Calton Brown Ltd, Company No. 17230415. Effective 1 October 2026.
This page explains how to exercise your rights over your personal information. The full explanation of what we collect and why is in our Privacy Policy.
How to make a request
- Email info@caltonbrown.com with the subject line “Privacy request”.
- Tell us what you would like: a copy of your information, a correction, deletion, restriction, objection, a portable copy, or to withdraw consent.
- Write from the email address on your account or orders. If you write from another address, or someone else writes for you, we will ask for further confirmation.
- Include your order number if you have one, which helps us find your records quickly.
You do not need to use particular words. We will treat any clear request as a request.
What happens next
| Acknowledgement | We aim to confirm receipt within 2 working days |
| Identity check | We may ask for information to confirm that you are the person the data is about. We ask for no more than we need |
| Reply | Within one month of receiving your request and any identity information. For a complex request we may extend this by up to two further months, and we will tell you why |
| Cost | Free. We may charge a reasonable fee or decline only where a request is clearly unfounded or excessive, and we will explain |
Your rights in more detail
Access. You can ask for a copy of the personal information we hold about you and details of how we use it. We will send it in a commonly used electronic format.
Correction. You can ask us to correct information that is wrong or incomplete.
Deletion. You can ask us to delete your information where there is no good reason for us to keep it. We cannot delete information we must keep by law, such as tax and accounting records, or information we need to deal with a live legal claim, fraud investigation or payment dispute. We will tell you what we kept and why.
Restriction. You can ask us to pause how we use your information while an issue is resolved.
Objection. You can object to uses based on our legitimate interests. You have an absolute right to object to direct marketing, and we will stop.
Portability. Where we use your information under a contract or with your consent, you can ask for it in a portable format.
Withdrawing consent. Where we rely on your consent, you can withdraw it at any time. This does not affect what happened before.
Marketing and cookies
To stop marketing emails, use the unsubscribe link in any email or write to us. To change your cookie choices, use the privacy controls on the website or our Your Privacy Choices page.
Customers in the United States
Depending on your state, you may have the right to know what personal information we collect, to ask us to correct or delete it, and to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell personal information for money. To opt out of sharing for advertising, use our Your Privacy Choices page. You may also use an authorised agent. We will ask for proof that you have authorised them.
Customers in the European Union and South Africa
Where the EU GDPR or POPIA applies to you, you have the rights described above, and you can make your request in the same way.
If you are not satisfied
Please tell us first so that we can put things right. You can also complain to the Information Commissioner’s Office in the United Kingdom (ico.org.uk), to the data protection authority in your EU country, or to the Information Regulator in South Africa (inforegulator.org.za).