Effective Date: 13 June 2025

Notice of Change of Data Controller: As of 13 June 2025, Canova Clay Limited, trading as Hepworth, is the data controller responsible for your personal data, replacing any previous entity. If you have any questions about this change, please contact us at canovaqueries@hepworth.co.uk.

Introduction

Canova Clay Limited, trading as Hepworth (“we”, “us”, or “our”), is committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website or interact with our services. It also informs you of your rights regarding your personal data.

Who We Are

We are Canova Clay Limited, trading as Hepworth, a company registered in England and Wales (Company Number: 16060076). Our registered address is Crow Edge, Sheffield, England, S36 4HG. We act as the data controller for the personal data processed through our website and services.

What Personal Data We Collect

Personal data is any information that relates to an identified or identifiable individual. We may collect the following types of personal data:

• Identity and Contact Data: Name, job title, company name, email address, and postal address.
• Demographic Data: Postcode, preferences, and interests.
• Survey and Blog Data: Information provided in surveys or blogs.
• Technical Data: Website usage data (e.g., duration, IP address, time zone settings, browser plug-ins, and other technical information).
• Social Media Data: Information from social media interactions, where applicable.
• Combined Data: Non-identifying information combined with personal data, treated as personal data under UK GDPR.

We may also collect non-personal data, such as aggregated or anonymised data, which does not identify you and is not subject to this policy.

How We Collect Your Personal Data

We collect personal data through:

• Direct Interactions: When you provide information via forms, surveys, or direct communications (e.g., email or phone).
• Automated Technologies: Through cookies, server logs, and similar technologies when you visit our website.
• Third-Party Sources: From embedded content (e.g., videos, images, or articles) hosted on other websites, which may collect data as described in their privacy policies.

Lawful Bases for Processing

We process personal data under the following lawful bases as per UK GDPR:

• Consent: For marketing communications or certain cookies, where you have given explicit consent.
• Legitimate Interests: For improving our website, services, and analytics, where our interests are not overridden by your rights and freedoms.
• Contractual Necessity: Where processing is necessary to fulfill a contract with you (e.g., processing orders).
• Legal Obligation: To comply with applicable laws or regulations.

How We Use Your Personal Data

We use your personal data to:

• Improve our products, services, and website functionality.
• Personalise your website experience based on your interests.
• Maintain internal records and perform site analytics.
• Deliver tailored advertising and sponsored content (with your consent, where required).
• Conduct staff training and quality assurance.
• Send marketing and promotional materials about our services, where permitted by law (you may opt out at any time).
• Respond to your enquiries or requests.

Sharing Your Personal Data

We may share your personal data with:

• Service Providers: Third parties who provide services such as website hosting, analytics, or marketing, acting as data processors under our instructions and in compliance with UK GDPR.
• Embedded Content Providers: Third-party websites hosting embedded content (e.g., videos or articles) may collect data as per their privacy policies.
• Legal Authorities: If required to comply with legal obligations or protect our rights.

We ensure that any third party we share data with adheres to UK GDPR requirements through appropriate contracts or agreements.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyse usage. For detailed information, including how to manage your cookie preferences, please see our Cookie Policy. You can withdraw consent for non-essential cookies at any time via our cookie settings.

Data Security

We have implemented appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. These include secure servers, encryption, and access controls. However, no online transmission is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. For example:

• Marketing data is retained until you withdraw consent or for a maximum of 2 years from your last interaction.
• Website analytics data is retained for up to 26 months.
• Other data is retained based on contractual or legal requirements.

When personal data is no longer needed, it is securely deleted or anonymised.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, where applicable.
• Restriction: Request restriction of processing in certain circumstances.
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdraw Consent: Withdraw consent for processing where consent is the lawful basis.

To exercise these rights, please contact us at canovaqueries@hepworth.co.uk. We will respond within one month, as required by UK GDPR. In complex cases, we may extend this period by two additional months and will inform you accordingly.

International Data Transfers

If we transfer your personal data outside the UK, we ensure it is protected by:

• Transferring to countries deemed adequate by the UK government.
• Using Standard Contractual Clauses or other approved mechanisms to ensure compliance with UK GDPR.

Embedded Content

Our website may include embedded content (e.g., videos, images, or articles) from third-party websites. These sites may collect data about you, use cookies, or track your interactions, as outlined in their respective privacy policies. We are not responsible for the privacy practices of these third parties.

Complaints

If you have concerns about our data processing practices, please contact us at canovaqueries@hepworth.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

Contact Us

For questions about this Privacy Policy, the change of data controller, or to exercise your rights, please contact:

• Email: canovaqueries@hepworth.co.uk
• Post: Canova Clay Limited, Crow Edge, Sheffield, England, S36 4HG

Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. Any updates will be posted on our website with an updated effective date. If significant changes are made, we will notify you via email or a prominent notice on our website.