Privacy policy

Last Updated: November 16, 2025

Scope and Purpose of This Policy

This Privacy Policy applies to:

All visitors and users of the Rack N Rail website
Customers who place orders or register accounts
Individuals who subscribe to newsletters or marketing communications
Users who interact with our social media campaigns, apps, or third-party integrations

Purpose:

We aim to elucidate the collection, use, and sharing of personal data.
Provide transparency and build trust with customers
Ensure compliance with UK GDPR, Data Protection Act 2018, and Consumer Rights Act 2015
Outline user rights and procedures for managing personal data

Types of Personal Data We Collect

We collect both personal and non-personal data, depending on how you interact with us.

A. Personal Data Provided Directly

Full name, title, and contact details (email, phone, postal address)
Billing and shipping information
Payment information (processed securely by third-party providers)
Account login details (username, password)
Communication preferences and subscription options
Customer feedback, survey responses, and correspondence

B. Data Collected Automatically

IP address, browser type, operating system, and device information
Website interactions (pages visited, time on site, clicks, and scroll behavior)
Cookies, pixels, and analytics data for website performance, marketing, and tracking

C. Data From Third Parties

Social media platforms, advertising partners, and analytics providers
Payment processors, shipping couriers, and IT service providers
Data received from publicly available sources or third-party integrations

How We Use Your Personal Data

We use your information to provide services, improve your experience, and meet our legal obligations.

Primary Purposes

Order Fulfillment and Delivery
- Process orders, provide order confirmation, and shipping details
- Track deliveries and handle returns, refunds, and exchanges
Customer Service and Support
- Respond to inquiries and complaints
- Resolve issues regarding orders or website functionality
Marketing Communications (With Consent)
- Send newsletters, promotions, and offers
- Conduct surveys to improve products and services
- Personalize marketing campaigns based on your interests
Website Analytics and Performance
- Monitor user behavior and site performance
- Improve website usability and content
- Identify trends and optimize marketing campaigns
Fraud Prevention and Legal Compliance
- Detect and prevent fraud, hacking, or unauthorized use
- Comply with tax, accounting, consumer protection, and other legal obligations
Business Development
- Analyze purchasing behavior to improve products, services, and customer experience
- Evaluate the effectiveness of advertising campaigns

Legal Basis for Processing Personal Data (UK GDPR)

We rely on the following legal grounds for processing personal data:

Contractual Necessity: Processing data to fulfill orders, deliver products, and manage accounts
Consent: Marketing communications, newsletters, and promotional emails
Legal Obligation: Compliance with tax, financial, consumer protection, and record-keeping laws
Legitimate Interests: Fraud prevention, business analytics, website optimization, and service improvement

Sharing and disclosing personal data

We do not sell your personal data. We may share data under specific circumstances:

A. With Service Providers

Payment processors, shipping and courier companies, IT service providers, and marketing platforms
These providers are contractually bound to follow UK GDPR-compliant practices

B. For Legal and Regulatory Compliance

In response to lawful requests from courts, regulators, or government authorities
To protect our legal rights, property, or safety of users

C. In Business Transactions

During mergers, acquisitions, or sales of company assets
Ensuring that transferred personal data continues to be protected

D. Marketing Partners (With Consent)

Only shared with trusted third-party marketing partners for campaigns where explicit consent is provided

Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies for:
- Improving website usability and functionality
- Measuring and analyzing traffic and marketing performance
- Delivering personalized marketing (with consent)
User Control:
- You can disable or manage cookies via your browser settings
- Cookies do not collect personal information unless you provide it voluntarily

Data Retention and Storage

Personal data is retained only as long as necessary or required by law:
- Orders and financial records: 7 years (tax compliance)
- Customer support and correspondence: 3 years
- Marketing preferences and consents: Until consent is withdrawn
Data is securely deleted or anonymized after retention periods expire

Your Rights Under UK GDPR

As a UK resident, you have the following rights:

Right of Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Delete personal data when permitted
Right to Restriction of Processing: Limit use of your personal data
Right to Data Portability: Obtain your data in a structured, machine-readable format
Right to Object: Object to marketing or other processing based on legitimate interests
Right to Withdraw Consent: Revoke consent for marketing or other optional data processing

To exercise these rights, contact info@racknrail.co
We will respond within one month, as required by UK GDPR.

Data Security Measures

SSL encryption for data transmitted online
Secure servers and restricted access to authorized personnel only
Regular security audits and monitoring
Customers are responsible for safeguarding account passwords and login credentials

International Data Transfers

Personal data is primarily processed within the UK
If transferred outside the UK, we ensure:
- Adequate protection under UK GDPR
- Standard contractual clauses or other legal safeguards

Children’s Privacy

Our website is not intended for individuals under 18
We do not knowingly collect data from children
If discovered, any personal data from children is deleted immediately

Third-Party Services and Links

Our website may contain links to third-party websites or services
Rack N Rail is not responsible for third-party privacy practices or content
Users should review third-party privacy policies when interacting with external websites

Automated Decision-Making and Profiling

We may use automated tools for marketing, analytics, or fraud prevention, but:
- Decisions will not have a legal or significant impact on you
- Customers can request human intervention or review of automated decisions

Marketing and Communication Preferences

You can opt-in or opt-out of marketing communications at any time
Email preferences can be managed via unsubscribe links or by contacting info@racknrail.co
Marketing data is stored securely and only used for communications you have consented to

Breach Notification

In case of a personal data breach, Rack N Rail will:
- Notify affected individuals promptly, where required by law
- Report breaches to the Information Commissioner’s Office (ICO) if legally mandated
- Take corrective actions to mitigate risks