Privacy Policy

Introduction

UK Packaging Supplies Ltd (“UKP”, “we”, “us”, or “our”) is committed to protecting your privacy and ensuring that your personal data is handled lawfully, fairly, and transparently. 

This Privacy Policy explains how we collect, use, store, and protect personal data when you interact with us — whether through our website, by email, phone, in person, or as a customer, supplier, job applicant, or visitor. 

By using our services or providing us with your personal data, you acknowledge that you have read and understood this policy. 

Purpose and Scope

This policy applies to all personal data processed by UKP, including data relating to: 

• Customers and prospective customers 

• Suppliers and business partners 

• Website visitors 

• Job applicants and employees 

• Any other individuals who interact with us 

It covers all methods of data collection, including our website (ukplc.co.uk), email, phone, forms, CRM systems, and in-person interactions. 

What Personal Data We Collect

We only collect the personal data we need. The main categories include: 

• Identity and Contact Data: Name, title, company name, email address, phone number, and postal address. 

• Technical Data: IP address, browser type, device type, operating system, and location data (approximate). 

• Usage Data: Information about how you use our website and services (e.g., pages visited, time spent). 

• Marketing and Communication Data: Your preferences for receiving marketing communications from us. 

• Recruitment Data: CVs, covering letters, and interview notes (for job applicants only). 

We do not routinely collect special category (sensitive) personal data. Where we do (e.g., health data for employees), we will obtain explicit consent or rely on another lawful basis and provide additional safeguards. 

How We Collect Your Personal Data

We collect personal data when you: 

• Submit enquiries or forms on our website 

• Correspond with us by email, phone, or post 

• Place an order or become a customer 

• Apply for a job with us 

• Engage with our social media or marketing communications 

• Visit our premises 

We may also receive personal data indirectly from third parties (e.g., credit reference agencies or business introducers) where lawful. 

Lawful Basis for Processing

We only process your personal data where we have a lawful basis, which may include: 

• Performance of a contract with you 

• Compliance with a legal obligation 

• Legitimate interests (e.g., running and improving our business) 

• Consent (where we rely on this, you can withdraw it at any time) 

How We Use Your Personal Data

We use your personal data for the following purposes: 

• To respond to your enquiries and provide our products and services 

• To manage our customer and supplier relationships 

• To process orders and payments 

• To send relevant marketing communications (only with your consent) 

• To improve our website and customer experience 

• To comply with legal and regulatory obligations (including EPR reporting) 

• To recruit and manage employees 

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

Data Sharing

We may share your personal data with: 

• Internal teams (Sales, Compliance, Accounts, etc.) 

• Trusted third-party service providers (e.g., IT support, CRM systems, delivery partners) 

• Professional advisers (lawyers, accountants, insurers) 

• Regulators or law enforcement where legally required 

We ensure appropriate contracts and safeguards are in place with all third parties. 

International Transfers

We primarily process data within the UK. Where data is transferred outside the UK (e.g., to certain cloud providers), we ensure appropriate safeguards are in place, such as the UK’s International Data Transfer Agreement or Standard Contractual Clauses. 

Data Retention

We retain personal data only for as long as necessary for the purpose it was collected, or as required by law. Typical retention periods include: 

• Customer records: 6 years after the end of the customer relationship (for accounting and legal purposes) 

• Marketing data: Until consent is withdrawn or we no longer have a legitimate interest 

• Website analytics: Up to 2 years (in anonymised form where possible) 

Your Rights

Under UK GDPR you have the following rights: 

• Right to be informed 

• Right of access 

• Right to rectification 

• Right to erasure (“right to be forgotten”) 

• Right to restrict processing 

• Right to data portability 

• Right to object to processing 

• Rights related to automated decision-making and profiling 

To exercise any of these rights, please contact our Privacy Officer (details below). We will respond within one month. 

Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures, including encryption, access controls, regular security reviews, and staff training. 

Cookies and Website Tracking

Our website uses cookies and similar technologies. For full details, please see our separate Cookie Policy. 

Changes to This Policy

We review this Privacy Policy annually or whenever there are significant changes in our processing activities or legal requirements. Any updates will be posted on this page with a new effective date. 

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact: 

Privacy Officer 
Hamilton Wolfe 
Head of Compliance 
UK Packaging Supplies Ltd 
100 Brantwood Road, Tottenham, London N17 0XY 
Email: compliance@ukplc.co.uk