Legal
Privacy policy
Last updated: 30 July 2026
1. Who we are
[LEGAL NAME LTD], trading as [BRAND], operates [WEBSITE]. We are the data controller for the personal data described here.
- Registered address: [LEGAL ADDRESS]
- Company number: [COMPANY NUMBER]
- Contact for privacy matters: [EMAIL]
- Telephone: [PHONE]
2. What data we collect
Because we sell to businesses, most of what we hold is business contact data. It is still personal data when it identifies a person, so this policy covers it.
- Identity and contact data: your name, job role, trading name, billing and delivery address, email address and phone number.
- Order and payment data: the styles and quantities you order, order history, VAT number and payment confirmation. Card details are handled by our payment provider, so we do not store full card numbers.
- Technical data: IP address, device and browser type, and cookie data.
- Communications: enquiries and messages you send us by email, form or phone.
- Marketing preferences: whether you have opted in to our trade mailings.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis under UK GDPR |
|---|---|
| Quoting, processing and delivering your order, and managing your trade account | Performance of a contract |
| Answering enquiries and providing support | Legitimate interests, or performance of a contract |
| Sending trade marketing emails | Consent, or the soft opt-in for existing customers |
| Fraud prevention and site security | Legitimate interests |
| Analytics to improve the website | Consent, given through cookies |
| Meeting our legal, VAT and accounting duties | Legal obligation |
4. Who we share it with
We share data only with the suppliers who help us run the business:
- Payment processors, for taking payment and issuing refunds.
- Delivery and courier partners, for pallet and parcel dispatch.
- Our website host and order platform.
- Email and mailing tools, where you have opted in.
- Website analytics, where you have accepted analytics cookies.
- Our accountant and auditors, for tax and statutory records.
We may also disclose data where the law requires it, for example a court order or a request from a tax authority. We do not sell your personal data.
5. International transfers
Where a supplier stores data outside the UK, we make sure it is protected either by an adequacy decision or by appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us which safeguard applies to a particular supplier.
6. How long we keep it
- Order and transaction records: 6 years, to meet UK tax and accounting rules.
- Trade account data: while the account is active, then 24 months after it closes.
- Marketing data: until you unsubscribe.
- Enquiries and support messages: 24 months.
7. Your rights
Under UK GDPR you can ask us for a copy of your data, correct it, erase it, restrict or object to how we process it, ask for it in a portable format, and withdraw consent at any time. Withdrawing consent does not affect processing we carried out before you withdrew it.
To exercise a right, email [EMAIL]. We respond within one month and may first ask you to confirm your identity.
8. Complaints
If you are unhappy with how we handle your data, tell us first at [EMAIL] and we will investigate. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
9. Cookies
This site uses one cookie-free browser storage entry to remember whether you want prices in euro or sterling. Nothing else is stored on your device, and no analytics or advertising cookies are set. If we add non-essential cookies later, we will ask for your consent through a banner before setting them.
10. Changes to this policy
We update this policy from time to time. The date at the top shows the current version, and we will tell account holders by email about any material change.