Privacy Policy
How we collect, use and protect your personal data — in accordance with UK GDPR and the Data Protection Act 2018.
Contents
Introduction
Infinity Cash and Carry Ltd ("we", "us", "our") is committed to complying with the General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Looking after the personal information you share with us is very important, and we want you to be confident that your personal data is kept safely and securely and to understand how we use it to offer you a better and more personalised experience.
We have published this notice to help you understand:
- How and why Infinity Cash and Carry Ltd collects information from you
- Who we share your information with, why and on what basis
- What your rights are
If we make changes to this notice we will notify you by updating it on our website. Infinity Cash and Carry Ltd is the 'Data Controller' of the personal data you provide to us, meaning we determine the purposes and the way in which any personal data is, or will be, processed.
What Information We Collect
When you buy goods from us, you are entering into a contract with us. Before ordering, you will need to set up an account. To do this we will ask you to provide some personal information, such as:
- Full name
- Address (and previous addresses)
- Date of birth
- Contact telephone numbers
- Email address
Payment Information
As an existing customer, if you have shopped with us using a credit or debit card, or we have taken these details for a payment authorisation, we will securely collect and store this payment card information. New customers and existing customers whose payment cards have expired will be asked if they would like to automatically store these details to speed up the payment process. If you set up a direct debit payment, we will also collect bank details from you.
Credit Accounts
When you apply for a credit account, we obtain information about you from credit reference agencies. This is covered in more detail in Section 5 below.
Device & Browsing Data
To undertake website personalisation, we will gather information about the devices you use to access our site (desktop and mobile), which may include your IP address. For further information on our use of cookies and tracking please see Section 10 below.
CCTV
When you visit our premises, Infinity Cash and Carry Ltd uses CCTV for security monitoring purposes.
How We Use Your Information
Data Protection law says we are allowed to use and share your personal data only where we have a proper reason to do so. We must rely on one or more of the following legal bases:
- Contract — processing is necessary to fulfil a contractual arrangement, e.g. to process and deliver your order.
- Consent — where you agree to us using your information in a specific way, e.g. storing your payment card details.
- Legitimate Interests — the interests of Infinity Cash and Carry Ltd in managing our business to provide you with the best products and service in the most secure and appropriate way.
- Legal Obligation — where there is a statutory or other legal requirement to share the information, e.g. for law enforcement purposes.
The table below sets out the ways we use your personal information and the legal basis we rely on for each use.
| What we use your personal information for | Legal Basis | Legitimate Interest (where applicable) |
|---|---|---|
| Set up your account | Legitimate interests | Process efficiency in dealing with such activity. |
| Storing payment cards | Consent | N/A |
| Process your orders | Fulfilling a contract | N/A |
| Notify you of your order status | Legitimate interests | Process efficiency and service improvement. |
| Manage your account and provide customer services (including call recording, data verification, and handling complaints) | Legal obligation / Legitimate interests | Keeping records up to date and handling customer contact efficiently and effectively. |
| Detect, investigate and report financial crime (e.g. fraud) | Legal obligation / Legitimate interests | Improving how we deal with financial crime and complying with regulatory obligations. |
| Undertake website personalisation and administration | Legitimate interests | Developing products and services that attract and retain customers. |
| Marketing communications — special offers, promotions, new lines | Legitimate interests | Developing products and services that attract and retain customers. |
| Notifying you about enhancements to our services | Legitimate interests | Developing products and improving customer interaction. |
| Customer satisfaction surveys, product reviews and market research | Legitimate interests | Developing products and services that attract and retain customers. |
| Maintaining network and data security | Legitimate interests | Maintaining the security of our network and the confidentiality of your information. |
| Logistics planning, demand forecasting, management information and research | Legitimate interests | Responding to demand and planning product ranges effectively. |
Who We Share Your Data With
Infinity Cash and Carry Ltd works with a number of trusted suppliers, agencies and businesses to provide you with the high quality goods and services you expect from us. All third parties are subject to thorough security checks and will only hold the minimum amount of personal information necessary.
Supplier Partners
Trusted partners who supply products and services on our behalf. They will only hold personal information needed to fulfil orders or provide a service on our behalf.
Delivery Partners
In order for you to receive your goods, we work with a number of delivery partners. We only pass limited information to them to ensure delivery of your items.
IT Companies
Businesses who support our website and other business systems.
Marketing Companies
Companies who help us manage our electronic communications with you, or carry out surveys and product reviews on our behalf.
Payment Processing
Trusted third party payment processing providers to securely take and manage payments.
Credit & Fraud Prevention
Credit Reference Agencies
When you apply for credit with us, we will make searches about you with credit reference agencies (CRAs) to assess your creditworthiness, check your identity, and prevent fraud. We will supply your personal information to CRAs and they will give us information about you, such as your financial history.
We will continue to exchange information about you with the CRAs on an ongoing basis, including about your settled accounts and any debts not fully repaid on time. Your data may be linked to the data of your spouse, any joint applicants or other financial associates. The CRAs we use include Experian, TransUnion and Equifax — full details are available in their Credit Reference Agency Information Notices (CRAIN).
We use automated credit-scoring methods to assess your application. If you don't meet our lending criteria you will be declined for credit. To object to automated credit scoring, please contact us using the details in Section 11.
Fraud Prevention Services
Before we provide services, goods or financing to you, we undertake checks to prevent fraud and money laundering, and to verify your identity. Personal data processed for this purpose includes: name, address, date of birth, contact details, financial information, employment details and device identifiers including IP address.
We and fraud prevention agencies may enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime. If you are considered to pose a fraud or money laundering risk, your data can be held by fraud prevention agencies for up to six years.
