Privacy Policy

Effective Date: 16 July 2026
Last Updated: 16 July 2026

Castle Dawn Aquatics respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share personal information when you:

• Visit castledawnaquatics.com

• Create an account

• Place or enquire about an order

• Contact our customer support team

• Subscribe to marketing communications

• Submit a return, refund, warranty or delivery claim

• Otherwise interact with Castle Dawn Aquatics

This policy applies to customers and website visitors worldwide. Additional rights may apply depending on where you live.

Who Is Responsible for Your Information?

Castle Dawn Aquatics is the controller of the personal information described in this Privacy Policy.

Data Controller:
Castle Dawn Aquatics
[Insert legal business name]
[Insert registered business address]

Privacy Contact:
privacy@castledawnaquatics.com

Where required by applicable law, details of our appointed European Union or United Kingdom representative will be published in this section.

Personal Information We Collect

The information we collect depends on how you interact with our website and services.

Information You Provide to Us

We may collect:

• Your name

• Email address

• Telephone number

• Billing address

• Delivery address

• Account login information

• Order and purchase history

• Products viewed, saved or added to your basket

• Customer support messages

• Product reviews and survey responses

• Returns, refunds, exchanges and warranty information

• Videos and other evidence submitted in connection with damaged, faulty or incorrect orders

• Marketing preferences

• Any other information you voluntarily provide

Payment Information

Payments are processed by third-party payment providers.

Castle Dawn Aquatics does not normally receive or store your complete payment card number. We may receive limited transaction information, such as:

• Payment status

• Payment method

• Transaction reference

• Billing details

• Fraud screening results

• The last few digits of a payment card

Your payment provider processes payment information under its own privacy policy and security procedures.

Information Collected Automatically

When you visit our website, we and our service providers may automatically collect:

• IP address

• Browser type and version

• Device type

• Operating system

• Approximate location based on your IP address

• Referring website or source

• Pages and products viewed

• Dates and times of visits

• Links and buttons selected

• Basket activity

• Website errors and performance information

• Cookie identifiers and similar online identifiers

We use this information to operate the website, understand how it is used, prevent fraud and improve our services.

Information From Other Sources

We may receive information from:

• Payment providers

• Delivery and logistics companies

• Ecommerce and website service providers

• Marketing and advertising platforms

• Fraud prevention services

• Customer review platforms

• Social media platforms

• Public authorities, where legally required

For example, a delivery company may provide updated tracking or delivery information relating to your order.

How We Use Personal Information

We may use your information to:

• Process, fulfil and deliver orders

• Take payment and issue refunds

• Create and manage customer accounts

• Provide tracking and delivery updates

• Communicate about orders, returns, refunds and enquiries

• Process warranty, damage and delivery claims

• Verify videos and other evidence submitted with customer claims

• Detect and prevent fraud, abuse, chargebacks and unauthorised transactions

• Provide customer support

• Improve our products, website and customer experience

• Maintain the security and performance of our website

• Keep appropriate financial, tax and transaction records

• Establish, exercise or defend legal claims

• Comply with legal and regulatory obligations

• Send marketing communications where permitted

• Measure the effectiveness of advertising and promotions

• Personalise website content, subject to your cookie choices

• Enforce our website policies and terms

We will not use your personal information for a materially different purpose without providing appropriate notice or obtaining consent where required.

Legal Bases for Processing

Where the UK GDPR, EU GDPR or similar laws apply, we rely on one or more of the following legal bases.

Performance of a Contract

We process information where it is necessary to:

• Accept and fulfil your order

• Take payment

• Arrange delivery

• Process a requested return or exchange

• Provide customer service connected with your purchase

Legal Obligations

We may process and retain information to comply with:

• Tax and accounting requirements

• Consumer protection laws

• Customs and import requirements

• Product safety obligations

• Court orders and lawful requests

• Other applicable legal duties

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided those interests do not override your rights.

These interests may include:

• Preventing fraud and misuse

• Securing our website and systems

• Managing customer enquiries

• Improving our products and services

• Maintaining business records

• Resolving disputes

• Defending legal claims

• Understanding business performance

• Marketing similar products to existing customers where legally permitted

Consent

We rely on consent where required, including for:

• Certain marketing communications

• Non-essential cookies

• Advertising and tracking technologies

• Other optional processing activities

You may withdraw your consent at any time. Withdrawal will not affect processing that took place before consent was withdrawn.

Order Claim Videos

Customers may be asked to provide video evidence when reporting a damaged, faulty or incorrect product.

