Privacy Policy
Draft placeholder — not yet reviewed or approved. Do not treat this page as accurate or binding until it has been checked against real data flows and this notice is removed.
1. Who we are
The data controller for this site is [legal entity name/address per country — GB, IE, FR, etc. may need separate controller entries].
2. What we collect
Account/contact details, delivery addresses, order and invoice history, and login activity. Placeholder — confirm every field actually stored (e.g. see the customer account form’s email, address, and pricing-visibility settings) is listed accurately.
3. Why we process it (lawful basis)
Performing the trade account contract (orders, invoicing, delivery), legitimate interests (fraud prevention, service improvement), and legal obligation (tax/accounting records). Placeholder — confirm a lawful basis is recorded for each activity.
4. Who we share it with
Our ERP/order-processing system (M3/Infor ION), our email delivery provider (for password resets and order notifications), and any hosting/infrastructure provider we use. Placeholder — name each processor and confirm a data processing agreement is in place.
5. International transfers
Placeholder — confirm whether any processor above stores or accesses data outside the UK/EEA, and what safeguard applies (e.g. SCCs, adequacy decision) if so.
6. How long we keep it
Placeholder — set retention periods for account data, order/invoice records (usually driven by tax record-keeping rules, typically 6+ years in the UK), and login logs.
7. Your rights
Right to access, correct, delete, restrict, or port your data, and to object to certain processing. Under UK GDPR, complaints can be made to the ICO; under EU GDPR, to your local supervisory authority. Placeholder — add a contact route for exercising these rights.
8. Cookies
We currently set only strictly necessary cookies (keeping you signed in securely) — no analytics or marketing cookies. Your choice on the cookie banner is stored in your browser’s local storage, not a cookie itself. Placeholder — update this section if analytics/marketing cookies are ever added, since that would also need consent to be asked for (not just noted) before they’re set.
9. Security
Placeholder — describe technical/organisational measures in place, and the process for reporting a suspected data breach.
10. Contact
Placeholder — data protection contact details, and reference to Terms & Conditions.
Last updated: not yet published. Contact your account manager with any questions.