Privacy Policy

Last updated: 1st August 2026 | Version 2.0

This Privacy Policy explains how Leoclad Supplies Ltd collects, uses, shares and protects personal information.

It applies to website visitors, customers and prospective customers, contacts at customer organisations, suppliers and their contacts, professional advisers and other business contacts.

1. Who we are

Leoclad Supplies Ltd is a company registered in England and Wales under company number 16817986. Our registered office is:

4 Darwin House
The Innovation Centre
Pensnett Estate
Kingswinford
West Midlands
England
DY6 7YB

Leoclad Supplies Ltd is the controller of the personal information described in this policy. This means that we are responsible for deciding why and how that information is used.

Questions, rights requests and data protection complaints may be made:

• By email to info@leocladsupplies.co.uk

• By telephone on 0121 798 2438

• By post to the registered office above

Email is normally the quickest method, but requests and complaints may be made verbally or in writing.

2. The information we collect

Depending on how you deal with us, we may collect and use:

• Identity and business contact details, including your name, employer, job title, email address, telephone number and professional profile.

• Enquiries, quotations, correspondence, meeting notes and records of our business relationship.

• Customer and supplier account details, orders, contracts, invoices, payment status, credit information, bank account details and payment references.

• Billing and delivery addresses, delivery instructions, site contacts, proof of delivery and logistics or customs information.

• Technical enquiries, project and site information, product selections, test results, reports, photographs, complaints, warranty information and product traceability records.

• Marketing preferences, the source of a business contact and engagement with our communications.

• Website and technical information, including IP address, device and browser information, server and security logs, cookie or similar identifiers, consent choices and website usage information.

We do not intentionally collect special category information or criminal offence information through our website or ordinary sales activities. Please do not provide this information unless it is genuinely necessary and we have requested it.

3. How we obtain information

We collect information directly when you:

• Contact us.

• Request a quotation.

• Place an order.

• Open or operate an account.

• Make or receive a payment.

• Communicate with us by telephone, email or social media.

• Meet us at an event.

• Use our website.

• Receive technical support.

• Otherwise deal with us.

We may also receive business contact information from:

• Your employer or colleagues.

• Customers and suppliers.

• Referrals and introductions.

• Delivery and logistics providers.

• Trade or credit references.

• Company websites.

• Companies House.

• LinkedIn.

• Relevant trade directories.

• Other publicly available business sources.

Website and technical information may be generated by our website, hosting provider, security services and consent-management systems.

Where we obtain personal information from another source, we provide the relevant privacy information within the period required by law, normally when we first contact the person or within one month, unless an exemption applies.

4. Why we use information and our lawful bases

The lawful basis depends on the purpose for which the information is used and our relationship with the person concerned.

A contractual basis generally applies where the individual is personally the contracting party, such as a sole trader. Where a contact acts for a limited company or another organisation, we generally rely on legitimate interests in administering the business relationship.

Enquiries and quotations

We use information to respond to enquiries and prepare quotations.

We rely on contract or steps requested before entering into a contract where the individual is the proposed contracting party. Otherwise, we rely on our legitimate interests in responding to business enquiries and developing our business.

Customers, suppliers, orders and deliveries

We use information to manage customers and suppliers, process orders, arrange deliveries and provide services.

We rely on legitimate interests in administering business-to-business relationships. We rely on contract where the individual is personally the contracting party.

Invoicing, payments and business records

We use information to issue invoices, receive and make payments, maintain accounts and meet VAT, customs and transaction-record requirements.

We rely on contract, legal obligations and our legitimate interests in operating and protecting the business, as applicable.

Credit, fraud and legal claims

We may use information to assess credit, prevent fraud, collect debts and establish, exercise or defend legal claims.

We rely on our legitimate interests in protecting Leoclad’s finances, property and legal rights, together with any applicable legal obligations.

Technical support, warranties and safety

We use information to provide technical support, arrange testing, maintain product traceability, handle warranty matters, investigate complaints and take appropriate product-safety action.

