tel: +44 (0)29 20 522 510 united kingdom / great britain USA / America EU / Europian union / france / germany / spain / netherlands / great britain
search
  • 0
    • All Products >

    Privacy and Cookie Notice

    Last updated: 7 September 2026

    This notice explains how Graham Sweet Studios Limited collects and uses personal information when you visit our websites, contact us, request a quotation, create an account or purchase our products.

    It applies to:

    • www.grahamsweet.com
    • shop.grahamsweet.com

    Who we are

    Graham Sweet Studios Limited is responsible for the personal information described in this notice.

    Company number: 13562479
    Registered address: 292 North Road, Cardiff, CF14 3BN, United Kingdom
    Trading address: Units 6, 7 & 8 Clos Menter, Excelsior Industrial Estate, Western Avenue, Cardiff, CF14 3AY, United Kingdom

    Email: [email protected]
    Telephone: 029 20 522 510

    Graham Sweet Studios principally supplies trade customers, although we occasionally accept orders from private individuals.

    Information we collect

    Depending on how you interact with us, we may collect:

    • Your name, business name and job title.
    • Your address, email address and telephone number.
    • Information contained in enquiries, quotations and correspondence.
    • Order, billing, delivery and transaction information.
    • Information associated with a customer account.
    • Information you provide through live chat.
    • Your marketing preferences.
    • Technical information about visits to our websites, including IP address, browser, device, pages viewed, referring website and cookie choices.

    Please do not send payment-card information through email, live chat or website enquiry forms.

    How we use personal information

    We use personal information to:

    • Respond to enquiries.
    • Prepare and follow up quotations.
    • Manufacture, process and deliver orders.
    • Operate customer accounts and our online shop.
    • Arrange payments, refunds and deliveries.
    • Provide customer service and live-chat support.
    • Maintain business, accounting and transaction records.
    • Protect our websites and systems and prevent fraud.
    • Understand and improve our websites and advertising.
    • Send relevant marketing where permitted by law.
    • Meet our legal and regulatory obligations.

    Our lawful bases

    We rely on one or more of the following lawful bases:

    • Contract: where processing is necessary to provide a quotation, fulfil an order or take requested steps before an order.
    • Legal obligation: where information must be processed or retained to comply with the law.
    • Legitimate interests: to operate and improve our business, administer customer relationships, protect our systems and send permitted business marketing.
    • Consent: where consent is required for optional cookies or particular marketing activities.

    Where we rely on consent, it can be withdrawn at any time.

    Marketing

    Where permitted by law, we may use our legitimate interests to email existing customers and people who have enquired about our products with information about similar products, projects and offers.

    For individual subscribers, we do this only where the PECR soft-opt-in requirements apply. Every email we send contains information explaining how to opt out.

    You can stop marketing communications at any time by:

    • Clicking the unsubscribe link in an email.
    • Replying to an email and asking us to stop.
    • Emailing [email protected].
    • Calling 029 20 522 510.

    We retain the minimum information necessary to record and honour an opt-out.

    We currently use Mailjet and may also use Odoo to manage and send marketing emails. We do not send marketing by SMS.

    Payments

    We do not take payments directly through our online shop.

    Payment may be made by:

    • Bank transfer.
    • A payment link created and sent using Stripe.
    • Telephone using our Barclaycard payment terminal.

    Telephone calls are not recorded. Card information provided by telephone is entered directly into the Barclaycard terminal. We do not write down or retain complete card details or card security codes.

    Stripe, Barclaycard and the relevant banks process payment information under their own privacy notices.

    Deliveries

    We share the information needed to arrange delivery with the selected delivery provider.

    These providers may include:

    • Interhaul and Pallet-Track members.
    • Royal Mail.
    • Parcelforce.
    • FedEx.
    • UPS.
    • Parcel2Go and the carrier selected through its service.
    • Other suitable delivery providers where required.

    Information shared may include the recipient’s name, business, delivery address, telephone number, email address and relevant delivery instructions.

    Other service providers

    Where necessary, personal information may be processed by:

    • Microsoft, for Microsoft 365 business email, contacts and documents.
    • Odoo, for our website shop, customer accounts, customer relationship management and sales administration.
    • Mailjet, for marketing email.
    • Tawk.to, for live-chat services.
    • Google, for analytics and advertising services.
    • Meta and LinkedIn, for advertising measurement and audience services.
    • OpenAI, for AI-assisted business administration.
    • Our website, IT and infrastructure providers.
    • Accountants, insurers, banks and professional advisers.
    • Public authorities or law-enforcement bodies where required by law.

    We share only the information reasonably necessary for the relevant purpose.

    AI-assisted processing

    We use selected business technology services, including OpenAI’s business services, to assist authorised staff with administrative work.

    This may include:

    • Searching and summarising business email threads.
    • Summarising enquiries and customer correspondence.
    • Preparing internal business information.
    • Entering relevant information into our CRM and sales systems.
    • Assisting with customer, quotation and order administration.

    These services support our staff. Graham Sweet Studios remains responsible for how the resulting information is used.

    Our OpenAI business account is configured so that business content is not used to train OpenAI’s models.

    We do not use these services to make solely automated decisions about customers that have legal or similarly significant effects.

    International processing

    Some service providers may process information outside the United Kingdom.

    Where this constitutes a restricted international transfer, we rely on an applicable UK adequacy regulation or appropriate contractual and organisational safeguards required by data-protection law.

    Further information about the safeguards used by a particular provider can be requested from us.

    How long we keep information

    We keep personal information only for as long as reasonably necessary for the purposes described in this notice. This includes providing our services, maintaining business and tax records, resolving disputes, preventing fraud and meeting legal obligations.

    The period depends on the nature of the information and why we hold it. When information is no longer required, we delete it or anonymise it where reasonably practicable.

    Live-chat conversations are stored by Tawk.to until they are deleted by us. Information deleted from its active service may remain temporarily in backups.

    Website analytics

    Matomo

    We use a self-hosted Matomo installation to produce website-usage statistics.

    Matomo is configured to operate without cookies and to respect browser “Do Not Track” settings. It does not place Matomo analytics cookies on visitors’ devices.

    The information is processed on infrastructure controlled by Graham Sweet Studios.

    Google Analytics

    Where the visitor permits analytics cookies, we use Google Analytics to understand how visitors find and use our websites.

    Google Analytics may collect information about pages viewed, visits, devices, browsers, approximate location and interactions with our websites.

    Cookies and similar technologies

    Cookies are small files stored by a browser. We also use browser local storage, which performs a similar function.

    Essential technologies are used to operate website security, accounts, baskets and cookie controls. Optional analytics, marketing, live-chat and video technologies are controlled through our cookie-preference system.

    Visitors can:

    • Accept all optional categories.
    • Reject all optional categories.
    • Choose individual categories.
    • Change their preferences later using the “Change your cookie preferences” link.

    Because the main website and shop use separate domains, visitors may need to make their choices separately on each site.

    Cookies and browser storage used

    Cookie or storage name Provider Category Purpose Typical duration
    cookie_consent Graham Sweet Studios Essential Local-storage record of the visitor’s cookie preferences 1 year
    session_id Odoo Essential Shop security, visitor session, account access and basket functionality 90 days
    frontend_lang Odoo Preferences Remembers the language used by the shop Browser session
    visitor_uuid Odoo Visitor recognition Assigns a persistent identifier to a shop visitor 1 year
    utm_source Odoo Analytics Records the marketing source that brought a visitor to the shop Normally up to 3 months
    utm_medium Odoo Analytics Records the type of marketing link or campaign Normally up to 3 months
    utm_campaign Odoo Analytics Records the relevant marketing campaign Normally up to 3 months
    _ga Google Analytics Analytics Distinguishes website visitors Up to 2 years
    _ga_* Google Analytics Analytics Maintains Google Analytics session information Up to 2 years
    _gcl_au Google Ads Marketing Measures advertising and conversions Up to 90 days
    _gcl_aw and related _gcl_* cookies Google Ads Marketing Attributes visits and conversions to advertising Normally up to 90 days
    _fbp Meta Marketing Measures advertising and recognises browser visits Up to 90 days
    _fbc Meta Marketing Records a Facebook advertising click identifier when present Up to 90 days
    bcookie LinkedIn Marketing/security LinkedIn browser identification and abuse prevention Up to 1 year
    bscookie LinkedIn Marketing/security Recognises certain signed-in LinkedIn users Up to 1 year
    JSESSIONID LinkedIn Marketing/security Protects requests and validates URLs Browser session
    lang LinkedIn Preferences Remembers a LinkedIn language preference Browser session
    lidc LinkedIn Marketing/performance Helps select and operate LinkedIn data centres About 24 hours
    TawkConnectionTime Tawk.to Functional Supports the current live-chat connection Browser session
    twk_idm_key Tawk.to Functional Supports and authenticates the live-chat session Session or provider-controlled period
    tawkUUID Tawk.to Functional Recognises a live-chat visitor Provider-controlled period
    __tawkuuid Tawk.to Functional Recognises a returning live-chat visitor Provider-controlled period
    Tawk_5a65e2b64b401e45400c48e1 Tawk.to Functional Stores information associated with our live-chat widget Provider-controlled period

