Home / Privacy notice
Privacy notice
How we collect, use and protect personal data, in accordance with the UK GDPR and the Data Protection Act 2018.
Last updated: [date]
1. Who we are
EDSE Group Ltd (company number 00000000, registered office [address]) is the data controller for personal data collected through this website and in the course of supplying goods to our customers.
If you have any question about this notice or about how we handle your data, contact us at privacy@silverbacksolution.co.uk or on 01234 567 890.
2. What we collect
We collect only what we need in order to quote for and supply goods to your business. That is:
- Contact details — name, job title, business email address, business telephone number, and the company you work for.
- Enquiry details — the products and quantities you ask about, delivery postcode, and anything else you choose to tell us in an enquiry.
- Account and transaction data — billing and delivery addresses, purchase order references, order history, invoices and payment records.
- Credit information — where you apply for a credit account, information obtained from credit reference agencies and from the trade references you provide.
- Correspondence — emails, notes of telephone calls, and records of quotations issued.
We do not collect special category data and we do not knowingly collect data relating to anyone under 18.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and preparing a quotation | Legitimate interests — responding to a business enquiry you have made |
| Processing orders, arranging delivery, invoicing and taking payment | Performance of a contract |
| Assessing an application for a credit account | Legitimate interests — assessing credit risk before extending terms |
| Keeping records of PPE supplied for traceability and product recall | Legal obligation and legitimate interests — product safety |
| Keeping accounting and tax records | Legal obligation |
| Occasional emails about products relevant to your account | Legitimate interests — business-to-business marketing, with an opt-out in every message |
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and we have concluded they are not — but you may object at any time, and we will stop unless we have compelling grounds not to.
4. Who we share it with
We share personal data only where it is necessary to fulfil your order or meet a legal obligation. Specifically, with:
- Our suppliers and manufacturers, where goods are despatched direct to your site — they receive the delivery name, address and contact number only.
- Carriers and pallet networks, for the same purpose.
- Credit reference agencies, where you have applied for a credit account. This may leave a footprint on your business credit file.
- Our accountant and, where necessary, HMRC, for tax and accounting purposes.
- Our IT and email providers, who process data on our behalf under written terms.
We do not sell personal data, and we do not share it with third parties for their own marketing purposes.
5. Where it is stored
Personal data is stored on systems located within the UK or the European Economic Area. Where any provider we use processes data outside that area, we ensure an appropriate safeguard is in place — normally the UK International Data Transfer Agreement or an adequacy decision.
6. How long we keep it
- Enquiries that do not result in an order — up to 24 months, then deleted.
- Customer account and transaction records — six years after the end of the relationship, to meet accounting and limitation period requirements.
- Records of PPE supplied — ten years, to support product traceability and recall.
- Marketing preferences and opt-outs — retained indefinitely, so that we honour them.
7. Your rights
Under the UK GDPR you have the right to:
- be told how your data is used — which is what this notice is for;
- request a copy of the personal data we hold about you;
- have inaccurate data corrected;
- request erasure, where we no longer have a lawful reason to keep it;
- restrict or object to processing, including objecting to direct marketing at any time;
- request your data in a portable format, where processing is based on contract or consent;
- withdraw consent at any time, where we rely on consent.
To exercise any of these, email privacy@silverbacksolution.co.uk. We will respond within one month. There is no charge.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would ask you to raise it with us first so we have the chance to put it right.
8. Cookies and analytics
This website uses only the cookies strictly necessary for it to function. We do not use advertising cookies or third-party tracking pixels.
Check this is accurate. If you add Google Analytics, Meta Pixel, LinkedIn Insight Tag, a live chat widget, or any embedded content, this section must be updated and you will need a cookie consent banner under the Privacy and Electronic Communications Regulations. Non-essential cookies require consent before they are set.
9. Security
We maintain appropriate technical and organisational measures to protect personal data, including access controls, encrypted transmission, and restricting access to those who need it. No system is completely secure, but we take the protection of your data seriously and will notify you and the ICO of any breach that is likely to result in a risk to your rights.
10. Changes to this notice
We may update this notice from time to time. The version published on this page is the current one, and the date at the top tells you when it last changed. Material changes affecting existing customers will be notified by email.