Privacy Policy

1. Introduction

Cameron Colours ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide, including:

• Name and contact details (email address, phone number, postal address)
• Account credentials (email and password)
• Payment information (processed securely via our payment provider)
• Order details from our Shopify checkout, including items, value, delivery address and tracking status, linked to your account when you check out with the same email
• Favourite colours, colour likes, saved rooms and palettes, and product reviews you submit
• Questions you ask our Paint Planner advisor and its answers, saved to your account if you are signed in
• Your email address and marketing consent when you download a project guide
• Photos and details you send us about a faulty item
• Communications with us

Automatically Collected Information

When you visit our website, we may automatically collect:

• Device information (browser type, operating system)
• IP address and location data
• Browsing behaviour and page interactions
• Cookies and similar technologies (see our Cookie Policy)

3. Paint Planner Activity

Our Paint Planner tool helps you choose colours, plan rooms and estimate paint quantities. To deliver this service and improve it for everyone, we record the choices you make in the planner — for example: rooms added, surfaces selected, palettes generated, finishes chosen and shopping lists produced.

What we record: the planner choices themselves, plus a randomly generated session identifier stored in your browser so we can group choices made in the same visit.

What we do not record: your IP address, device fingerprint, precise location, or any data we share with advertisers.

If you have an account: by default we link your planner activity to your account so you can pick up where you left off across devices and we can offer better recommendations. You can switch this off at any time in Account → Profile Settings → Paint Planner Data, and you can delete all account-linked planner activity from the same place.

Lawful basis: legitimate interests (improving our products and the planner experience) and, where you have an account, performance of contract.

Retention: anonymous planner events are retained for up to 24 months and then aggregated. Account-linked events are deleted with your account or on request.

Planner advisor: questions you type are sent, with relevant website content and your saved planner context, to our AI service provider to generate an answer. Signed-in conversations are stored privately in your account; guest conversations stay in your browser for that visit. Please do not enter sensitive personal information.

4. How We Use Your Information

We use your information to:

• Process and fulfil your orders
• Communicate with you about your orders and enquiries
• Create and manage your account
• Send marketing communications, including emailed project guides (only with your consent)
• Provide planner, advisor, favourites and order-tracking features in your account
• Handle faulty-item replacements and toolkit returns
• Improve our website and services
• Comply with legal obligations
• Prevent fraud and maintain security

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: To fulfil our contractual obligations when you make a purchase
• Consent: Where you have given explicit consent (e.g., marketing communications)
• Legitimate interests: For our business operations, provided these don't override your rights
• Legal obligation: To comply with applicable laws and regulations

6. Data Sharing

We may share your information with:

• Shopify, which runs our checkout and processes payments
• Parcelforce, which delivers your order (name, address and contact details)
• Our website hosting and database providers
• Our AI service provider, to answer Paint Planner advisor questions
• Google, for website analytics (Google Analytics) when you accept Analytics cookies
• OpenAI, for advertising measurement where permitted (see below)
• Professional advisers (lawyers, accountants)
• Regulatory authorities when required by law

We do not sell your personal information to third parties.

7. OpenAI Advertising Measurement

We use the OpenAI advertising pixel to measure page visits and advertising effectiveness. When measurement is permitted, OpenAI receives advertising click identifiers, page and referring-page addresses without query parameters, browser/device information and IP address. With marketing consent, OpenAI's automatic advanced matching may detect contact details you enter (such as email or phone), securely hash them in your browser and use them only to match purchases to ad clicks. The pixel does not run on account or sign-in pages. This measurement is separate from private Paint Planner activity.

The pixel stays blocked until you accept Marketing, wherever you are visiting from, and an explicit refusal or supported browser opt-out always takes priority. You can withdraw at any time using Cookie settings in the footer; future measurement stops and blocked events are not replayed.

We retain a browser-local consent history with a random visitor identifier, your choices, time, region and the notice text and version. Withdrawal preserves earlier acceptance evidence. Clearing browser storage removes this local record. When a Shopify order is paid, our server tells OpenAI that a purchase happened, with the order value and currency and an event identifier, so it can be counted once; we do not send your name, email, address or items in that message.

8. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limited processing of your data
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us using the details below.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Order information is typically retained for 7 years for tax and legal purposes. Guide-download emails are kept until you unsubscribe or ask us to delete them. Account data, saved planner conversations and reviews are deleted when you delete your account or on request.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

11. International Transfers

Some of our service providers, including Shopify, our hosting and AI providers and OpenAI, store or process data outside the UK, including in Canada, the European Economic Area and the United States. Where this happens, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses to protect your data.

12. Fraud Prevention and Payments

Payments are processed by Shopify and its payment partners; we never see or store your full card details. Shopify may use order, device and payment information to detect and prevent fraud, verify addresses and screen risky transactions.

13. Children

Our website and products are not intended for anyone under 18, and we do not knowingly collect personal data from children.

14. Responding to Your Requests

We respond to rights requests within one month, which may be extended by up to two further months for complex requests. We may need to verify your identity before acting, and you may use an authorised agent to make a request on your behalf.

15. Changes to This Policy

We may update this policy to reflect changes to our practices or for legal, operational or regulatory reasons. The updated version will be posted here with a new "Last updated" date, and significant changes will be highlighted on the website or by email.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: hello@cameroncolours.co.uk
Post: Cameron Colours, Nottinghamshire, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk