Processing of your personal data

Under the GDPR (General Data Protection Regulation) Suttons (Ross) Ltd control and/or process any personal information about you electronically using the following lawful bases.


Lawful basis: Consent

The reason we use this basis 

  • If you contact us via our online form

  • Where you've given us consent to process your personal data by means of a legitimate interest.


We process your information in the following ways 

  • We will use the details you provide to deal with your enquiry.

  • There will always be an option to opt out of e-mails and notifications in every publication we send.


Data retention period 

We will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.


Lawful basis: Contract

The reason we use this basis 

  • If you make a purchase via our website or over the telephone. 

  • If we're entering into a contract, so that we can perform our obligations to you.

  • If we have a contract together, so that we can fulfil our end of the bargain.


We process your information in the following ways 

  • We process your order and communicate with you regarding it.


Data retention period 

  • We shall continue to process your information until the contract between us ends or is terminated under any contract terms.


Sharing your information

We do not share your information with third parties, unless you have given consent for us to do so or it is required by law. If, as determined by us, the lawful basis upon which we process your personal information changes, we will notify you about the change and any new lawful basis to be used if required. We shall stop processing your personal information if the lawful basis used is no longer relevant.


Legitimate Interests

It is necessary for the purpose of our legitimate interests for direct marketing, except where your individual rights and freedoms override.


Your individual rights

Under the GDPR your rights are as follows:

  •     the right to be informed;

  •     the right of access;

  •     the right to rectification;

  •     the right to erasure;

  •     the right to restrict processing;

  •     the right to data portability;

  •     the right to object; and

  •     the right not to be subject to automated decision-making including profiling.

Visitor Analytics

Visitor Analytics is a simple website analytics service which measures the traffic and visitors' general details of the customers' websites. Collecting these statistics, a website can make their visitors' experience better (e.g. which pages they visit and when, where they are approximately located, where does a user land first or if they are coming from a specific referral).

Basically, as a website owner using Visitor Analytics, we are using cookies to collect data about visitors' device type and screen size, approximate location, browser, OS, IPs, page visits, bounce rate, conversions and popular content on the website. All this data is pseudonymized and Visitor Analytics will never use the collected data to identify individual users or to match it with additional information on an individual user. Each visitor has control over the cookies placement.


Internet cookies

We use cookies on this website to provide you with a better user experience. We do this by placing a small text file on your device / computer hard drive to track how you use the website, to record or log whether you have seen particular messages that we display, to keep you logged into the website where applicable, to display relevant adverts or content, referred you to a third party website.Some cookies are required to enjoy and use the full functionality of this website.

We use a cookie control system which allows you to accept the use of cookies, and control which cookies are saved to your device / computer. Some cookies will be saved for specific time periods, where others may last indefinitely. You can control and/or delete cookies as you wish by checking your browser settings on each device - for details, see


Data security and protection

We ensure the security of any personal information we hold by using secure data storage technologies and precise procedures in how we store, access and manage that information. Our methods meet the GDPR compliance requirement.


Data Request

If you would like to request changes, removal or access to your personal data, please email or write to us at Unit4a Alton Road Industrial Estate, Ross-on-Wye, Herefordshire, HR9 5NB