1. Controller and contact
Callisacro is the controller of personal data collected through this website. Our address is Unit 2, Queensway Business Park, Hadley Park East, Telford TF1 6AL, United Kingdom; company number 6570564; telephone +44 1952 768666.
2. Data we may collect
- Contact and correspondence data when you call, write or submit an enquiry.
- Order and transaction data where Callisacro is the seller.
- Technical data such as browser type, device type, approximate location derived from IP address, requested pages and diagnostic logs.
- Cookie and preference data, including whether you accepted or rejected optional cookies.
- Marketing preference data where you have actively opted in.
We do not intentionally collect special-category data through this website and ask that you do not provide it unnecessarily.
3. Purposes and lawful bases
- To provide requested services and administer orders: performance of a contract.
- To answer enquiries, protect the site, prevent fraud and improve content: our legitimate interests, balanced against your rights.
- To meet tax, consumer-protection and legal obligations: compliance with law.
- To use optional analytics or send electronic marketing: consent, which you may withdraw at any time.
4. Advertising and external retailers
Product buttons may take you to an independent retailer. We may record a non-identifying referral event, subject to your cookie choice, and may receive commission information from the retailer. The retailer processes information you submit on its website under its own privacy notice. We do not receive your card details from an external retailer.
5. Sharing and processors
We may share data with hosting, security, analytics, payment, delivery, professional-adviser and customer-support providers acting under contract; with authorities where legally required; or with a purchaser in a properly managed corporate transaction. We do not sell personal data as a standalone commodity.
6. International transfers
Some service providers may process data outside the United Kingdom. Where this occurs, we use a lawful transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement or an approved addendum, together with appropriate safeguards.
7. Retention and security
We keep personal data only as long as required for the purpose collected, including legal, accounting and dispute periods. Typical correspondence is reviewed after 24 months; transaction records may be kept for six years after the relevant financial year. We apply access controls, encryption in transit, supplier review and proportionate organisational safeguards. No internet service can promise absolute security.
8. Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction, portability or objection; withdraw consent; and ask for review of an automated decision. We may need to verify your identity and normally respond within one month. Rights may be limited where a legal exemption applies.
9. Complaints
Please contact us first so we can investigate. You may also complain to the UK Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113. Exercising this right does not affect other legal remedies.
10. Children and changes
This website is directed to adults making purchasing decisions, not to children. We do not knowingly request children’s personal data. We may update this notice when our practices or the law change; the revision date at the top identifies the current version.