    Names containing * include a variable suffix identifying the relevant account, website or configuration.

    Matomo’s standard _pk_* cookies are not included because our Matomo implementation has cookies disabled.

    YouTube videos

    Some pages contain embedded YouTube videos.

    The YouTube player is blocked initially. Before it is enabled, visitors are warned that playing the video will connect to Google/YouTube and may allow cookies or similar technologies to be used.

    The player is enabled only when the visitor chooses to allow it. Google/YouTube may then receive information including the visitor’s IP address, device information and the address of the page containing the video.

    Depending on the visitor’s browser, Google account, location and YouTube’s current configuration, the following cookies may be used:

    Cookie Provider Purpose Typical duration
    YSC YouTube Records interaction with the embedded player Browser session
    VISITOR_INFO1_LIVE YouTube Supports video delivery and measures bandwidth Up to approximately 6 months
    VISITOR_PRIVACY_METADATA YouTube Records privacy-related player settings Up to approximately 6 months
    PREF YouTube Remembers player and display preferences Up to approximately 2 years
    CONSENT Google/YouTube Records Google consent information Provider-controlled period
    __Secure-ROLLOUT_TOKEN and related __Secure-* cookies Google/YouTube Security, service operation and feature testing Provider-controlled period

    YouTube’s cookie names and durations may change.

    Controlling cookies

    Optional cookies can be controlled through our cookie-preference panel.

    Cookies already stored can also be removed using browser settings. Blocking essential cookies may prevent account, basket or other shop functions from working correctly.

    Rejecting optional cookies does not prevent visitors from accessing the ordinary content of our websites.

    Third-party providers may change their cookie names or durations. Their own privacy and cookie notices provide further details.

    Security

    We use reasonable technical and organisational measures to protect personal information.

    No internet transmission or electronic storage system can be guaranteed to be completely secure.

    Your rights

    Depending on the circumstances, you may have the right to:

    • Ask for a copy of your personal information.
    • Have inaccurate information corrected.
    • Ask us to delete or restrict the use of information.
    • Object to processing based on legitimate interests.
    • Object to direct marketing at any time.
    • Receive certain information in a portable format.
    • Withdraw consent without affecting earlier lawful processing.
    • Complain to the Information Commissioner’s Office.

    These rights are subject to legal conditions and exceptions.

    To exercise a right, contact [email protected]. We may need to confirm your identity before responding.

    Complaints

    Please contact us first if you have a concern so that we can try to resolve it.

    You may also complain to the Information Commissioner’s Office:

    Website: ico.org.uk
    Telephone: 0303 123 1113

    Other websites

    Our websites may link to external websites that we do not control. Their own privacy notices explain how they process information.

    Changes to this notice

    We may update this notice when our services, providers or legal obligations change. The latest version will be published on our websites with its updated date.

    (function () { // Fire only on the cart page (handles language prefixes & query strings) var path = location.pathname || ''; if (path.indexOf('/shop/cart') === -1) return; // Wait for gtag to exist (in case it loads async) var fired = false; function fireConversion() { if (fired) return; if (typeof gtag === 'function') { fired = true; gtag('event', 'ads_conversion_Shopping_Cart_1', { // add parameters if you want, e.g. value, currency, items // value: 0, // currency: 'GBP' }); } } // Try a few times in case gtag loads late var tries = 0; var tick = setInterval(function () { tries++; fireConversion(); if (fired || tries > 20) clearInterval(tick); // ~10 seconds total }, 500); // Also try on window load window.addEventListener('load', fireConversion); })();

    Graham Sweet Studios

    open menu

    Tel: +44 (0)29 20 522 510

    E : [email protected]