Privacy and cookies
How we collect, use and protect your personal information when you visit our website or buy from us.
Who we are
Ceylon Origin Ltd is the controller of the personal information described in this policy.
Email: info@ceylonorigin.co.uk
Post: Ceylon Origin Ltd, 160 Crompton St, New Houghton, Mansfield, NG19 8TJ
What we collect and why
| Information | Purpose | Lawful basis |
|---|---|---|
| Order details: your name, email address, phone number, delivery address and the products you buy | To take payment, deliver your order, send your order confirmation and handle cancellations, returns and queries | Performance of our contract with you; legal obligation (tax and accounting records) |
| Contact form messages: your name, email address and message | To reply to your enquiry | Legitimate interests in responding to people who contact us |
| Website usage information collected by analytics cookies (pages visited, device and browser type, approximate location) | To understand how the site is used and improve it | Your consent |
| Advertising information collected by Meta cookies and our server: pages and products viewed, basket and order details, and, for completed orders, your email address, phone number, name, town, postcode and country in hashed (encrypted, non-readable) form | To measure the results of our Facebook and Instagram adverts and show relevant adverts | Your consent |
We do not see or store your card details. Payments are processed by Stripe on its secure checkout pages.
Who we share it with
- Stripe: payment processing and fraud prevention.
- Hostinger: hosting of our website and server.
- Our email service provider: sending order confirmations and replying to enquiries.
- Google (Google Analytics): only if you accept analytics cookies.
- Meta Platforms (Facebook and Instagram advertising): only if you accept marketing cookies.
- Delivery carriers, who receive the details needed to deliver your parcel.
We do not sell your personal information. Some of these providers process information outside the UK, including in the United States. Where they do, the transfer is protected by safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework.
How long we keep it
We keep order records for six years after the end of the financial year in which the order was placed, as required for UK tax and accounting purposes. We keep enquiries for as long as needed to deal with them. Analytics and advertising data are kept by Google and Meta in line with their own retention settings.
Cookies and similar technologies
When you first visit, we ask whether you accept analytics and marketing cookies. These choices are separate, nothing optional is switched on until you choose, and you can change your mind at any time using Cookie settings (also at the bottom of each page).
| Name | Type | Purpose | Duration |
|---|---|---|---|
| co_consent, co_analytics | Essential | Remember your cookie choices | 6 months |
| ceylon_origin_cart (browser storage) | Essential | Keep the items in your basket | Until cleared or your order is complete |
| ceylon_ann_v1, co_meta_purchase_* (browser storage) | Essential | Remember that you closed the announcement bar; avoid reporting the same order twice | Until cleared |
| Stripe cookies | Essential | Secure payment and fraud prevention on the checkout pages | Set by Stripe |
| _ga, _ga_* | Analytics (Google Analytics) | Distinguish visitors and sessions to produce usage statistics | Up to 2 years |
| _fbp, _fbc | Marketing (Meta) | Measure and improve our Facebook and Instagram adverts | 90 days |
If you withdraw consent, we stop using the relevant cookies and delete those our site has set.
Your rights
You have the right to ask for a copy of your personal information, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To make a request, email info@ceylonorigin.co.uk.
If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We will update this page if the way we use personal information changes.
Last updated: 13 October 2026