We only collect what you send us in an enquiry or email, plus the technical information any web server records. We use it to reply to you and to supply goods you order. We do not use cookies, analytics or advertising trackers, and we never sell your information or use it for marketing without your consent. Enquiries that do not lead to an order are deleted after 12 months.
1. Who we are
[REGISTERED COMPANY NAME] Ltd, trading as YRWHOLESALE, is the data controller for the personal information described in this notice. Registered in England and Wales, company number [COMPANY NUMBER]. Registered office: [REGISTERED OFFICE ADDRESS].
For anything to do with your personal information, email info@yrwholesale.co.uk.
This notice covers the website at yrwholesale.co.uk and the emails you exchange with us. It does not cover other websites we link to, which have their own privacy notices.
2. The information we collect
Information you give us
When you use the enquiry form we receive your name, business name, email address, the product category you select and the message you write. The message is emailed to us together with the date and time it was sent and the IP address of the connection it was sent from, which we use to trace abuse of the form.
When you email us, or we quote to you and supply goods, we receive whatever you include in that correspondence — typically your name, role, business name, delivery address, telephone number and details of the goods you want.
Information collected automatically
Like every website, ours is served from a web server that records technical information about each request: your IP address, the date and time, the page requested, the browser and operating system you use and the site that referred you. Our hosting provider keeps these logs for security and to run the service. We do not combine them with your enquiry.
What we do not collect
This website has no user accounts, no checkout and no payment facility, so we do not collect passwords or card details online. We do not set cookies and we do not use analytics, advertising or social-media tracking tools. If we add any of these in future we will update this notice first.
3. How we use your information and our lawful basis
UK data protection law requires us to have a lawful basis for each use of your personal information. We use it:
- to respond to your enquiry and prepare a quotation — necessary to take steps at your request before entering into a contract (UK GDPR Article 6(1)(b));
- to accept and fulfil orders, arrange delivery and deal with any claims — necessary to perform our contract with you (Article 6(1)(b));
- to keep records of quotations, orders and payments — necessary to comply with our legal obligations, including tax and accounting law (Article 6(1)(c));
- to keep our website, email and business secure and to prevent fraud or misuse — our legitimate interests in running the business safely (Article 6(1)(f));
- to tell existing trade customers about products relevant to what they have bought from us — our legitimate interests in promoting our business to existing customers. You can opt out at any time by replying or emailing us, and every such message will tell you how.
We do not send marketing to anyone who has not bought from us unless they have asked us to. We do not use your information for automated decision-making or profiling.
4. Who we share it with
We do not sell or rent personal information. We share it only with service providers who help us run the business, and only as far as they need it to do so:
- Our website hosting provider, which serves this site and runs the enquiry form. It processes the technical log data described above and passes your enquiry to our mailbox.
- Our email provider, which stores and delivers our email, including enquiries and correspondence with you.
- Google, whose Google Fonts service supplies the typefaces used on this site. When a page loads, your browser requests the font files from Google’s servers, which means Google receives your IP address and standard request information. Google’s privacy policy explains how it handles this.
- Carriers and suppliers, who receive the delivery name, address and contact details needed to deliver your order.
- Professional advisers such as our accountants, and public authorities where we are required to by law.
Each provider is bound by contract or by law to protect your information and to use it only for the purpose we share it for.
5. Where your information is stored
We are based in the United Kingdom and aim to keep your information within the UK or the European Economic Area. Some of the providers listed above may store or process data outside the UK. Where they do, we rely on the safeguards recognised by UK law — the UK’s adequacy regulations for the country concerned, or the International Data Transfer Agreement or UK Addendum to the EU standard contractual clauses — so that your information stays protected to UK standards.
6. How long we keep it
- Enquiries that do not lead to an order: deleted 12 months after our last exchange with you.
- Quotations, orders, invoices and related correspondence: kept for 6 years after the end of the financial year they relate to, which is the period required for company accounting and tax records, then deleted.
- Server logs: retained by our hosting provider for a limited period for security purposes under its own retention policy.
- Marketing opt-outs: we keep a minimal record of your request so that we can honour it.
Where a legal claim or dispute is ongoing we may keep the relevant information until it is resolved.
7. How we protect it
This website is served over HTTPS, so what you send through the enquiry form is encrypted in transit. Enquiries are not stored on the website itself. Access to our mailbox and business records is limited to people who need it to respond to you or run the business. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information and would tell you and, where required, the Information Commissioner’s Office if a breach affecting you occurred.
8. Your rights
Under the UK GDPR and the Data Protection Act 2018 you have the right to:
- access the personal information we hold about you and receive a copy of it;
- have it corrected if it is inaccurate or incomplete;
- have it erased where we no longer need it or have no lawful basis to keep it;
- restrict how we use it in certain circumstances;
- object to our use of it where we rely on legitimate interests, and to any direct marketing at any time;
- receive it in a portable format where we process it by automated means on the basis of a contract or your consent;
- withdraw consent at any time where consent is the basis we rely on.
To exercise any of these rights, email info@yrwholesale.co.uk. We will respond within one month, and we may ask you to confirm your identity first. There is no charge unless a request is clearly unfounded or excessive.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the UK supervisory authority, the Information Commissioner’s Office (ICO), at ico.org.uk or on 0303 123 1113.
9. Cookies and similar technologies
This website does not set cookies and does not use local storage to track you. The only third-party requests a page makes are to Google Fonts, described in section 4. We do not use analytics, advertising pixels or social-media plug-ins.
10. Children
This is a business-to-business website and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has sent us personal information, please contact us and we will delete it.
11. Changes to this notice
We will update this notice if the way we handle personal information changes — for example if we add analytics, a customer account area or online payments. The date at the top of the page shows when it was last revised. Significant changes will be highlighted on this page.