1. Who we are

Loftspan supplies structural loft boards to UK trade customers. For questions about this notice or a data rights request, email sales@loftspan.uk or call 01489 600304.

2. Information we collect

• Identity and business details, such as your name, company and trade account information.
• Contact and delivery details, including email, phone, billing address, delivery address and postcode.
• Order, payment status, VAT invoice, refund and account records. Full card numbers are handled by the payment provider and are not made available to Loftspan.
• Enquiry content, product requirements, project details and correspondence.
• Technical data such as IP address, browser/device information, security logs and necessary cookie identifiers.
• Marketing preferences where you have made a choice.

3. Why we use it and our lawful bases

We use information to respond to enquiries, provide quotations, process and deliver orders, take or reconcile payment, operate customer accounts, handle returns, prevent fraud, keep the website secure and meet tax or legal obligations.

Depending on the purpose, the lawful basis is performance of a contract or steps requested before a contract, compliance with a legal obligation, our legitimate interests in operating and protecting a trade supply business, or consent where the law requires it. You can withdraw consent for future processing at any time where consent is the basis.

4. Who we share it with

We only share information where needed with service providers such as website and email hosting, WooCommerce technology, payment processors selected at checkout, banks, pallet carriers, IT/security support, accountants and professional advisers. We may also disclose information where required by law or in connection with a business sale or reorganisation.

Providers act under their own privacy terms or processing agreements. The final live notice should name any provider that creates a significant privacy impact and explain any international transfer safeguard.

5. How long we keep it

Enquiries are kept only as long as needed to respond and manage the business relationship. Account and order information is kept for the life of the account and then for the period needed to resolve claims and meet legal obligations. VAT and relevant transaction records are generally retained for at least six years. Security logs and cookie data are retained for shorter operational periods set by the relevant service.

6. Your data protection rights

Depending on the circumstances, you may have rights to be informed, access your personal data, correct it, erase it, restrict or object to processing, and receive portable data. You may also withdraw consent and complain to the Information Commissioner’s Office.

To exercise a right, email the privacy contact above. We may need to verify identity before disclosing or changing information.

7. Cookies and similar technology

The store uses cookies that are necessary for functions such as the basket, checkout, account login, security and preferences. Any analytics, advertising or other non-essential cookies must remain disabled until the visitor has been given clear information and an appropriate consent choice.

8. Security and updates

We use appropriate organisational and technical safeguards and limit access to people and providers who need the information. No internet service can promise absolute security. We will update this notice when the business, website or providers change and show the revised date above.