Last updated: 28 May 2026
This privacy policy explains how J.H. Todd & Son collects, uses and protects your personal information when you use our website, place an order, contact us, or buy from us.
Our website is:
coalsellers.co.uk
1. Who we are
J.H. Todd & Son
Cockering Cottage
Tetney Road
North Thoresby
Grimsby
DN36 5QX
United Kingdom
Telephone: 01472 813 135
For the purposes of UK data protection law, J.H. Todd & Son is the data controller for the personal information we collect and use.
2. What information we collect
We may collect the following information when you use our website or place an order:
- your name
- billing address
- delivery address
- email address
- telephone number
- postcode
- order details
- payment status
- account login details, if you create an account
- messages or enquiries you send to us
- technical information such as IP address, browser type, device type and website usage data
We do not normally collect special category data, such as health information, religious beliefs or political opinions.
3. How we collect your information
We collect personal information when you:
- place an order through our website
- create a customer account
- fill in a contact form
- contact us by phone, email or message
- subscribe to any updates or marketing, if offered
- browse our website
Some technical data may be collected automatically through cookies, analytics tools, security tools and server logs.
4. How we use your information
We use your personal information to:
- process and deliver your orders
- contact you about your order or delivery
- manage collections from our shop
- take and confirm payment
- provide customer support
- respond to enquiries
- manage customer accounts
- keep records for tax, accounting and legal purposes
- prevent fraud and protect the security of our website
- improve our website, products and services
- send marketing messages, but only where allowed by law
The ICO says people have the right to be informed about how their personal information is collected and used, including the purposes of processing and who it is shared with.
5. Our lawful basis for using your information
Under UK GDPR, we must have a lawful basis for using your personal information. Depending on the situation, we rely on the following lawful bases:
Contract
We use your information to process and deliver your order, manage payment, provide customer service and deal with order-related queries.
Legal obligation
We keep certain records to comply with legal, tax and accounting requirements.
Legitimate interests
We may use your information where it is necessary for our legitimate business interests, such as improving our website, preventing fraud, managing deliveries, responding to enquiries and keeping our business records.
Consent
Where required, we will ask for your consent before using non-essential cookies or sending certain types of marketing.
You can withdraw consent at any time where processing is based on consent.
6. Payments
Payments made through our website are handled by third-party payment providers. We do not store your full card details on our website.
Payment providers may process your payment information in order to complete your transaction, prevent fraud and comply with their own legal obligations.
Our current payment provider is:
Natwest Tyl
Please refer to the payment provider’s own privacy information for details of how they process payment data.
7. Delivery and collection
If you place an order for delivery, we use your name, address, postcode, telephone number and order details to arrange delivery.
If you choose collection from shop, we use your information to prepare your order and contact you if needed.
We may contact you by phone or email about delivery arrangements, stock availability, substitutions, failed delivery attempts, or order issues.
8. Who we share your information with
We only share your personal information where necessary. This may include:
- website hosting providers
- payment processors
- delivery or courier services, where used
- email service providers
- IT support providers
- accounting/bookkeeping providers
- fraud prevention or security services
- HMRC or other authorities where legally required
We do not sell your personal information.
9. Marketing
We may contact you with offers, updates or information about our products if you have agreed to receive marketing or where the law otherwise allows us to do so.
You can unsubscribe from marketing at any time by using the unsubscribe link in an email or by contacting us directly.
Privacy and Electronic Communications Regulations, known as PECR, sit alongside UK GDPR and include rules on marketing emails, texts, calls and cookies.
10. Cookies
Our website may use cookies and similar technologies.
Cookies are small files placed on your device. They can be used to make the website work, remember basket contents, improve performance, provide security, and understand how visitors use the website.
Some cookies are essential for the website and online shop to work properly. Others, such as analytics or marketing cookies, may require your consent.
You can usually change your cookie preferences through your browser settings or any cookie banner/settings tool on our website.
For more detail, please see our separate Cookie Policy if available.
11. How long we keep your information
We only keep your personal information for as long as necessary.
As a general guide:
- order records are usually kept for up to 6 years for tax, accounting and legal purposes
- customer account information is kept while your account remains active
- contact form enquiries may be kept for up to 2 years
- marketing records are kept until you unsubscribe or withdraw consent
- website security logs may be kept for a limited period for security purposes
We may keep information for longer if needed to deal with disputes, legal claims, fraud prevention or legal obligations.
12. Your rights
Under UK data protection law, you have rights over your personal information. These may include the right to:
- ask for a copy of your personal information
- ask us to correct inaccurate information
- ask us to delete your information
- ask us to restrict how we use your information
- object to certain uses of your information
- ask for your information to be transferred to another provider
- withdraw consent where we rely on consent
These rights do not always apply in every situation, for example where we need to keep information for legal or accounting reasons.
To make a request, please contact us using the details above.
13. Security
We take reasonable steps to protect your personal information against loss, misuse, unauthorised access, alteration or disclosure.
Our website uses security measures such as SSL encryption where available, secure login controls, hosting security and regular software updates.
No website or online service can be guaranteed to be completely secure, but we work to keep your information safe.
14. International transfers
Some of the services we use may process personal information outside the UK.
Where this happens, we will take reasonable steps to ensure appropriate safeguards are in place, such as adequacy regulations or approved contractual protections.
15. Complaints
Please contact us first if you have any concerns about how we use your personal information.
You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator.
Information Commissioner’s Office
Website: ico.org.uk
Telephone: 0303 123 1113
16. Changes to this policy
We may update this privacy policy from time to time. The latest version will be published on this page.