Privacy Policy (B2B customers)

Why do we use your data?

What data do we collect?

What is our lawful basis?

Where do we get the data from?

How long do we keep the data for?

To manage our relationship with you or your business/employer, including so:

(a)   we can create a customer or supplier  account; or

(b)   we can notify you about changes to our terms and conditions or this Privacy Policy.

Your name, business email and postal addresses, business telephone number, job title and details of your business/employer.

We process this data because it is necessary for our legitimate interests of servicing our customers or dealing with our suppliers (as applicable). We also process this data because it is necessary (in certain circumstances) to comply with our legal obligations

From you directly, when you interact with us or from another person within your business or organisation. 

We retain information relating to your customer/supplier account for as long as you or your business/employer (as applicable) remain an active customer and for 7 years afterwards.

To enter into, and administer, a contract with you or your business/employer when you purchase products from us or supply products or services to us and to allow us to collect or make payments from/to you for those products.

Your name, business email address, business telephone number, your qualifications, working hours, location/office address, working hours, languages spoken, authority to bind, meeting notes and correspondence (including emails and any transcripts of telephone conversations). Where you are a sole trader, we may also collect billing and delivery addresses and payment details.

We process this data because it is necessary for the performance of our contract with you.

From you directly, when you interact with us or from another person within your business or organisation. 

We retain data relating to an order you or your business/employer places for 7 years from the date your or our order is completed because we are legally required to do so, and so we can exercise or defend a legal claim.

To assess your viability as a potential distributor of our products or supplier of goods or services to us.

Name, business contact data (such as phone number and email address), job title, qualifications and experience, and references.

We process this data because it is necessary for our legitimate interests of ensuring the suitability of all our distributors and suppliers and ensuring they are best placed to represent our business or provide goods/services to us (as applicable).

From you directly or from another person within your business or organisation or from any referee whose details were supplied by you or your business/employer.

We keep such data for up to 12 months (or longer, if required by applicable laws) following the termination or expiry of our agreement or arrangement with you or your business/employer.

To market our products to you, including by sending you our monthly trade newsletter.

Your name, business email address, business telephone number, job title and details of your business/employer.

We process this data based on our legitimate interest in promoting our business and our products, or with your consent.

From you directly.

We retain data related to direct marketing for as long as we think you will be interested in receiving our marketing communications. This is usually until you opt-out of direct marketing.

To allow us to respond to any enquiries you submit to us (whether by phone, email, post or otherwise).

Your name, business phone number, business email address, job title, business/employer and any other information you may supply to us when you interact with us.

We process this data based on our legitimate business interest in communicating with you in accordance with your wishes and expectations and for providing good customer service.

Directly from you when you contact or interact with us.

If your query relates to an order you have placed with us, or that we have placed with you, or where we need to obtain legal advice, we may retain records for up to seven years following completion of the order.

Otherwise, we retain records for 3 months from collection.

To comply with our legal obligations, including health and safety if you visit our premises.

Name, job title, business contact information (such as phone number and email address) and details of any visits to our premises.

We may also process limited categories of special category personal data relating to you as necessary in connection with any visit to our premises, including dietary requirements and accessibility requirements.

We process this data to comply with our legal obligations and for the establishment, exercise and defence of legal claims.

Directly from you or another person within your business or organisation.

We keep such data for up to 24 months (or longer, if required by applicable laws or for the establishment, exercise or defence of legal claims) following initial collection.

To comply with our legal obligations, including import and export regulations, sanctions lists, anti-money laundering, modern slavery and human trafficking laws, trade restrictions and retention obligations.

Name, job title, business contact information (such as phone number and email address) and information available from publicly available sources regarding your business activities.

We process this data to comply with our legal obligations.

Directly from you or another person within your business or organisation, or from publicly available sources.

We keep such data for up to 24 months (or longer, if required by applicable laws or for the establishment, exercise or defence of legal claims) following initial collection.

To ensure compliance with our policies, procedures, contractual terms and codes of practice.

Name, job title, business contact information (such as phone number and email address), details of your activities in relation to our contract with you or your business/employer insofar as they relate to compliance with our policies, procedures, contractual terms and codes of practice.

We process this data because it is necessary for our legitimate interests of ensuring compliance with our policies, procedures, contractual terms and codes of practice.

Directly from you or another person within your business or organisation, or from publicly available sources.

We keep such data for up to 24 months (or longer, if required by applicable laws or for the establishment, exercise or defence of legal claims) following initial collection.

To take or defend legal or administrative action in relation to our supply or purchase of goods or services to/from you, including to enforce the terms of any contract between us (or us and your business/employer) and resolve any dispute.

Name, business contact information (such as phone number and email address), job title and such further information as is shared by you (or your business/employer) or collected by us in connection with our supply or purchase of goods or services to/from you.

We process this data because it is necessary for our legitimate interests of the establishment, exercise and defence of legal claims (or potential legal claims).

Directly from you or another person within your business or organisation, or from publicly available sources.

We keep such information regarding you for up to seven years (or longer, if required by applicable laws) following the termination or expiry of our agreement or arrangement with you or your business/employer.

What are my rights?

What does this mean?

To be informed:

You have a right to be informed about the personal data that we collect, use and hold about you.

Access:

You have a right to access and receive copies of the personal data we hold about you.

Rectification:

If we hold inaccurate personal data about you, you have a right to ask us to rectify this.

Erasure:

If you'd like us to delete personal data we hold about you, you have a right to ask us to do so. This is commonly known as the right to be forgotten, but this right will only apply where (for example):

1.        we no longer need the personal data for the purpose we originally collected it for;

2.      we are relying on the lawful basis of your consent to the collection of data, and you withdraw this consent; or

3.      you exercise your right to object (as set out below) to our processing of your personal data.

Restriction of processing:

You have a right to limit how we use your personal data in certain circumstances, including (for example) where:

1.        you believe that the personal data we hold about you may be inaccurate;

2.      we no longer require your personal data to achieve the purpose we collected it for, but you have asked us to retain it so you can establish, exercise or defend a legal claim;

3.      you are entitled to ask us to delete your personal data, but you've asked us to restrict the processing of it instead; or

4.      you've asked us to stop processing your personal data, and we are considering your request.  

To object:

In certain circumstances, you have a right to object to the processing of your data, and this means that we will stop using it, unless we are able to demonstrate that, on balance, we have legitimate grounds for continuing to process your personal data which overrides your rights, or the data is needed for the establishment, exercise or defence of legal claims.

Data portability:

Where we are processing your personal data and we are relying on the lawful basis of consent or the performance of a contract (where this is the case, this will be set out in the table above) and we are carrying out that processing by automated means, then you have a right data portability. This means that if you ask us to, we will provide your personal data to you in a structured, commonly used and machine-readable format and transfer your personal data to an organisation of your choice.

To withdraw consent:

If we are processing your data and relying on the lawful basis of your "consent" (where this is the case, this will be set out in the table above), then you are entitled to withdraw your consent at any time. You can do this using the details set out in the "Contact Us" section below.  

To complain:

We hope that if you have any queries, comments or concerns about the way we handle your personal data, you will raise these with us in the first instance, and you can do so using the contact details contained in the "Contact Us" section below. However, if you are unhappy with the way we have responded, you have the right to complain to the Information Commissioner's Office, the regulator for data protection in the UK. Their address is: First Contact Team, Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF. You can find more information out at: ico.org.uk/for-the-public/how-to-make-a-data-protection-complaint.