Privacy Policy

1. Who We Are

For the purposes of UK data protection law, the controller responsible for your personal information is:

Legal company name

NCC London Limited

Trading name

NCC London Limited

Company number

16046305

Registered office

969 Romford Road, London, United Kingdom, E12 5JR

Email for privacy enquiries

info@nccwholesale.org

Telephone

+44 7951946525

2. Personal Information We Collect

Depending on how you interact with us, we may collect and process the following categories of personal information.

Identity Information

This may include:

• first name;
• last name;
• job title or position;
• business or trading name; and
• customer identifier.

Contact Information

This may include:

• billing address;
• delivery address;
• email address;
• telephone or mobile number; and
• business contact details.

Account and Sign-In Information

Our Website does not use passwords, and there is no account to create. Your orders are kept against the email address you give when you order.

To see them, you sign in with that email address and a six-digit code that is emailed to you each time you sign in. The code is sent and checked by Shopify, our e-commerce provider.

Each time you sign in, we record your email address, the date and time, your IP address and your browser type. We keep this record for 12 months and show it to you in your account, so that you can spot a sign-in that was not you.

Order and Transaction Information

This may include:

• products ordered;
• quantities;
• order values;
• invoices;
• payment status;
• delivery information;
• returns;
• refunds;
• warranty claims; and
• communications relating to transactions.

Payment Information

Payments may be processed through third-party payment providers.

Depending on the payment method used, the payment provider may collect payment-card, bank-account or other financial information directly.

NCC Supply should not retain complete payment-card details unless this is specifically necessary and handled in accordance with applicable security and payment-card requirements.

We may receive limited payment information such as payment status, transaction identifiers and limited payment method information.

Communications

We may collect information contained in emails, contact forms, telephone enquiries, support requests, product enquiries and other communications with us.

Technical and Device Information

When you use our Website, we or our service providers may collect technical information such as:

• IP address;
• browser type and version;
• device type;
• operating system;
• time zone;
• Website pages viewed;
• referral information;
• diagnostic information;
• security logs; and
• other information about how the Website is accessed and used.

Some of this information may be collected using cookies or similar technologies.

Marketing Information

Where applicable, we may record:

• whether you have agreed to receive marketing;
• your marketing preferences;
• communications sent to you; and
• your interactions with marketing communications.

3. How We Collect Personal Information

We may collect personal information directly from you when you:

• sign in to see your orders;
• place or request an order;
• request a quotation;
• contact us;
• subscribe to marketing communications;
• submit a form;
• request customer support;
• make a return or warranty claim; or
• otherwise communicate with us.

We may also collect information automatically when you interact with our Website through cookies, server logs and similar technologies.

We may receive information from third parties where appropriate, such as:

• payment providers;
• delivery and courier companies;
• e-commerce and Website service providers;
• analytics providers;
• marketing platforms;
• fraud-prevention and security providers;
• business partners; and
• publicly available business sources.

Where we obtain personal information from another source, we will handle it in accordance with applicable data protection requirements.

4. How and Why We Use Your Personal Information

We only process personal information where we have an appropriate lawful basis.

Depending on the circumstances, we may process your information for the following purposes.

To Process and Fulfil Orders

We use relevant personal information to:

• receive and process orders;
• confirm stock and pricing;
• arrange payment;
• dispatch products;
• provide delivery updates;
• issue invoices;
• process returns and refunds; and
• provide customer service.

Our lawful basis will generally be that processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

Where you are acting on behalf of a business rather than contracting personally, we may rely on our legitimate interests in managing and fulfilling commercial transactions.

To Manage Customer Accounts

We may process contact and sign-in information to let you sign in, show you your orders and keep that access secure.

Our lawful basis may be contractual necessity and/or our legitimate interests in operating our Website and customer relationships.

Customer Service and Communications

We may process personal information to answer enquiries, resolve complaints, provide technical or product support and communicate about orders.

Our lawful basis may be contractual necessity or our legitimate interests in providing customer service and managing our business relationships.

Fraud Prevention and Website Security

We may process information to prevent fraud, abuse, unauthorised access and other security incidents.

Our lawful basis is generally our legitimate interests in protecting our business, customers and systems and, where relevant, compliance with legal obligations.

Legal and Regulatory Requirements

We may process and retain information where necessary to comply with legal, tax, accounting, regulatory or other obligations.

Our lawful basis is compliance with a legal obligation.

Improving Our Website and Services

We may analyse appropriate information about Website usage, customer interactions and products to understand how our Website and services perform and to make improvements.

Depending on the particular processing and technologies used, our lawful basis may be our legitimate interests or consent.

Where consent is legally required for cookies or similar technologies, we will seek that consent before using the relevant technology.

Marketing

Where permitted, we may use your contact information to send information about NCC Supply products, offers or services.

The lawful basis will depend on the circumstances and applicable electronic-marketing rules. Where consent is required, we will obtain it.

You can unsubscribe from electronic marketing communications at any time using the unsubscribe facility provided in the communication or by contacting us.

5. Our Legitimate Interests

Where we rely on legitimate interests, those interests may include:

• operating and improving NCC Supply;
• managing relationships with customers and suppliers;
• providing customer support;
• maintaining Website and information security;
• preventing fraud;
• understanding the performance of our business;
• establishing, exercising or defending legal claims; and
• marketing our products where permitted by law.

We consider whether our interests are necessary and proportionate and whether your rights and interests override those interests before relying on this basis where required.

6. Cookies and Similar Technologies

Our Website may use cookies and similar storage or access technologies.

Cookies are small files or pieces of information that may be stored on or accessed from your device when you visit a website.

