improve the experience we provide.

• Meeting legal obligations

• To comply with applicable laws, accounting and tax requirements, and lawful requests from relevant authorities.

​

5. Our lawful bases for processing
Under UK data protection law, we must have a lawful basis for using personal information. Depending on the circumstances, we rely on the following:

• Contract: Where processing is necessary to provide a quotation, fulfil an order, arrange a delivery or manage an account agreement.

• Legal obligation: Where we need to comply with legal or regulatory requirements, including relevant accounting and tax obligations.

• Legitimate interests: Where processing is necessary for our legitimate business interests, such as managing customer relationships, preventing fraud, improving our services and promoting our business, provided these interests do not override your rights and freedoms.

• Consent: Where we ask for your permission for a particular use of your information, such as certain marketing communications or non-essential cookies.

​

Where we rely on consent, you can withdraw it at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.

 

6. Marketing communications
We may contact customers about relevant products, offers, promotions and news from CBS where permitted by applicable marketing and data protection laws.

Where required, we will ask for your consent before sending marketing communications. In some circumstances, we may rely on the rules that allow existing customers to receive marketing about similar products or services, provided the relevant conditions are met.

You can opt out of marketing emails by using the unsubscribe link provided or by contacting us directly.

You can also ask us to stop sending marketing communications at any time. We will continue to send essential communications relating to your orders, accounts or other existing business arrangements where necessary.

7. Who we share your information with
We do not sell your personal information.

 

We may share relevant information with trusted third parties where necessary to operate our business, including:

• Payment providers, banks and accounting service providers.

• Credit reference agencies and providers of credit assessment services, where applicable.

• IT, website hosting, email and business software providers.

• Delivery partners and transport providers where needed to fulfil orders.

• Professional advisers, including accountants, legal advisers and insurance providers.

• Regulators, law enforcement agencies and other authorities where required by law.

 

We only share information that is reasonably necessary for the relevant purpose. Where a third party processes personal information on our behalf, we take appropriate steps to ensure that it is handled securely and in accordance with applicable data protection requirements.

 

8. How long we keep your information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, tax and reporting requirements.

 

Retention periods vary depending on the type of information and our reasons for holding it. For example:

• Customer and supplier records: For the duration of the business relationship and for an appropriate period afterwards.

• Orders, invoices and financial records: For the periods required by applicable accounting and tax legislation.

• Enquiries and quotations: For as long as necessary to respond, manage the enquiry and maintain appropriate business records.

• Marketing information: Until you opt out or the information is no longer required for the relevant purpose.

• Complaints and legal matters: For as long as necessary to investigate, resolve and document the matter and meet any relevant legal requirements.

 

When personal information is no longer needed, we will securely delete it or anonymise it where appropriate.

 

9. How we protect your information
We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

 

Access to personal information is limited to those who need it for legitimate business purposes. We also take reasonable steps to ensure that any third parties handling information on our behalf maintain appropriate safeguards.

 

No method of transmitting or storing information is completely secure, but we take reasonable steps to protect the information entrusted to us.

 

10. Cookies and website tracking
Our website may use cookies and similar technologies to support website functionality, understand website usage and improve your experience.
Some cookies are necessary for the website to operate. Other cookies, including certain analytics or advertising cookies, may require your consent before they can be used.

 

You can manage your cookie preferences through the cookie controls provided on our website, where available. You may also be able to manage cookies through your browser settings.

Please note that disabling certain cookies may affect how parts of the website function.

 

11. Your data protection rights
Under applicable data protection law, you may have the right to:

• Access: Request a copy of the personal information we hold about you.

• Rectification: Ask us to correct inaccurate or incomplete information.

• Erasure: Ask us to delete your personal information in certain circumstances.

• Restriction: Ask us to restrict how we use your information in certain circumstances.

• Object: Object to certain types of processing, including processing based on our legitimate interests and direct marketing.

• Data portability: Request certain information in a structured, commonly used and machine-readable format where the right applies.

• Withdraw consent: Withdraw consent where we rely on it as our lawful basis.

 

These rights are subject to certain conditions and exemptions, so they may not apply in every situation.

 

To exercise your rights, please contact us using the contact details published on our website. We may need to verify your identity before responding to your request.

 

We will respond within the time limits required by applicable data protection law.

 

12. Links to other websites
Our website may contain links to third-party websites, including suppliers and other organisations.

 

We are not responsible for the privacy practices, content or security of websites operated by other organisations. We recommend reading the privacy policy of any external website you visit.

 

13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, data processing practices or applicable legislation.
The latest version will be published on our website, together with the date it was last updated.