Privacy Policy | RAMCO® Safety Shields UK

Ramco Safety Shields UK Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit ramcoshields.com (the "Website") or otherwise interact with us, and sets out your rights under the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Data Protection Act 2018.

For the purposes of applicable data protection law, the data controller responsible for your personal data is Ramco Safety Shields UK Ltd.

1. Who We Are and How to Contact Us

1.1 The data controller is Ramco Safety Shields UK Ltd.
1.2 For any privacy matter, including exercising your rights or asking a question about this Policy, contact us at eu@ramco-safetyshields.com.

2. Scope of This Policy

2.1 This Policy applies to personal data we collect through the Website, through enquiries and quotation requests, and when you place an order with us.
2.2 The Website may contain links to third-party websites, including our regional sites and our payment provider. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies separately.

3. Personal Data We Collect

3.1 Enquiry and quotation data: when you submit an enquiry or request a quote, we collect the information you provide, which may include your name, business email address, company name, telephone number, and the contents of your message.
3.2 Order and payment data: when you place an order, checkout is handled securely by our payment processor, Stripe. Information processed during checkout may include your name, email address, telephone number, and billing and delivery address, together with your order details. Card payment details are entered directly with Stripe and are not collected or stored by us.
3.3 Technical and functional data: to make the Website work, limited information is stored locally in your browser, such as your selected region and currency and the contents of your basket. We do not use analytics, advertising, or third-party tracking cookies.
3.4 Correspondence: we keep records of communications between you and us, for example email exchanges relating to your enquiry or order.

4. How We Use Your Data and Our Legal Bases

We process personal data only where we have a lawful basis to do so under the UK GDPR and EU GDPR. The legal bases we rely on are set out below.

4.1 To respond to enquiries and provide quotations - our legitimate interests in dealing with your request, and taking steps at your request prior to entering into a contract.
4.2 To process and fulfil your orders, take payment, and arrange delivery - performance of a contract with you.
4.3 To operate, maintain, and secure the Website and to remember your preferences - our legitimate interests in providing a functional and secure service.
4.4 To comply with our legal, accounting, tax, and regulatory obligations - compliance with a legal obligation.
4.5 To send you service or transactional communications relating to your enquiry or order - performance of a contract and our legitimate interests.
4.6 Where we rely on your consent for any optional processing, you may withdraw that consent at any time by contacting us.

5. Cookies and Local Storage

5.1 The Website uses only strictly necessary and functional storage required for core features, such as your basket, your selected region and currency, and secure access to gated content. These are essential for the Website to function and are exempt from the requirement for prior consent.
5.2 We do not use analytics, performance, advertising, or social-media tracking cookies, and we do not build profiles of your browsing activity.
5.3 During checkout you are directed to our payment provider, Stripe, which may set its own cookies on its own domain in order to process your payment securely and to help prevent fraud. This is governed by Stripe's own privacy policy.
5.4 You can control or delete cookies and local storage through your browser settings. Please note that restricting essential storage may affect Website functionality - for example, your basket may not work correctly.

6. Sharing Your Data

6.1 We do not sell your personal data.
6.2 We share personal data only where necessary with trusted service providers who process it on our behalf, including our payment processor (Stripe), our website hosting provider, and our email and communications providers. These providers act on our instructions and are subject to appropriate confidentiality and data protection obligations.
6.3 We may disclose personal data where required to do so by law, regulation, or legal process, or where necessary to establish, exercise, or defend legal claims.

7. International Transfers

7.1 Some of our service providers may process personal data outside the UK or the European Economic Area. Where they do, we take steps to ensure that appropriate safeguards are in place, such as reliance on an adequacy decision, Standard Contractual Clauses, or the UK International Data Transfer Agreement.

8. Data Retention

8.1 We keep personal data only for as long as necessary for the purposes set out in this Policy, including to satisfy any legal, accounting, tax, or reporting requirements.
8.2 Order and transaction records are typically retained for the period required by applicable tax and company law. Enquiry data is retained for as long as needed to deal with your enquiry and for a reasonable period thereafter.

9. Your Rights

Under data protection law you have a number of rights in relation to your personal data.

9.1 You have the right to: request access to your personal data; request the correction of inaccurate data; request erasure of your data; request restriction of processing; object to processing carried out on the basis of our legitimate interests; request the transfer of your data (data portability); and, where processing is based on consent, withdraw that consent at any time.
9.2 To exercise any of these rights, please contact us at eu@ramco-safetyshields.com. We will respond within the timeframes required by applicable law.
9.3 These rights are subject to certain conditions and legal exemptions, and we may need to verify your identity before responding to a request.

10. Data Security

10.1 We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. Payments are processed over encrypted connections by Stripe.
10.2 While we take reasonable steps to protect your data, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Children

11.1 The Website is intended for business customers and is not directed at children. We do not knowingly collect personal data from children.

12. Changes to This Policy

12.1 We may update this Policy from time to time. The current version will always be posted on this page, together with the date on which it was last updated. We encourage you to review it periodically.

13. Complaints

13.1 If you have any concerns about how we handle your personal data, please contact us first at eu@ramco-safetyshields.com so that we can try to resolve the matter.
13.2 You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or with the data protection supervisory authority in your country of residence within the European Economic Area.