We may use technologies for purposes such as:

• providing essential Website functionality;
• maintaining sessions and shopping baskets;
• security and fraud prevention;
• remembering preferences;
• measuring Website performance;
• analytics; and
• advertising or marketing, if used.

Some technologies are necessary for the Website or a service you request to function. Other technologies may require your consent before they are used.

Where consent is required, we will provide an appropriate mechanism allowing you to make choices about non-essential technologies.

You should be able to review or change applicable cookie choices through your browser settings.

More detailed information about the cookies used by NCC Supply, their purposes and durations is provided in our Cookie Policy.

7. Sharing Your Personal Information

We do not sell your personal information.

We may share personal information where necessary with organisations that help us operate our business, such as:

Payment Providers

To process payments, refunds and payment verification.

Delivery and Logistics Providers

To deliver orders, manage shipments and provide delivery updates.

Website and Hosting Providers

To host, maintain and secure our Website and associated systems.

IT and Cloud Service Providers

To provide business software, data storage, communications and technical support.

Analytics Providers

Where used and lawfully configured, to help us understand Website usage and performance.

Marketing Service Providers

Where applicable and permitted, to manage newsletters, customer communications and marketing campaigns.

Professional Advisers

Such as accountants, auditors, insurers, solicitors and other professional advisers where necessary.

Government, Regulatory and Law-Enforcement Authorities

Where disclosure is required or permitted by law or is necessary to establish, exercise or defend legal rights.

Business Transactions

If NCC Supply or the business operating it is reorganised, sold, merged or transferred, relevant personal information may be disclosed to advisers and prospective or actual purchasers, subject to appropriate safeguards.

Service providers processing information on our behalf are expected to handle personal information only in accordance with applicable instructions and data protection requirements.

8. International Transfers

Some service providers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps required by UK data protection law.

Depending on the destination and circumstances, these measures may include reliance on UK adequacy regulations or use of approved contractual safeguards, together with any additional measures required following an assessment of the transfer.

You may contact us if you would like further information about the safeguards relevant to your personal information.

9. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, regulatory and reporting requirements and to establish or defend legal claims.

Retention periods may vary depending on the type of information and the reason we process it.

For example:

• order and transaction records may be retained for the period required for accounting, tax, warranty and legal purposes;
• records of sign-ins to your account are kept for 12 months;
• customer-service communications may be retained for an appropriate period to resolve enquiries and maintain relevant records;
• marketing information may be retained while marketing permissions remain applicable, together with suppression information where necessary to respect opt-out requests; and
• technical and security records may be retained for periods appropriate to security, troubleshooting and fraud-prevention purposes.

We periodically review information we hold and delete or anonymise it when it is no longer required, subject to applicable legal requirements.

10. Security

We take appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Measures may include, where appropriate:

• access controls;
• secure authentication;
• encryption;
• secure hosting;
• backups;
• software and security updates;
• monitoring and logging; and
• limiting access to information to people who reasonably need it.

No internet-based system can be guaranteed to be completely secure, but we take reasonable steps appropriate to the risks involved.

11. Your Data Protection Rights

Depending on the circumstances and applicable UK data protection law, you may have rights including:

Right of Access

You may request confirmation of whether we process your personal information and request access to relevant personal information.

Right to Rectification

You may ask us to correct inaccurate personal information or complete information that is incomplete.

Right to Erasure

In certain circumstances, you may ask us to delete your personal information.

This right is not absolute, and we may need to retain information where there is a lawful reason to do so.

Right to Restrict Processing

In certain circumstances, you may ask us to restrict how we use your personal information.

Right to Object

You may have the right to object to processing based on legitimate interests.

You also have the right to object to the use of your personal information for direct marketing.

Right to Data Portability

Where applicable, you may request certain personal information in a structured, commonly used and machine-readable format or ask for it to be transferred to another organisation.

Rights Relating to Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Rights Relating to Automated Decision-Making

Where applicable, you may have rights relating to certain decisions made solely through automated processing that produce legal or similarly significant effects.

NCC Supply will provide further information if it uses such decision-making in circumstances requiring disclosure.

12. Exercising Your Rights

To exercise a data protection right or ask a question about your personal information, contact:

Email

info@nccwholesale.org

Postal address

969 Romford Road, London, United Kingdom, E12 5JR

We may need to request information reasonably necessary to verify your identity before responding to a request.

There is normally no fee for exercising data protection rights, although the law permits fees or other action in certain limited circumstances.

We will respond within the time limits required by applicable law.

13. Direct Marketing

You can ask us to stop sending direct marketing communications at any time.

You may:

• use the unsubscribe option included in an applicable marketing email; or
• contact us at info@nccwholesale.org.

Stopping marketing communications does not prevent us from sending non-marketing communications necessary for an existing order, account, transaction, legal obligation or customer-service matter.

14. Third-Party Websites

Our Website may contain links to third-party websites, applications or services.

NCC Supply does not control the privacy practices of those third parties. We encourage you to read their privacy information before providing personal information to them.

15. Children's Privacy

Our Website and products are intended for business customers and/or adults and are not directed at children.

We do not knowingly seek to collect personal information from children through our normal sales process.

If you believe that a child has provided personal information to us in circumstances where this should not have occurred, please contact us.

16. Complaints

If you have concerns about how we process your personal information, please contact us first so that we can investigate and respond.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Information about making a complaint and the ICO's current contact details are available from the ICO.

Your right to complain to the ICO is not affected by contacting us first.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• our Website;
• the services and technologies we use;
• our business operations; or
• applicable legal or regulatory requirements.

When we make changes, we will publish the updated Privacy Policy on this page and update the “Last updated” date.

Where appropriate, we may also notify customers of significant changes by other means.

18. Contact Us

For questions about this Privacy Policy or how NCC Supply handles personal information, contact: