GDPR Statement

1. Roles

• Controller: [Registered Company Name], for wholesale accounts, orders, and marketing.
• Processors: vetted third-party providers acting under contract and our instructions.

2. Lawful Bases

• Contract – applications, accounts, orders, deliveries, warranties, and support.
• Legitimate Interests – operations, fraud prevention, network security, credit control, B2B marketing to existing customers (easy opt-out).
• Legal Obligation – tax/audit, product safety/recalls, sanctions screening where required.
• Consent – optional communications or cookies.

3. Data Minimisation & Retention

• We collect what is necessary for wholesale supply and support.
• Core records retained for 7 years (or longer if required by law or to establish/defend legal claims).

4. International Transfers

Transfers outside the UK/EU rely on adequacy decisions or Standard Contractual Clauses with appropriate safeguards (encryption, access controls, audits).

5. Data Subject Rights

Submit requests (access, rectification, erasure, restriction, portability, objection) to privacy@stockmanor.co.uk. We respond within one month (extensions permitted for complex requests).

6. Security

• Encryption in transit, strict access controls, logging/monitoring, staff training, supplier due diligence.
• Breach handling aligned with UK GDPR/EU GDPR notification timelines.

7. DPO / Contact

Email us at privacy@stockmanor.co.uk.

8. Complaints

• UK: Information Commissioner’s Office (ICO) – ico.org.uk
• Republic of Ireland: Data Protection Commission (DPC) – dataprotection.ie

9. Updates

We review this statement periodically and publish updates here; material changes will be notified on our website.

For additional details please refer to our privacy policy.

Last updated: 01/10/2025