Privacy Policy

Introduction  

Welcome to the Corston privacy policy 

This Privacy policy sets out how Corston collects, uses, transfers, processes, and discloses your data and sets out our security practices. This policy outlines and informs you as to how we collect, use and look after your personal information when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you. It also explains your rights under the applicable US privacy laws and state-specific regulations. Please note, our privacy practices are subject to the applicable laws of the places in which we operate. 

Corston respects your privacy and is committed to safeguarding and protecting your personal information.  

This privacy policy is intended for  

  1. Visitors to Corston’s website;  

  1. Corston’s consumer and business clients;  

  1. Members of the public who are interested in contacting Corston; and 

  1. Any individual who has received this notice. 

 

1. Important information and who we are  

Purpose of this privacy policy  

This policy aims to give you information on how Corston collects and processes your personal information through your use of this website, including any data you may provide when you sign up to our newsletter, enquire about a product or service or take part in an event, conference or survey.  

Our privacy policy tells you what personal information we collect and how we collect it, including any data you may provide through this website when you visit the site or enquire about a product or service or take part in an event. It explains what we use your personal information for and how we protect your personal information. This privacy notice explains our general practices. However, where local laws or regulations require that we process information differently, or refrain from such processing, we will always comply with the applicable local law. This website is not intended for children, and we do not knowingly collect data relating to children.  

It is important that you read this privacy policy together with any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal information about you so that you are fully aware of how and why we are using your data.  

Controller  

This privacy policy is issued on behalf of Corston USA LLC (incorporated in Delaware), whose registered office is at 251 Little Falls Drive, Wilmington, Delaware, 19808, USA). Corston USA LLC is the controller and responsible for this website, trading as Corston so when we mention “Corston” or "we", "us" or "our" in this privacy policy, we are referring to Corston USA LLC who is responsible for processing your data.   

Contact details   

For any questions about this privacy policy or our privacy practices, please contact us:   

Company name: Corston USA LLC 

Email address: hi@corston.us 

Changes to the privacy policy and your duty to inform us of changes  

We keep our Privacy policy under regular review. We may change this Privacy policy from time to time. We encourage you to review this Privacy policy periodically. This version was last updated on 11 April 2025.  

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.   

Third-party links  

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.  

 2. The personal information we collect about you  

Personal information, or personal information, means any information about an individual. It does not include data where the identity has been removed (anonymous data).  

We may collect, use, store and transfer different kinds of personal information about you which we have grouped together as follows:  

  • Identity data includes first name, maiden name, last name, or similar identifier, marital status, title, date of birth and gender;  

  • Contact data includes email address, postal code, preferences, interests and telephone numbers;  

  • Technical data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website;  

  • Usage data includes information about how you use our website;  

  • Marketing and communications data includes your preferences in receiving marketing from us and your communication preferences; and  

  • Your purchases including your order history  

We also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data could be derived from your personal information but is not considered personal information in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal information so that it can directly or indirectly identify you, we treat the combined data as personal information which will be used in accordance with this privacy policy. 

We do not collect sensitive data such as Social Security numbers, government-issued IDs, or biometric information.  

 3. How is your personal information collected?  

We use different methods to collect data from and about you including through:  

  • Direct interactions. You may give us your identity and contact data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal information you provide when you:  

  • enquire about our products or services;  

  • subscribe to our service or publications;  

  • request marketing to be sent to you (including newsletters);  

  • subscribe to an event, conference, webinar or survey;   

  • give us feedback or contact us;   

  • provide a comment on our blog; or  

  • place an order  

Automated technologies or interactions. As you interact with our website, we will automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal information by using cookies, server logs and other similar technologies. We may also receive technical data about you if you visit other websites employing our cookies. Please see our cookie policy for further details.  

  • Third parties or publicly available sources. We will receive personal information about you from various third parties as set out below:  

  • analytics providers such as Google. 

 4. How we use your personal information  

We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:  

  • Where we need to perform the contract, we are about to enter into or have entered into with you;  

  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;  

  • Where we need to comply with a legal obligation; and  

Generally, we do not rely on consent as a legal basis for processing your personal information although we will get your consent before sending direct marketing communications to you via email. You have the right to withdraw consent to marketing at any time by contacting us at hi@corston.com.   

Purposes for which we will use your personal information  

We have set out below a description of all the ways we use your personal information.  