We rely on contract or our legitimate interests in supporting customers, supplying appropriate products, maintaining safety and establishing or defending legal claims.

Website operation and security

We use information to operate, maintain and secure our website and essential business systems.

We rely on our legitimate interests in maintaining secure, reliable and functional systems, together with any applicable legal obligations.

Optional website technologies

We may use analytics and other optional website technologies to understand website use and improve our services.

We rely on consent where required by the Privacy and Electronic Communications Regulations. Where a specific technology qualifies for a statutory exception, this will be identified in our Cookie Policy and live Cookie settings.

Direct marketing

We may use information to send relevant business-to-business product, service and company marketing.

We rely on legitimate interests where electronic-marketing law permits this. Where consent or another specific legal permission is required, we will ensure the relevant conditions are met.

Legal and regulatory compliance

We may use or disclose information to comply with tax, customs, product-safety, regulatory, court, law-enforcement and other legal requirements.

We rely on legal obligations where the request is binding. We may rely on legitimate interests in protecting safety and legal rights or cooperating with an appropriate lawful request. We will rely on a recognised legitimate interest only where its statutory conditions apply.

Business sales and restructuring

We may use or disclose information when planning or completing a sale, investment, reorganisation or restructuring of Leoclad’s business.

We rely on our legitimate interests in managing and developing the business, subject to appropriate confidentiality and data protection safeguards.

Where we rely on legitimate interests, we identify the relevant interest, consider whether the use is necessary and balance that interest against the person’s rights, impact and reasonable expectations.

5. Information we need

Where personal information is required by law or to enter into or perform a contract, we will explain this when requesting it.

If required information is not provided, we may be unable to:

• Prepare a quotation.

• Open or manage an account.

• Process a payment.

• Fulfil or deliver an order.

• Meet customs requirements.

• Provide the requested services.

• Investigate a technical, warranty or safety matter.

6. Direct marketing

We may send relevant product, service and company information to contacts at corporate customers and prospective corporate customers where this is permitted by law and reasonably relevant to their professional role.

We may use the business contact sources described in section 3.

Where consent is required, including for some sole traders and partnerships, we will obtain consent or use another route expressly permitted by law.

Your direct-marketing right

You have an absolute right to object to the use of your personal information for direct marketing at any time.

You can object by emailing info@leocladsupplies.co.uk or by using the unsubscribe option included in our marketing messages.

We may retain minimal details on a suppression list so that we continue to respect your choice and do not add you to marketing communications again.

7. Who we share information with

We share only the information reasonably necessary for the relevant purpose.

Recipients may include:

• Website, email, hosting, IT, cybersecurity, cloud, file-storage, consent-management, accounting and business-system providers.

• Banks, card or payment processors, trade-credit providers, fraud-prevention services, insurers and debt-recovery providers where used.

• Couriers, freight forwarders, customs agents, warehouses and other logistics providers.

• Manufacturers, suppliers, testing organisations and technical partners where necessary to prepare a quotation, fulfil an order, investigate an issue or take product-safety action.

• Accountants, lawyers, insurers, auditors and other professional advisers.

• HM Revenue & Customs, customs authorities, regulators, courts, police and other public bodies where disclosure is required or permitted by law.

• Analytics or marketing providers where the relevant website or marketing use is permitted.

• A prospective purchaser, investor and their advisers during a confidential business sale, investment or restructuring.

We do not sell personal information.

Service providers acting for us are required to use personal information only for agreed purposes and to protect it appropriately.

8. International transfers

Some service providers, manufacturers, suppliers and other partners may process personal information outside the United Kingdom.

The European Economic Area and certain other countries, territories, sectors and organisations are covered by UK adequacy regulations.

Where a restricted transfer is not covered by adequacy regulations or another exception, we use an appropriate lawful safeguard. This may include:

• The UK International Data Transfer Agreement.

• The UK Addendum to the European Commission’s approved standard contractual clauses.

• Another safeguard permitted by UK data protection law.

