Legal
Privacy Policy
Last updated: 6 October 2026
1. Who we are
The data controller for this website and for Lithsted Deck orders is Lithsted Ltd, company number 17015657.
Registered office:
71-75 Shelton StreetCovent GardenLondonUnited KingdomWC2H 9JQ
Director: Jawad Hassan Ahmed
Lithsted Ltd is registered with the Information Commissioner’s Office under registration number ZC091660.
Privacy contact: support@lithsted.com
2. Scope
This Privacy Policy covers personal data processed when you:
- visit https://lithsted.com;
- send a sales enquiry about a Lithsted Deck; or
- contact Lithsted about an order, delivery or return.
It describes customer Deck purchases on this website. It is not a notice for a separate Lithsted application.
3. Information we collect
Sales enquiries
Name, business name, email address, and phone number that you submit on the contact form.
Support
Emails and other messages you send to Lithsted about an order.
Technical data
IP address or similar log data where hosting or security infrastructure processes it.
4. Purposes and lawful bases
Lithsted uses this information to respond to a sales enquiry, and, where an order is later agreed, to prepare and deliver the Deck, handle returns, and keep accounting records.
| Purpose | Lawful basis |
|---|---|
| Responding to a sales enquiry and, if an order is agreed, delivering the Deck | Contract — steps you ask Lithsted to take before and after an order is agreed. |
| Returns, complaints and accounting records | Legal obligation, and legitimate interests in keeping records needed to run the business. |
| Enquiry rate limits and security logs | Legitimate interests in protecting the website and customers from abuse. |
6. International transfers
Some service providers may process data outside the United Kingdom. Where required, Lithsted will use legally recognised safeguards, such as applicable adequacy regulations, contractual safeguards or other permitted mechanisms. Lithsted does not currently publish provider-specific transfer mechanisms until that review is complete.
[LEGAL REVIEW REQUIRED: COMPLETE PROVIDER TRANSFER REVIEW]
7. Retention
Lithsted keeps personal data only for as long as needed for the purposes above, including legal, accounting or dispute-related obligations.
| Category | Provisional retention |
|---|---|
| Order, payment and fulfilment records | Retained for the applicable accounting and tax period and as reasonably necessary for fulfilment, returns, disputes and legal claims. Lithsted does not currently state a specific number of years pending confirmation against the applicable statutory requirement. |
| Support correspondence | Target retention: 2 years after the matter is resolved, unless longer retention is reasonably required for a dispute or legal obligation. |
| Security logs | Normally retained for no longer than 180 days, unless required for an active security investigation or legal obligation. |
[LEGAL REVIEW REQUIRED: CONFIRM RETENTION SCHEDULE WITH LEGAL AND ACCOUNTING REVIEW]
8. Security
Enquiry details are checked on the server before they are sent to Lithsted. No method of transmission or storage is perfectly secure.
10. Your rights
Under UK data protection law, you may have rights of access, correction, erasure, restriction, objection and data portability. These rights depend on the circumstances and are not always absolute.
To exercise a right, contact support@lithsted.com.
11. Information Commissioner's Office
If you have concerns about how personal data is handled, you may complain to the ICO at ico.org.uk. You do not have to contact Lithsted first.