Privacy Policy

Introduction

Scalderhurst Ltd ("we", "us", "our") is committed to protecting the privacy and security of your personal data. This policy explains how we collect, use, store and share information when you interact with our website, place orders or communicate with our team. We are a UK-registered company and process all personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection law, Scalderhurst Limited is the data controller. Scalderhurst Limited is registered in England and Wales, company number 01108438. Registered office: Ford Mill, Little Chart, Ashford, Kent TN27 0QA. VAT number GB 210 8352 03.

Information We Collect

We may collect the following categories of personal data:

• Identity and contact information — your name, job title, company name, email address, telephone number and postal address, provided when you submit an enquiry, place an order or register for an account.
• Transaction data — details of orders you place with us, including products purchased, quantities, pricing, delivery addresses and payment references.
• Communication records — correspondence between you and our team by email, telephone or through our website contact form.
• Technical data — your IP address, browser type and operating system, recorded automatically in our hosting provider's server logs when you visit the website. We do not use cookies to collect this information.

We do not collect any special category (sensitive) personal data through our website.

How We Use Your Information

We use your personal data for the following purposes:

• To process and fulfil your orders for paper, board and related products.
• To respond to enquiries submitted through our website, email or telephone.
• To manage our business relationship with you, including credit control and invoicing.
• To send you information about products and services that may be relevant to your business, where you have opted in or where we have a legitimate interest in doing so.
• To improve our website, services and customer experience.
• To comply with legal and regulatory obligations.

The legal bases for our processing are: performance of a contract with you, our legitimate business interests, your consent (where applicable) and compliance with legal obligations.

Cookies

Our public website does not set any cookies, and we do not use analytics or tracking of any kind. Because no cookies are set, no cookie consent banner is required and none is shown.

The only cookie used anywhere on this site is a strictly necessary login cookie in the staff-only content management area, which is set solely for members of our team who sign in to update the site. It is never set for ordinary visitors.

If we introduce cookies or analytics in future, we will update this policy and, where required, ask for your consent first.

Contact Form and Email Delivery

When you submit the enquiry form on our contact page, we collect your name, email address and message, along with your telephone number, company name, the service you are interested in and a subject line if you choose to provide them. We use this information solely to respond to your enquiry.

Your enquiry is delivered to our company inbox by Resend, an email delivery service that acts as our data processor for this purpose. You can read how Resend handles data in the Resend privacy policy. The website itself does not store your enquiry — it is sent straight to our inbox and handled as described under Data Retention below.

To protect the form from abuse, our server temporarily notes the network address (IP) a submission comes from and limits the number of submissions accepted from the same address in a short period.

Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected. Our standard retention periods are:

• Customer account and transaction data — retained for seven years from the date of the last transaction, in line with UK financial record-keeping requirements.
• Enquiry form submissions — delivered directly to our email inbox rather than stored on the website, and retained there for two years from the date of submission, unless the enquiry leads to an ongoing business relationship.

When personal data is no longer required, it is securely deleted or anonymised.

Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct any inaccurate or incomplete data.
• Right to erasure — you can request that we delete your personal data, subject to certain legal exceptions.
• Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
• Right to data portability — you can request your data in a structured, machine-readable format.
• Right to object — you can object to our processing of your data where we rely on legitimate interests or use it for direct marketing.

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled incorrectly.

Contact Us

If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us:

Scalderhurst Ltd
Email: info@scalderhurst.co.uk
Website: www.scalderhurst.co.uk/contact