We will use your personal information: 

  • To respond to your requests; 

  • To improve our level of service; 

  • To provide our products to you; 

  • To promote our products; 

  • To process payments for products; 

  • To manage your account, if necessary; 

  • To provide you with information when you request it  

  • To provide information when we believe it may be of interest to you;  

  • To invite you to provide your views on our products and services, participate in research or attend events; 

  • To perform analytics and understand your preferences; 

  • To create aggregated and anonymized or de-identified data; 

  • To detect and prevent fraud 

  • Exercise and defend legal claims  

  • To gain insights and feedback on our products and services in order to correct or improve them, by analyzing information from external sources such as Google, Facebook and Twitter (and others); 

  • For our own internal administrative and quality assurance purposes; and 

  • For other purposes that may be detailed on a website which will be described at the time the information is collected. 

  • To manage and improve our processes and our business operations. 

We will use your personal information to: 

  • Manage and protect our network and information systems security 

  • Project our equipment and facilities 

  • Conduct risk and security assurance measures 

  • Prepare and perform management reporting and analysis, including analytics and metrics 

To achieve other purposes 

We will use your personal information: 

  • To follow applicable laws and regulations; 

  • To respond to lawful requests from competent public authorities; 

  • To tell you about changes to our terms, conditions and policies; 

  • To exercise or defend Corston against potential, threatened or actual litigation; 

  • To protect Corston’s or your vital interests, or those of another person; 

  • To disclose any transfers of value made to you in relation to expert services that you provide to us; 

  • To respond to and handle your queries or requests; 

  • To assist with product safety and recalls; and  

  • When we sell, assign or transfer all or part of our business. 

Website and mobile application usage information 

We also collect information about your computer browser type and operating system, websites you visited before and after visiting our websites, standard server log information, Internet Protocol (IP) addresses, location data, mobile phone service provider, and mobile phone operating system. 

We use this information to understand how our visitors use our websites so that we can improve them, the services we offer, and our advertising.  

Use of IP addresses 

An IP address is a set of numbers that is automatically assigned to your computer whenever you log on to your Internet service provider or through your organization’s local area network (LAN) or wide area network (WAN). Web servers automatically identify your computer by the IP address assigned to it during your session online. 

Corston, or third-party companies acting on our behalf, may collect IP addresses for the purposes of systems administration and to audit the use of our websites. We also may use IP addresses to identify users of our websites when we feel it is necessary to enforce compliance with the websites’ terms of use or to protect our service, websites or other users. 

Marketing  

We strive to provide you with choices regarding certain personal information uses, particularly around marketing communications from us.  

You will receive marketing communications from us if you have requested information from us and you have not opted out of receiving that marketing.  

Other online services and third-party features  

We may provide links to other online services and websites for your convenience and information, and may include third-party features such as apps, tools, widgets, and plug-ins (e.g. Instagram, Pinterest, Facebook and LinkedIn buttons). These services and websites may operate independently from us. The privacy practices of these third parties, including details on the information they collect about you, are subject to their own privacy statements. To the extent any linked online services or third-party features are not owned or controlled by us, and we are not responsible for these third parties’ information or other practices.  

Third-party marketing  

Corston does not share your personal information with any third party for marketing purposes. In the event we wish to do so, we will get your express opt-in consent before we share your personal information with any third party for marketing purposes.  

Third-party web analytics services   

We use third-party online analytics services, such as Google Analytics and HubSpot. The service providers that administer these analytics services use cookies and similar technologies to collect and analyze information about use of the site and report on activities and trends and diagnose technical issues.  

To learn more about Google’s practices, please visit https://policies.google.com/technologies/partner-sites and opt out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout. To learn more about HubSpot's practices please visit https://www.hubspot.com/data-privacy/gdpr.  

Your Opt-out Rights  

You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time at hi@corston.com.  

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For more information about the cookies we use, please see our cookie policy.  

In accordance with applicable laws for your State, you can opt out or withdraw consent of processing of your personal information for targeted advertising by: 

  • clicking Cookie Settings link at the bottom of our relevant web pages and then toggling off targeting cookies; or  

  • by using the Privacy Controls in your browser and these browser-based settings communicate your preferences to opt out of processing for targeted advertising to online services that you visit.   

In addition, in accordance with applicable laws for your state, you may request to opt out of any non-cookie based (i.e., offline) sharing of their personal information for targeted advertising by submitting a request to us and select US Laws and providing the requested information. 

