Privacy Policy
This policy explains what personal information C&R Direct collects when you visit this website, place an order or get in touch with us, how we use it, and the choices you have.
Last updated 1 November 2026
Who we are
This website is run by C & R Direct Limited, trading as C&R Direct. We are registered in England and Wales, company number 06115765. Our address is Lower Newhey Mills, Two Bridges Road, Newhey, Rochdale, OL16 3SR.
We decide how the personal information you give us is used, so under UK data protection law we are its “controller”. If you have a question about your information, email sales@crdirect.co.uk or call 0161 241 9872.
What we collect
When you place an order: your name, billing and delivery address, email address, phone number, any company name, and the details of what you ordered, including the sizes and options you chose and any order notes.
When you call or email us: your name, contact details and whatever you tell us about your project.
When you browse the site: what is in your basket, and, if you allow analytics and advertising cookies, information about your visit such as the pages you look at, how you move around them, how you found us, your device and browser type, and your approximate location worked out from your IP address.
You don’t need an account to order from us, and we don’t collect any special category information such as health details.
How we use it
The law says we need a reason, called a lawful basis, for each way we use your information.
| What we do | Lawful basis |
|---|---|
| Make and deliver your order, take payment, and contact you about it | Contract: we need it to fulfil your order |
| Answer your calls and emails, and give you quotes | Contract, or steps you ask us to take before one |
| Keep invoices and accounting records | Legal obligation: tax law requires it |
| Prevent fraud and keep the site secure | Legitimate interests: protecting you and us |
| Send you offers and product news by email | Consent: only if you tick the box at checkout |
| Understand how people use the site and measure our adverts | Consent, for cookies. Basic visit counts without cookies: legitimate interests |
Payments
Card payments are processed by Stripe, a regulated payment provider. Your card details go straight to Stripe and are never seen or stored by us. If you pay with Google Pay, Google also processes your payment under its own privacy policy.
Stripe sets cookies on the checkout page to help spot fraudulent payments.
Marketing emails
At checkout you can tick “I would like to receive exclusive emails with discounts and product information”. We only email you offers if you tick it. Every email has an unsubscribe link, or you can ask us to stop at any time.
Our marketing emails record whether they are opened and which links are clicked, so we can see what people find useful.
Cookies
Cookies are small files saved on your device. Some are needed for the site to work, such as remembering your basket. Others help us understand how the site is used and measure our adverts. We only set those if you accept them, and you can change your choice at any time from the “Cookie settings” link at the bottom of every page.
Until you accept, Google Analytics, Google Ads, Microsoft Clarity and Microsoft Advertising only receive basic information about your visit without using cookies, such as which page was viewed. This lets us count visits, but it can’t be linked to you or to your other visits.
Needed for the site to work
| Set by | What it does | Lasts |
|---|---|---|
| This website | Remembers what is in your basket | Until you close your browser |
| This website | Keeps your basket between visits | 2 days |
| This website | Remembers your cookie choices | 6 months |
| Stripe | Helps prevent payment fraud at checkout | 1 year, 30 minutes |
Analytics (only with your consent)
| Set by | What it does | Lasts |
|---|---|---|
| Google Analytics | Counts visits and shows which pages are used | 2 years |
| Microsoft Clarity | Records how pages are scrolled and clicked, so we can fix pages that are hard to use | 1 day to 1 year |
| This website | Notes how you found us, such as a search engine or an advert, and saves it with your order | Up to 6 months |
We also use a cookie-free analytics service to count visits. It doesn’t identify you.
Advertising (only with your consent)
| Set by | What it does | Lasts |
|---|---|---|
| Google Ads | Shows our adverts to people who have visited the site, and tells us when an advert leads to a call, email or order | 90 days to 13 months |
| Microsoft Advertising | Tells us when someone who clicked one of our Bing adverts calls, emails or orders | 1 day to 13 months |
You can also block or delete cookies in your browser settings. If you block the ones needed for the site to work, the basket and checkout won’t work.
Who we share it with
We never sell your information. We only share it with trusted companies that help us run the business, under contracts that require them to keep it safe, and only what they need:
| Who | What for |
|---|---|
| Our website host | Running this website securely |
| Stripe | Taking card payments and preventing fraud |
| Google Pay, and Google Analytics and Google Ads if you allow them | |
| Microsoft | Clarity and Microsoft Advertising, if you allow them |
| Our analytics provider | Counting visits, without cookies |
| Our email delivery service | Delivering the emails we send you, such as order confirmations |
| The company delivering your order | Your name, delivery address and phone number, so they can deliver it |
We may also share information when the law requires it, for example with HMRC or the police.
Outside the UK
Some of these companies store or process information outside the UK, such as the European Economic Area and the United States. Where they do, the transfer is covered by UK adequacy regulations, the UK-US data bridge or the UK’s International Data Transfer Agreement, which require your information to be protected to UK standards.
How long we keep it
- Orders and invoices: 6 years after the end of the financial year of your order, as tax law requires.
- Calls and emails that don’t lead to an order: 2 years.
- Marketing email list: until you unsubscribe.
- Analytics: Google Analytics keeps visit data for 14 months, and Microsoft Clarity for 13 months.
Your rights
You have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct it if it is wrong;
- ask us to delete it, unless we have to keep it by law;
- ask us to limit how we use it, or object to how we use it;
- ask for it in a format you can give to another company;
- withdraw your consent to marketing emails or cookies at any time.
To use any of these rights, email sales@crdirect.co.uk or write to us at the address above. It’s free, and we’ll reply within one month.
Complaints
If you’re unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
We’ll update this page if we change how we use your information. The date at the top shows when it last changed.