Where required, we complete the applicable data protection test, commonly documented through a transfer risk assessment, and take any additional measures identified as necessary.

You may contact us for further information about the safeguard used for a particular transfer.

9. How long we retain information

We keep personal information only for as long as reasonably needed for the relevant purpose.

Our normal starting periods are:

Enquiries and unsuccessful quotations

Normally two years after the last meaningful contact, unless a longer period is required for a live opportunity, complaint or legal claim.

Orders, invoices, payments, deliveries, customs and tax records

At least six years after the end of the relevant financial year, and longer where required by law or an active enquiry.

Customer, supplier, technical, warranty and project records

Normally six years after the relevant relationship, transaction, service or claim ends. Information may be kept for longer where required by a product warranty, safety requirement, insurance condition or legal claim.

Active marketing records

Until the person opts out or two years after the last meaningful engagement, followed by review or deletion.

Marketing suppression records

For as long as reasonably necessary to respect the objection and prevent the person from being added to marketing communications again.

Website logs, cookies and consent choices

For the period shown in the live Cookie settings or for as long as reasonably required for security, consent evidence and incident investigation.

Rights requests and data protection complaints

Normally three years after the matter is closed, or longer where required for an active legal or regulatory matter.

We may retain information for longer where required by tax, accounting, customs, product-safety, insurance or legal obligations, where litigation is anticipated or in progress, or where deletion would prejudice a person’s legal rights.

Information is securely deleted or anonymised when it is no longer required.

10. Security

We use appropriate technical and organisational measures designed to protect personal information against accidental loss, unauthorised access, alteration or disclosure.

Access is limited to people and service providers who require the information for their work and who are subject to appropriate confidentiality or contractual obligations.

No internet, email or electronic storage system can be guaranteed to be completely secure.

11. Your rights

Depending on the circumstances, you may have the right to:

• Ask for access to your personal information and receive a copy.

• Ask us to correct inaccurate or incomplete information.

• Ask for deletion or restriction in certain circumstances.

• Object to processing based on legitimate interests.

• Object at any time to the use of your information for direct marketing.

• Receive certain information in a portable format where processing is automated and based on consent or contract.

• Withdraw consent at any time, without affecting processing that took place lawfully before consent was withdrawn.

• Request appropriate safeguards in relation to certain decisions made solely by automated means that have a legal or similarly significant effect.

These rights are not all absolute and may depend on the lawful basis and circumstances of the processing.

Requests may be made verbally or in writing. We normally respond without undue delay and within one month. We do not normally charge a fee, although the law permits limited exceptions.

We may request proportionate information to confirm identity and protect personal information from unauthorised disclosure.

We do not currently make decisions about people solely by automated means that produce legal or similarly significant effects.

Your general right to object

Where we rely on legitimate interests, you may object to our use of your personal information.

If you object, we will stop the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required to establish, exercise or defend a legal claim.

The right to object to direct marketing is absolute. We will stop using your personal information for that purpose when you object.

12. Data protection complaints

You may complain directly to Leoclad about any concern regarding our use of personal information using the contact details in section 1.

If possible, please use the subject line “Data protection complaint” when complaining by email. This helps us identify and handle the matter promptly.

We will:

• Acknowledge the complaint within 30 days.

• Investigate the complaint without undue delay.

• Make appropriate enquiries.

• Keep the complainant informed where necessary.

• Communicate the outcome without undue delay.

You may also complain to the Information Commissioner’s Office at any time:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/

13. Cookies, children and other websites

Our Cookie Policy explains how cookies and similar technologies are used and how you can change your choices:

https://www.leocladsupplies.co.uk/cookie-policy/

Our website and services are intended for business users and are not directed at children. We do not knowingly collect children’s personal information through the website.

Third-party websites linked from our website operate under their own privacy notices. We are not responsible for the privacy practices of those third-party websites.

14. Changes to this policy

We review this policy regularly and publish the current version on our website.

If we intend to use personal information for a materially different purpose, we will provide appropriate information before beginning that use where required by law.