Please note that Corston and its service providers may still use technologies for Corston’s advertising and other purposes where allowed by applicable laws. 

Unsubscribe. You may always choose to use Corston unsubscribe process to remove yourself from categories of our marketing communications. Please select unsubscribe from the bottom of Corston’s email marketing communications.  

Other Industry Choices. Some advertising partners may participate in an industry organization that offers users an opportunity to opt out of ad targeting.  

Our websites may use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies to analyze use patterns and may collect information about your use of the website, including your IP address. More information on Google Analytics can be found here: https://policies.google.com/technologies/partner-sites. If you would like to opt-out of having your data used by Google Analytics, please use the Google Analytics opt-out available here: https://tools.google.com/dlpage/gaoptout/. 

Change of purpose  

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.  

If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.  

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.  

5. Disclosures of your personal information  

We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.  

We share your personal information on a need-to-know basis, to the extent necessary to follow laws and regulations, and to manage the activities related to our relationship with you. 

We share your personal information with teams in our Corston companies and affiliates who need to see it to do their jobs. In some cases, our relationship with you is supported by specialized service providers working on our behalf. These service providers are contractually required to protect your personal information and not to use it for their own purposes. 

These specialized service providers include: 

  • advertising partners that provide us services; 

  • internet service providers; 

  • data analytics providers; 

  • operating systems and platforms; 

  • social networks; 

  • joint marketing partners;  

  • shipping partners; and 

  • payment processors 

We will share your personal information with local or foreign regulators, or government and law enforcement authorities as necessary or appropriate, in particular when we have a legal obligation to do so. These may be in or outside your country of residence. We may also disclose your personal information for other legal reasons, such as to enforce our terms and conditions; and protect our rights, privacy, safety or property, and/or that of our affiliates, you or others. 

We may share your personal information in connection with a sale or business transaction, such as a reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings). 

We may also share information with advertising partners as described in this Privacy policy and for any other purposes disclosed to you at the time we collect the information or pursuant to your consent.   

6. International transfers  

This website and Privacy Notice are intended only for individuals within the United States. However, Corston works all over the world. Therefore, we may need to transfer and use your personal information outside of the United States. We implement appropriate measures to protect your personal information when we transfer your personal information outside of the United States, such as data transfer agreements that incorporate standard data protection clauses. The data privacy laws in the countries we transfer it to may not be the same as the laws in the United States. Law enforcement agencies, regulatory agencies, security authorities or courts in the countries we transfer your personal information to may have the right to see your personal information. 

7. Data security  

Corston will take appropriate legal, organizational, and technical measures to protect your personal information consistent with applicable privacy and data security laws. 

Unfortunately, the transmission of information via the Internet or a mobile phone network connection is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of the personal information you transmit to our websites or mobile applications: any transmission is at your own risk. While we cannot guarantee that loss, misuse or alteration to data will not occur, once we have received your information, we will employ appropriate technical security measures to help prevent such unfortunate occurrences. 

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.   

We have put in place procedures to deal with any suspected personal information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.  

8. Data retention  

How long will you use my personal information for?  

We will only retain your personal information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. Insofar as the processing of personal information is based on your consent, we will delete this data if you withdraw your consent.  

To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.  

9. Your legal rights  

You may be entitled under applicable laws to request:  

  • That we provide you transparency about our privacy practices, including copies of your personal information that we process, subject to some exceptions; 

  • Provide portability of your information, subject to some exceptions; 

  • Correct information that is inaccurate or incomplete, subject to some exceptions; and 

  • Delete your personal information, subject to some exceptions. 

Where allowed in your jurisdiction, the ability to opt out of the sale or sharing of your information. Under certain circumstances, you have rights under data protection laws in relation to your personal information.    

Depending on your state of residence, you may have the right to: 

  • Access – Request details on the personal information we collect and process. 

  • Delete – Request deletion of your personal information, subject to exceptions. 

  • Opt-Out – Prevent certain data sharing practices. 

  • Correct – Request corrections to inaccurate personal information. 

  • Non-Discrimination – Exercise your rights without penalty. 

To make a request, contact us at hi@corston.com. California residents may designate an authorized agent to act on their behalf. 

If you wish to exercise any of the rights, please contact us at hi@corston.us.