Privacy Policy

Who we are

Blackstone is operated by [COMPANY LEGAL NAME], a company registered in the Czech Republic (company registration number: [REG. NO.]).

This policy explains what personal data we collect when you visit blackstoneproduce.uk, how we use it, and what rights you have under the General Data Protection Regulation (GDPR, Regulation EU 2016/679).

Questions about this policy should be directed to hello@blackstoneproduce.uk.

What we collect

Depending on how you use this site, we may process the following data:

Contact enquiries

When you reach us via the email button, we receive your email address and the content of your message. We do not operate a form database; your message arrives directly in our email inbox.

Technical data

Your IP address, browser type, operating system, and requested page paths are processed automatically by Cloudflare, our infrastructure and CDN provider. This data is not linked to your identity in our own systems.

Cookies

We set a small number of cookies to make the site work correctly. See the Cookies section below for details.

We do not operate a checkout or payment processor on this site. No payment card data is collected.

How we use it

We use the data we collect to:

• Respond to your enquiries and provide wholesale quotations
• Manage standing orders and delivery logistics
• Operate and improve the website
• Comply with our legal and regulatory obligations

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. We do not use your data for automated decision-making or profiling.

Legal basis

We process your personal data on the following GDPR grounds:

Legitimate interest Art. 6(1)(f)

Responding to business enquiries, operating a secure website, and detecting and preventing fraud. We have conducted a legitimate interests assessment; you may request a copy.

Contract performance Art. 6(1)(b)

Fulfilling orders placed with us and managing delivery schedules for wholesale customers.

Legal obligation Art. 6(1)(c)

Accounting records and tax filings required under Czech law (Act No. 563/1991 Coll. on Accounting; Act No. 235/2004 Coll. on VAT).

Consent Art. 6(1)(a)

Non-essential cookies, where we ask for your agreement before setting them. You may withdraw consent at any time without affecting past processing.

Third parties

We engage the following processors who may access personal data when providing their services:

Cloudflare, Inc.

United States. Provides CDN, DNS, and DDoS protection. All traffic to this website transits Cloudflare's network. Cloudflare participates in the EU–US Data Privacy Framework and operates data centres within the EU/EEA. See Cloudflare's privacy policy.

Email provider

Our contact address (hello@blackstoneproduce.uk) is handled by [EMAIL PROVIDER]. Messages you send us are stored on their infrastructure in accordance with their privacy policy.

Where personal data is transferred outside the EEA, it is protected by appropriate safeguards — including standard contractual clauses approved by the European Commission, or adequacy decisions — in accordance with GDPR Chapter V.

We do not share your data with any other third parties.

Your rights

Under GDPR, you have the following rights in relation to your personal data:

Access

Request a copy of the personal data we hold about you.

Rectification

Ask us to correct inaccurate or incomplete data.

Erasure

Ask us to delete your data. This right applies in most cases but is subject to our legal retention obligations (see Retention below).

Restriction

Ask us to pause processing of your data while a dispute is pending.

Portability

Receive the data you provided to us in a structured, machine-readable format.

Object

Object to processing based on legitimate interests, including direct marketing (we send none).

Withdraw consent

Withdraw consent you have given (e.g. for non-essential cookies) at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, email hello@blackstoneproduce.uk with a description of your request. We will respond within one calendar month. We may ask for proof of identity before disclosing or deleting data.

You also have the right to lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (UOOU), at uoou.gov.cz.

Cookies

Cookies are small text files your browser stores on your device. We use the following categories:

Essential

Required for the site to function correctly (session management, security). Set automatically; cannot be disabled without breaking the site.

Analytics

[Complete this section if analytics are in use] — if you use Cloudflare Web Analytics, Plausible, or similar, describe the tool, what it measures, whether cookies are set, and whether consent is required.

You can manage or block cookies via your browser settings. Guidance for common browsers: Chrome, Firefox, Safari. Disabling essential cookies will affect site functionality.

Retention

We keep personal data only for as long as necessary:

Contact enquiries

2 years from the date of last contact, or until you request deletion, whichever is sooner.

Order and invoice records

10 years, as required under Czech accounting law (Act No. 563/1991 Coll.).

Infrastructure logs

Up to 30 days, as determined by Cloudflare's log retention settings.

When the retention period expires, data is securely deleted or anonymised.

Contact

The data controller for this website is:

We may update this policy periodically. Material changes will be reflected on this page with a revised date at the top. Continued use of the site after changes constitutes your acknowledgement of the updated policy.