Automated Decisions
Decisions may be made by automated means as part of fraud prevention processing. This means we may automatically decide that you pose a fraud or money laundering risk if our processing reveals behaviour consistent with fraudulent conduct, inconsistencies with previous submissions, or deliberate concealment of your true identity.
You have rights in relation to automated decision-making. If a fraud risk determination is made about you, we or a fraud prevention agency may refuse to provide requested services. To find out more or to exercise your rights, please contact us using the details in Section 11.
Transfers to Third Countries
Some of the information you provide may be transferred outside the United Kingdom to countries such as India and the United States. Although data may be held in UK data centres, colleagues in other countries may access it to undertake the activities described in this policy.
Infinity Cash and Carry Ltd works with suppliers and partners who may make use of cloud and/or hosted technologies. We undertake data security due diligence on our partners and ensure they conform to appropriate accreditations. Wherever transfers of data to third countries occur, we will put in place appropriate contractual provisions to ensure strict rules around the confidentiality and security of your information.
Keeping in Touch with You
We want to keep you up to date with information about new ranges, special offers and improvements to our website. When you set your account up, we will ask you if you want to receive this type of marketing information. Infinity Cash and Carry Ltd will not share your information with companies outside of Infinity Cash and Carry Ltd for their own marketing purposes.
If you decide you do not want to receive marketing information, you can request that we stop by:
- Writing to us at the address in Section 11
- Calling us on 0743 636 3337
- Emailing [email protected]
- Clicking the unsubscribe link within any marketing email
You may continue to receive mailings for a short period while your request is being processed.
How Long We Keep Your Data
The length of time we retain your personal information is determined by the purpose for which we use it and our obligations under applicable laws. We will always retain your personal information for 7 years after the date it is no longer needed by us, except where:
- The law requires us to hold your personal information for a longer or shorter period
- You exercise your right to erasure and we do not need to hold it for any other permitted reason
- We bring or defend legal claims — in which case we retain the data until proceedings have concluded and no further appeals are possible
- A court or regulator requires us to keep it for a different period
Your Rights
You are entitled to exercise the following Data Subject Rights. More information is available on the Information Commissioner's website at www.ico.org.uk.
Request a copy of the personal information we hold about you.
Request that we correct inaccurate or incomplete personal information.
Request that we delete your personal data in certain circumstances.
Request that we limit how we process your data in certain circumstances.
Request that we transfer your data to another organisation or directly to you.
Object to our processing of your data, including for direct marketing purposes.
Request human review of any automated decisions that significantly affect you.
Lodge a complaint with the ICO at www.ico.org.uk or call 0303 123 1113.
To exercise any of these rights, contact us using the details in Section 11.
Cookies Notice
This notice explains what cookies are, how Infinity Cash and Carry Ltd uses them and the choices you have. By continuing to use infinitycashandcarry.com (the "Site"), you agree to our use of cookies as described here.
What Are Cookies?
Cookies are small text files stored on your browser or device when you visit the Site. They allow the Site to recognise you either for the duration of your visit (session cookie) or on repeat visits (persistent cookie). They are not harmful and do not contain sensitive information such as your home address or credit card details.
Types of Cookies We Use
- Strictly Necessary Cookies — Essential for the Site to function, e.g. accessing secure areas and setting up an account. Cannot be disabled.
- Analytical / Performance Cookies — Help us understand how visitors use the Site so we can improve it.
- Functionality Cookies — Remember your preferences (e.g. username, language, region) to provide an enhanced experience.
- Targeted Marketing Cookies — Used to serve relevant advertising and measure the effectiveness of our marketing.
What Do We Use Cookies For?
- To enable transactions and provide an enhanced, personalised web experience
- To personalise and improve your customer experience
- To allow you to securely sign in to your account
- To store the contents of your shopping basket while you browse
- To record pages and products you have viewed and the time spent browsing
- To distribute visitors evenly across platforms for optimal performance
- For re-marketing purposes to show you relevant related products on other websites
- To support social media sharing features (Facebook, Twitter etc.)
Are Cookies Safe?
Yes. Information stored in cookies is safe and anonymous to external third parties. Your account security is never compromised. Find more at www.allaboutcookies.org and www.youronlinechoices.com.
Can I Turn Off Cookies?
Yes — however, disabling cookies will limit your experience of the Site and some features, including adding items to your basket and signing into your account, will not work. To change your cookie settings, amend the settings in your web browser (see your browser's Help menu).
Third Party Cookies
We allow selected third parties to place cookies when you visit our site for analytical and targeting purposes. Infinity Cash and Carry Ltd is not responsible for the privacy policies of third party sites and we advise you to check these separately.
| Cookie Provider | Purpose |
|---|---|
| Google Tag Manager | Tag management system to deploy marketing and analytics tags without modifying site code. |
| Google Analytics | Web analytics service that tracks and reports website traffic and visitor behaviour. |
| Bing Ads | Tracks conversions and serves targeted advertisements via Microsoft's Bing advertising network. |
| Yahoo DOT Tag | Measures conversions and audience behaviour for Yahoo advertising campaigns. |
| Yahoo Analytics | Tracks and analyses visitor behaviour and campaign performance via Yahoo. |
| Facebook Connect | Social login and sharing tool enabling connection via Facebook account. |
| Facebook Custom Audiences | Builds custom audience segments for targeted advertising on Facebook. |
Opting Out of Analytics
Visitors who do not want their data used by Google Analytics can install the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout. You can also customise Google Display Network ads at adssettings.google.com.
Contact Us
To exercise your data subject rights, make a complaint, or ask any question about this Privacy Policy, please get in touch using contact use form.