Last updated 29 October 2026
This privacy policy explains how Cocker And English Springer Spaniel Rescue (CAESSR) uses the personal information you give us when you use our online shop at caessr.org.uk/shop. CAESSR is a registered charity in England and Wales, number 1137589. Our address is Wembley, Englesea Brook Lane, Englesea Brook, Crewe, Cheshire CW2 5QW. If you have any questions about this policy or about your information, email us at claire@caessr.org.uk.
The rest of our website is covered by the terms and conditions and cookie policy on our main site.
The information we collect
- When you place an order: your name, billing and delivery address, email address, telephone number, what you ordered, how you chose to pay and any note you add to the order.
- If you create an account: your name, email address, a password (stored encrypted), your saved addresses and your order history.
- When you contact us about an order: whatever you include in your message.
- Automatically: your IP address, browser type and the pages you visit, in the security and server logs that protect the site.
How we use it, and why we are allowed to
- To process your order, take payment, post your items and send you order emails (order received, payment received, order sent). This is necessary to carry out our contract with you.
- To answer your questions and deal with cancellations, returns and refunds. This is part of our contract with you and our legitimate interest in running the shop properly.
- To keep accounting records of sales. As a registered charity we have a legal obligation to keep these.
- To keep the shop secure and prevent fraud. This is our legitimate interest.
We do not use your shop details for marketing, and we never sell or rent your information to anyone.
Paying for your order
Card payments are processed by Stripe, and PayPal payments by PayPal. When you pay by card or PayPal you enter your payment details on their secure payment forms. We never see or store your full card number. Stripe and PayPal use your details to take the payment and to prevent fraud, under their own privacy policies: Stripe privacy policy and PayPal privacy statement. They may process payment data outside the UK under safeguards recognised by UK data protection law.
If you pay by bank transfer, we see the name on your account and the payment reference on our bank statement, and nothing else.
Who we share it with
- Our volunteers who prepare and post orders, and our treasurer, who see only what they need to do the job.
- Royal Mail or another delivery service, who receive your name and address so that your order can be delivered.
- Stripe and PayPal, as described above, when you choose to pay through them.
- The companies that host our website and email, and the person who maintains the website for us, who may see information while keeping the site running. They act only on our instructions.
- Anyone we are legally required to share it with, such as HMRC or the police.
Cookies
The shop sets only the cookies it needs to work:
- Basket and session cookies (woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session), which remember what is in your basket. They last up to two days.
- Login cookies for the volunteers who run the shop.
- Stripe and PayPal may set their own cookies when their payment forms load at the checkout, to help prevent fraud.
We do not use analytics or advertising cookies on the shop. You can block or delete cookies in your browser settings, but the basket and checkout will not work without the cookies listed above.
How long we keep it
- Order records, including your name and address: six years after the end of the financial year in which you ordered, because charity accounting rules require it.
- Account details: until you ask us to delete your account.
- Messages about orders: until the matter is dealt with, and for a reasonable time afterwards.
- Security and server logs: for a short period only.
Your rights
Under UK data protection law you can ask us for a copy of the information we hold about you, ask us to correct or delete it, ask us to limit how we use it, object to our using it, and ask for a copy in a form you can take elsewhere. Email claire@caessr.org.uk and we will respond within a month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Keeping your information safe
The shop uses an encrypted (https) connection and a security firewall, and access to orders is limited to the volunteers who need it.
Changes to this policy
If we change this policy we will post the new version on this page and update the date at the top.