Privacy Policy | RAMCO® Safety Shields UK

Ramco Safety Shields UK Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit ramcoshields.com (the "Website") or otherwise interact with us, and sets out your rights under the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Data Protection Act 2018.

For the purposes of applicable data protection law, the data controller responsible for your personal data is Ramco Safety Shields UK Ltd.

1. Who We Are and How to Contact Us

1.1 The data controller is Ramco Safety Shields UK Ltd.
1.2 For any privacy matter, including exercising your rights or asking a question about this Policy, contact us at eu@ramco-safetyshields.com.

2. Scope of This Policy

2.1 This Policy applies to personal data we collect through the Website, through enquiries and quotation requests, and when you place an order with us.
2.2 The Website may contain links to third-party websites, including our regional sites and our payment provider. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies separately.

3. Personal Data We Collect

3.1 Enquiry and quotation data: when you submit an enquiry or request a quote, we collect the information you provide, which may include your name, business email address, company name, telephone number, and the contents of your message.
3.2 Order and payment data: when you place an order, checkout is handled securely by our payment processor, Stripe. Information processed during checkout may include your name, email address, telephone number, and billing and delivery address, together with your order details. Card payment details are entered directly with Stripe and are not collected or stored by us.
3.3 Technical, functional and analytics data: to make the Website work, limited information is stored locally in your browser, such as your selected region and currency and the contents of your basket. Our hosting provider also records page views and selected interactions to help us understand and improve the Website. Analytics events do not include names, email addresses, messages, payment details, or other free-form information you submit.
3.4 Correspondence: we keep records of communications between you and us, for example email exchanges relating to your enquiry or order.

4. How We Use Your Data and Our Legal Bases

We process personal data only where we have a lawful basis to do so under the UK GDPR and EU GDPR. The legal bases we rely on are set out below.

4.1 To respond to enquiries and provide quotations - our legitimate interests in dealing with your request, and taking steps at your request prior to entering into a contract.
4.2 To process and fulfil your orders, take payment, and arrange delivery - performance of a contract with you.
4.3 To operate, maintain, and secure the Website and to remember your preferences - our legitimate interests in providing a functional and secure service.
4.4 To comply with our legal, accounting, tax, and regulatory obligations - compliance with a legal obligation.
4.5 To send you service or transactional communications relating to your enquiry or order - performance of a contract and our legitimate interests.
4.6 We use Google Analytics only with your consent. You can withdraw this consent at any time using Cookie settings in the footer. Withdrawal does not affect the lawfulness of processing before withdrawal.

5. Cookies and Local Storage

5.1 The Website uses functional storage for your basket, selected region and currency, and cookie preferences. Rejecting optional analytics does not prevent you from browsing, requesting a quote or placing an order.
5.2 We use privacy-focused, cookie-free website analytics provided by our hosting provider. We do not use advertising or social-media tracking cookies and do not use analytics to build advertising profiles.
5.3 During checkout you are directed to our payment provider, Stripe, which may set its own cookies on its own domain in order to process your payment securely and to help prevent fraud. This is governed by Stripe's own privacy policy.
5.4 You can control or delete cookies and local storage through your browser settings. Please note that restricting essential storage may affect Website functionality - for example, your basket may not work correctly.
5.5 If you accept analytics, Google Analytics 4 (provided by Google) uses cookies such as _ga and _ga_HVK2EKG677 to help measure visits, page views and use of the Website. This may involve online identifiers, browser and device information, approximate location and referral information. Google Analytics is not loaded before you accept or when you reject optional cookies. Advertising consent is not granted by accepting analytics, and Google signals and advertising personalisation are disabled in our tag configuration.
5.6 We remember your analytics choice for up to 180 days and then ask again. Google Analytics cookies are configured to expire after 180 days and may be renewed during consented visits. You can change or withdraw your choice through Cookie settings in the footer; withdrawing stops our Google Analytics tag and removes its first-party analytics cookies. If browser storage is blocked, your choice may not be remembered between pages.
5.7 Google may process analytics data outside the UK or EEA. For information about Google's processing, see policies.google.com/privacy and policies.google.com/technologies/partner-sites. We do not intentionally send names, email addresses, enquiry messages, payment details or checkout session identifiers to Google Analytics. Query strings and fragments are excluded from the page address configured in our tag.

6. Sharing Your Data

6.1 We do not sell your personal data.
6.2 We share personal data only where necessary with trusted service providers who process it on our behalf, including our payment processor (Stripe), our website hosting provider, and our email and communications providers. These providers act on our instructions and are subject to appropriate confidentiality and data protection obligations.
6.3 We may disclose personal data where required to do so by law, regulation, or legal process, or where necessary to establish, exercise, or defend legal claims.

7. International Transfers

7.1 Some of our service providers may process personal data outside the UK or the European Economic Area. Where they do, we take steps to ensure that appropriate safeguards are in place, such as reliance on an adequacy decision, Standard Contractual Clauses, or the UK International Data Transfer Agreement.

8. Data Retention

8.1 We keep personal data only for as long as necessary for the purposes set out in this Policy, including to satisfy any legal, accounting, tax, or reporting requirements.
8.2 Order and transaction records are typically retained for the period required by applicable tax and company law. Enquiry data is retained for as long as needed to deal with your enquiry and for a reasonable period thereafter.

9. Your Rights

Under data protection law you have a number of rights in relation to your personal data.

9.1 You have the right to: request access to your personal data; request the correction of inaccurate data; request erasure of your data; request restriction of processing; object to processing carried out on the basis of our legitimate interests; request the transfer of your data (data portability); and, where processing is based on consent, withdraw that consent at any time.
9.2 To exercise any of these rights, please contact us at eu@ramco-safetyshields.com. We will respond within the timeframes required by applicable law.
9.3 These rights are subject to certain conditions and legal exemptions, and we may need to verify your identity before responding to a request.

10. Data Security

10.1 We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. Payments are processed over encrypted connections by Stripe.
10.2 While we take reasonable steps to protect your data, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Children

11.1 The Website is intended for business customers and is not directed at children. We do not knowingly collect personal data from children.

12. Changes to This Policy

12.1 We may update this Policy from time to time. The current version will always be posted on this page, together with the date on which it was last updated. We encourage you to review it periodically.

13. Complaints

13.1 If you have any concerns about how we handle your personal data, please contact us first at eu@ramco-safetyshields.com so that we can try to resolve the matter.
13.2 You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or with the data protection supervisory authority in your country of residence within the European Economic Area.