These videos may show:

• The product

• The reported fault or damage

• The outer and inner packaging

• The delivery label

• Your hands, voice or surroundings

We use these videos only for purposes such as:

• Verifying and resolving the claim

• Identifying transit damage

• Investigating fraud or misuse

• Making claims against carriers or suppliers

• Improving packaging and quality-control procedures

• Establishing, exercising or defending legal claims

Please avoid including unrelated people, private documents, payment cards, computer screens or other unnecessary personal information in claim videos.

Claim evidence will be retained only for as long as reasonably necessary for the investigation, dispute period, legal obligations and protection of our legitimate interests.

Cookies and Similar Technologies

We use cookies and similar technologies to operate and improve our website.

These may include:

Essential Cookies

These are required for functions such as:

• Shopping baskets

• Checkout

• Account login

• Website security

• Fraud prevention

• Remembering privacy choices

These cookies cannot generally be disabled through our consent tool because the website may not function correctly without them.

Analytics Cookies

These help us understand how visitors use our website, including which pages and products are most popular.

Functional Cookies

These remember choices such as language, region and other preferences.

Advertising Cookies

These may be used to:

• Measure advertising performance

• Limit repeated advertisements

• Build or assess advertising audiences

• Display more relevant advertisements on other websites or platforms

Where required by law, non-essential cookies will not be placed until you provide consent.

You can accept, reject or change your preferences using our cookie consent tool. You can also control cookies through your browser, although disabling certain cookies may affect website functionality.

For more information, please review our Cookie Policy and the settings available through our cookie consent manager.

Marketing Communications

We may send marketing emails where:

• You have given us consent

• You are an existing customer and applicable law allows us to contact you about similar products

• Another valid legal basis applies

Every marketing email will include an unsubscribe option.

You may also unsubscribe by contacting:

privacy@castledawnaquatics.com

Unsubscribing from marketing will not prevent us from sending necessary service messages about orders, deliveries, security, refunds or customer support.

How We Share Personal Information

We may share personal information with carefully selected organisations that help us operate our business.

These may include:

• Ecommerce and website-hosting providers

• Payment processors

• Banks and financial institutions

• Delivery companies, freight forwarders and postal operators

• Customs brokers and customs authorities

• Warehousing and fulfilment providers

• Customer support and communication services

• Email and marketing platforms

• Analytics providers

• Advertising platforms

• Fraud prevention and cybersecurity providers

• Accountants, insurers, auditors and professional advisers

• Technology and data-storage providers

• Manufacturers or suppliers where required to resolve a product claim

• Government authorities, regulators, courts or law-enforcement bodies where legally required

We provide these parties only with information reasonably necessary for the relevant service or lawful purpose.

Our service providers are expected to handle personal information securely and in accordance with their contractual and legal obligations.

We may also disclose information where necessary to:

• Comply with applicable law

• Respond to a lawful request

• Protect customers, our business or another person's rights

• Investigate suspected fraud or illegal activity

• Enforce our agreements and policies

• Establish, exercise or defend a legal claim

Business Transfers

If Castle Dawn Aquatics or its assets are sold, reorganised, merged or transferred, personal information may be disclosed to advisers, potential purchasers or a new owner as part of that transaction.

Any recipient will be required to use the information consistently with applicable data protection law.

Sale and Sharing of Personal Information

Castle Dawn Aquatics does not sell personal information for money.

Some privacy laws define the terms “sale”, “sharing” or “targeted advertising” broadly. Under those definitions, the use of certain advertising cookies or pixels may be treated as a sale or sharing of information, even where no money is exchanged.

Where required, you can opt out through our cookie consent tool or any Do Not Sell or Share My Personal Information link provided on the website.

We will also recognise legally required browser-based opt-out signals, such as Global Privacy Control, where applicable to our business and processing activities.

International Data Transfers

Castle Dawn Aquatics serves customers internationally. Your personal information may therefore be transferred to, stored in or processed in countries outside your country of residence.

Some of these countries may have different data protection laws.

Where required, we use appropriate safeguards for international transfers, which may include:

• European Commission adequacy decisions

• United Kingdom adequacy regulations

• European Commission Standard Contractual Clauses

• The UK International Data Transfer Agreement

• The UK Addendum to the European Commission Standard Contractual Clauses

• Contractual, organisational and technical security measures

• Other legally recognised transfer mechanisms

Information may also be transferred where necessary to perform a contract with you, such as arranging international delivery, where applicable law permits.

You may contact us for further information about the safeguards relevant to your personal information.

Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Retention periods depend on factors including:

• The nature of the information

• The status of your account or order

• Tax and accounting obligations

• Consumer protection requirements

• Warranty and product-liability periods

• Fraud prevention needs

• Chargeback and payment dispute periods

• Customs and shipping requirements

• Limitation periods for legal claims

• Whether a complaint or dispute remains unresolved

Order and financial records may be retained for the period required by applicable tax, accounting and commercial laws.

Marketing information is retained until you unsubscribe, withdraw consent or the information is no longer reasonably required. We may retain limited suppression information to ensure that we respect an unsubscribe request.

When personal information is no longer required, we will delete, anonymise or securely dispose of it, subject to applicable legal obligations.

Data Security

We use reasonable technical and organisational safeguards designed to protect personal information against:

• Unauthorised access

• Accidental loss

• Misuse

• Alteration

• Unlawful disclosure

• Destruction

These measures may include encrypted connections, access controls, account protections, system monitoring and the use of reputable payment and technology providers.

No internet transmission or storage system can be guaranteed to be completely secure. Customers are responsible for keeping account passwords confidential and should contact us promptly if they suspect unauthorised access.

Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Request access to your personal information

• Receive a copy of certain personal information

• Correct inaccurate or incomplete information

• Request deletion of your information

• Restrict certain processing

• Object to processing based on legitimate interests

• Object to direct marketing

• Request data portability

• Withdraw consent

• Opt out of the sale or sharing of personal information

• Opt out of targeted advertising

• Limit certain uses of sensitive personal information

• Request information about categories of information collected and disclosed

• Appeal a decision relating to a privacy request, where applicable

• Submit a complaint to a data protection authority

• Receive equal service and pricing without unlawful discrimination for exercising privacy rights

These rights are not absolute. We may need to retain or continue processing information where permitted or required by law.

How to Exercise Your Rights

To make a privacy request, contact:

Email: privacy@castledawnaquatics.com

Please include enough information for us to understand and locate the relevant records.

We may ask you to verify your identity before completing a request. This helps prevent personal information from being disclosed to an unauthorised person.

Where legally permitted, an authorised agent may submit a request on your behalf. We may require evidence of the agent's authority and may contact you directly to verify the request.

We will respond within the period required by applicable law. If additional time is lawfully required, we will explain the reason for the extension.

European Union and European Economic Area Residents

Residents of the European Union and European Economic Area may have rights under the General Data Protection Regulation.

You may also lodge a complaint with the data protection authority in the EU or EEA country where you live, work or believe an infringement occurred.

We would appreciate the opportunity to address your concerns directly, but contacting us first does not remove your right to complain to a supervisory authority.

United Kingdom Residents

United Kingdom residents may have rights under the UK GDPR and the Data Protection Act 2018.

You may lodge a complaint with the UK Information Commissioner's Office. You do not have to contact us before making a complaint, although we welcome the opportunity to resolve your concern directly.

California Residents

Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to Castle Dawn Aquatics, California residents may have rights to:

• Know what categories and specific pieces of personal information are collected

• Know the sources and purposes of collection

• Know the categories of third parties receiving information

• Request correction

• Request deletion

• Opt out of the sale or sharing of personal information

• Limit certain uses or disclosures of sensitive personal information

• Receive equal treatment when exercising privacy rights

Castle Dawn Aquatics does not knowingly sell or share the personal information of consumers under 16 years of age.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

Automated Decision-Making

We may use automated systems to assist with:

• Fraud screening

• Payment security

• Website security

• Advertising measurement

• Product recommendations

• Identifying unusual account or transaction activity

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects without appropriate safeguards where required by law.

A transaction may be referred for manual review where automated systems identify a potential security or fraud risk.

Third-Party Websites and Platforms

Our website may contain links to third-party websites, payment services or social media platforms.

We do not control the privacy practices of independent third parties. When you leave our website or interact directly with another platform, that organisation's privacy policy will apply.

We encourage you to review the privacy information provided by those organisations.

Children's Privacy

Our website is intended for a general audience and is not directed towards children.

We do not knowingly collect personal information directly from children where parental or guardian consent is legally required.

If you believe a child has provided personal information without appropriate authorisation, please contact us at privacy@castledawnaquatics.com. We will investigate and delete the information where required.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Changes to our business

• New services or technologies

• Changes to our service providers

• Legal or regulatory developments

• Improvements to our privacy practices

The revised version will be published on this page with a new effective or last-updated date.

Where changes materially affect how we use personal information, we will provide additional notice or request consent where required.

Contact Us

For questions, concerns or requests relating to this Privacy Policy or your personal information, contact:

Castle Dawn Aquatics

Email: privacy@castledawnaquatics.com