Privacy Policy
Last updated:
1. Who We Are
("we", "our", or "us") is committed to protecting your privacy. This policy outlines how we handle your personal data when you use our website or establish a B2B trade account with us.
2. Data We Collect
As a B2B wholesale platform, we collect information necessary to fulfill bulk orders and manage trade accounts. We do not process special category (sensitive) data.
- Identity Data: First name, last name, business title.
- Contact Data: Trading address, delivery address, email address, telephone numbers.
- Business Data: Company registration details, VAT number (if applicable).
- Transaction Data: Details of orders, payments, and invoices.
3. Legal Basis and Purposes
Under the UK General Data Protection Regulation (UK GDPR), our lawful bases for processing are:
- Contract: To register you as a new customer, process and deliver your wholesale orders.
- Legitimate Interests: To manage our relationship, provide business updates, and improve our services.
- Legal Obligation: To maintain accounting records and comply with tax regulations.
- Consent: Where explicitly provided for specific marketing communications.
4. Sharing Your Data
We may share data with trusted third parties solely for business operations:
- Logistics and freight providers for pallet/box delivery.
- Payment processing gateways and banking partners.
- IT and hosting service providers.
- Professional advisers (accountants, legal counsel) bound by confidentiality.
5. International Transfers
Our operations are primarily UK-based. If we utilise service providers outside the UK, we ensure a similar degree of protection is afforded by implementing appropriate safeguards, such as UK standard data protection clauses.
6. Data Retention
We retain personal and business data only for as long as necessary to fulfill the purposes we collected it for, including any legal, accounting, or reporting requirements. Standard trade account data is kept for the duration of the relationship plus six years for tax purposes.
7. Data Security
We have implemented robust security measures to prevent your data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. Access is limited to employees and partners who have a strict business need to know.
9. Your Data Protection Rights
Under the UK GDPR, you have rights including:
- Access: Request a copy of your personal data.
- Rectification: Request correction of inaccurate data.
- Erasure: Request deletion of your data.
- Restriction: Request suspension of processing.
- Portability: Request transfer to you or a third party.
- Objection: Object to processing based on legitimate interests.
- Withdraw Consent: Withdraw consent at any time for marketing.
To exercise these rights, please contact us at . You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO) at ico.org.uk.
10. Changes to This Policy
We may update this policy periodically to reflect changes in our wholesale operations or legal obligations. Please review this page regularly.