Privacy Policy

This policy explains what happens to personal data collected through supplyhubuk.co.uk. It covers the website only. If you buy from us, the handling of your account, order and payment data is governed by the separate terms and privacy arrangements we put in place with you as a customer.

Who we are

Supply Hub Ltd is the data controller for the personal data described in this policy. We are a company registered in England and Wales under company number 15365112, at The Elsie Whiteley Innovation Centre, Hopwood Lane, Halifax, HX1 5ER.

For anything to do with this policy, your data, or the rights set out below, contact us at sales@supplyhub.group or on 0330 043 3764.

To confirm before launch: whether Supply Hub is registered with the ICO as a data controller and, if so, the registration number — most UK businesses processing personal data electronically must register and pay the data protection fee. Also confirm whether data protection enquiries should go to sales@supplyhub.group or to a different named contact.

What we collect, and why

Information you send us

There are three places on this site where you can send us your details: the contact form, the call-back request, and the guided chat on each solutions page. Between them they ask for your name, company name, email address, telephone number and whatever you write in your message, plus, in the chat, your answers to a few questions about what you are looking for.

We use that information for one thing: to answer you, and to follow up about the enquiry you made. The lawful basis is Article 6(1)(b) — taking steps at your request before entering into a contract — and, where an enquiry does not lead to one, Article 6(1)(f) legitimate interests, our interest being in responding to people who have asked us to get in touch.

Everything on these forms is voluntary and none of it is used to build a marketing profile. We will not add you to a mailing list on the strength of an enquiry, and we do not sell or share your details with anyone for their own marketing.

The forms take text only. Please do not send us documents, invoices or artwork through this website — there is no upload facility, and if you need to send us a file, email or call us and we will tell you where to send it.

Analytics

With your permission we use Google Analytics 4 to understand how the site is used in aggregate: which pages get read, roughly where visitors come from, and where people give up. It helps us make the site better and nothing else. The lawful basis is your consent (Article 6(1)(a)), together with regulation 6 of the Privacy and Electronic Communications Regulations.

If you do not accept, the analytics tag is never loaded at all — no script is requested and no cookie is set. You can change your mind whenever you like: change your cookie settings.

The map on our contact page

The interactive map is embedded from Google Maps. Loading it shares your IP address with Google and lets Google set cookies on your device, so we treat it the same way as analytics: it stays unloaded until you accept. The address and a directions link are shown instead, and those need no permission from you.

Technical logs

Like any website, ours is served by a hosting provider that keeps short-term server logs — typically IP address, time of request, the page requested and your browser’s user-agent string. These are used for security and to keep the service running, on the basis of our legitimate interests in operating the site safely.

To confirm before launch: the hosting provider and its log retention period, so they can be named here. Also confirm whether the host processes data outside the UK.

Cookies and similar technologies

A cookie is a small file a site stores on your device. We keep this to a minimum. Before you make a choice, this site sets no cookies at all; the only thing stored is your decision once you have made one, which is what lets us stop asking.

Fonts on this site are served from our own domain rather than from Google Fonts, so simply reading a page makes no request to a third party and reveals your IP address to nobody but our host.

You can also block or delete cookies in your browser settings. Doing so will not stop this site working.

Who else sees your data

We do not sell personal data. It is shared only with the suppliers who make the website work, each acting on our instructions:

• Formspark — receives what you type into the contact form, call-back request and chat, and forwards it to us by email. It is the delivery mechanism for the enquiry; it is not used to profile you.
• Google — Google Analytics and, if you load it, Google Maps. Both only with your consent.
• Our hosting provider — serves the pages and keeps the technical logs described above.

We may also disclose information where we are legally required to, or to establish or defend legal claims.

To confirm before launch: whether Supply Hub has a written data processing agreement in place with Formspark, Google and the host, as Article 28 UK GDPR requires; and which of them process data outside the UK. Google Analytics involves transfers to the United States — the safeguard relied on (UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework) needs naming in the section below.

Sending data outside the UK

Some of the suppliers above process data outside the United Kingdom. Where that happens, we rely on the safeguards UK data protection law allows — an adequacy decision covering the destination country, or standard contractual clauses with the UK addendum.

How long we keep it

Enquiries are kept for as long as we need them to deal with the enquiry and any relationship that follows, and then for as long as we need to meet our legal and accounting obligations. Analytics data is retained according to the setting on our Google Analytics property.

To confirm before launch: the actual retention periods. UK GDPR requires specific periods, not “as long as necessary” — for example, how long an unsuccessful enquiry is kept in the inbox or CRM, and the data retention setting chosen on the GA4 property (2 or 14 months).

Keeping it secure

This site is served over HTTPS, so what you send from the forms is encrypted in transit. We take appropriate technical and organisational measures to protect personal data, though no method of transmission over the internet is completely secure.

Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• ask us to delete data, where we have no continuing reason to hold it;
• ask us to restrict how we use it;
• object to processing carried out on the basis of legitimate interests;
• ask us to transfer data you gave us to another provider, in a machine-readable form; and
• withdraw consent at any time, where consent is what we relied on — for analytics, that is the cookie settings link.

Exercising these rights is free and we will respond within one month. Write to sales@supplyhub.group.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.

Children

This is a business-to-business website. It is not directed at children and we do not knowingly collect data from them.

Changes to this policy

We update this policy when what we do with data changes. The date at the top shows the last revision. Where a change affects what you have consented to, we will ask you again rather than assume your previous answer still stands.