Privacy Policy

1. Who is responsible for your data

, trading as , is the data controller for the personal data described in this policy. We are registered in England and Wales under company number , with a registered office at .

We process personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.

2. What we collect

We only collect what we need to answer an enquiry, fulfil an order or meet a legal duty. Depending on how you deal with us, that may include:

• Identity and contact details — your name, the company name if you order as a trade customer, email address, telephone number, billing address and delivery address.
• Order records — the ranges, quantities, batch references and cutting instructions you ordered, delivery dates, correspondence about the order and any returns or claims.
• Payment information — the amount, currency, date and outcome of a payment. Card details are entered directly with our payment provider and are never held on our systems.
• Site and access data — details you give us about unloading arrangements, site contacts and access restrictions.
• Technical data — IP address, browser type, device type, referring page and the pages you viewed, collected in server logs.
• Correspondence — the content of emails, contact forms and telephone notes.

We do not knowingly collect data from children, and we do not collect special category data. Please do not send us health, biometric or similar information.

3. Why we use it and our lawful basis

Under the UK GDPR we must have a lawful basis for every use of your data. Ours are as follows:

• Performance of a contract — quoting, reserving stock, taking payment, arranging cutting, delivering goods, handling cancellations, returns and refunds.
• Legal obligation — keeping accounting and VAT records, and responding to lawful requests from a public authority.
• Legitimate interests — answering enquiries, keeping our website secure and working, preventing fraud, improving our ranges and defending legal claims. We balance these interests against your rights and stop where yours prevail.
• Consent — sending marketing email where you have asked for it, and setting any non-essential cookie. You can withdraw consent at any time without affecting processing carried out beforehand.

We do not use automated decision-making or profiling that produces legal effects for you.

4. Who we share it with

We do not sell personal data. We share it only where it is necessary for the purposes above, and only with recipients bound by confidentiality and, where they act as processors, by a written data processing agreement:

• Pallet and parcel carriers, who receive the delivery name, address, telephone number and access notes.
• Payment providers and banks, who process the transaction and carry out fraud checks.
• Hosting, email and IT suppliers who operate the systems on which our records are held.
• Accountants, auditors, insurers and legal advisers, where they need the data to advise us.
• Public authorities, where we are required by law to disclose information.
• A purchaser or successor, if the business or part of it is transferred.

5. Transfers outside the United Kingdom

Our records are held within the United Kingdom and the European Economic Area wherever possible. Where a supplier processes data elsewhere, we rely on UK adequacy regulations for that country, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional safeguards the transfer requires. You may ask us for details of the mechanism used for a particular transfer.

6. How long we keep it

We keep personal data only as long as it is needed for the purpose it was collected for, and then delete or anonymise it.

• Enquiries that do not lead to an order: twelve months from the last message.
• Order, delivery and payment records: six years from the end of the accounting period, to meet tax and limitation requirements.
• Returns, refunds and claims: six years from the date the matter is closed.
• Marketing consent records: until consent is withdrawn, plus two years as evidence of the withdrawal.
• Server and security logs: twelve months.

7. Your rights

Subject to the conditions set out in the UK GDPR, you may ask us to:

• confirm whether we hold data about you and give you a copy of it;
• correct data that is inaccurate or incomplete;
• erase data we no longer have a reason to hold;
• restrict how we use your data while a dispute about it is resolved;
• provide data you gave us in a portable, machine-readable form, or send it to another controller;
• stop processing based on our legitimate interests, on grounds relating to your situation;
• stop using your data for direct marketing, which we will always honour.

Write to and we will respond within one month. That period may be extended by two further months for complex requests, in which case we will tell you why. We may ask for proof of identity before releasing information. There is no charge unless a request is manifestly unfounded or excessive.

8. Cookies and local storage

This website uses local storage in your browser to remember whether you have chosen to view prices in euro or pounds sterling. That value stays on your device, contains no identifier and is not sent to us. Clearing your browser data removes it.

Our web fonts are requested from a third-party font service, which receives your IP address as part of that request. Server logs record technical data as described above. We do not use advertising or cross-site tracking cookies. If that changes, we will ask for your consent before any non-essential cookie is set.

9. Security

We use encryption in transit, access controls limited to staff who need the data for their work, and regular backups. No system is completely secure, but we keep our measures under review and will notify you and the Information Commissioner where a breach requires it.

10. Changes to this policy

We may update this policy to reflect changes in what we do or in the law. The current version is always published on this page. Where a change materially affects how we use data you have already given us, we will tell you directly.

11. Contact and complaints

For any question about this policy, or to exercise a right, contact at , by telephone on , or by post at .

If you are not satisfied with our answer, you may complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or through the ICO website. We would ask you to raise the matter with us first so that we can try to resolve it.