Privacy Policy

1. Overview

Witch Group Ltd (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains:

  • What personal data we collect.
  • How we use your personal data.
  • How we keep your data secure.
  • Your rights under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

     

We are a trade-only wholesaler of flooring and outdoor garden products. We do not sell directly to the general public. This policy applies only to personal data we collect in the course of our business with trade customers, suppliers, and other business contacts.

2. Data Controller

For the purposes of the UK GDPR, the data controller is:

Witch Group Ltd
Registered in England & Wales: 02447890
Address: The Summit Building, Unit 1, Shorten Brook Way, Altham Business Park, Altham, Accrington, BB5 5YJ.

3. Personal Data

We may collect, store, and use the following categories of personal data:

  • Business Contact Details – name, job title, business name, address, telephone number, email address.
  • Account Information – trade account details, payment preferences, order history.
  • Correspondence – emails, letters, call notes, or other communications between you and us.
  • Website Data – limited technical information (e.g., IP address, browser type, and pages visited) for site functionality and security purposes.


We do not knowingly collect personal data from members of the public for consumer transactions.

4. How We Use Personal Data

We process your personal data only when we have a lawful basis to do so under the UK GDPR. This includes:

  • Contractual necessity – to set up and manage trade accounts, process orders, and deliver goods.
  • Legal obligation – to comply with applicable laws, tax requirements, and regulatory obligations.
  • Legitimate interests – to manage relationships with customers, suppliers, and partners, and to improve our services.
  • Consent – where you have opted in to receive marketing communications (which you can withdraw at any time).

5. Sharing Personal Data

We will not sell or trade your personal data to third parties. We may share your data with:

  • Service providers – such as delivery companies, IT service providers, and payment processors.
  • Professional advisers – such as accountants, auditors, and legal advisers.
  • Regulatory authorities – HMRC, law enforcement, or other bodies when required by law.

All third parties are required to handle your data in compliance with UK GDPR.

6. International Data Transfers

If we should ever need to transfer personal data outside the UK or EEA, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your information.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.

Typically, we retain customer account and transaction records for 6 years in line with HMRC requirements.

8. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or disclosure.

9. Your Rights

Under the UK GDPR, you have the right to:

  1. Access – Request a copy of the personal data we hold about you.
  2. Rectification – Request correction of inaccurate or incomplete data.
  3. Erasure – Request deletion of your personal data where there is no lawful reason for us to keep it.
  4. Restriction – Request that we limit how we process your data.
  5. Data portability – Request transfer of your data to another organisation.
  6. Object – Object to processing based on legitimate interests or direct marketing.
  7. Withdraw consent – Where processing is based on your consent.

 

You can exercise these rights by contacting us at: sales@witchgroup.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk).

10. Cookies & Website Data

Our website uses only essential cookies and basic analytics to ensure site functionality and performance. We do not use cookies for targeted advertising.

11. Changes To This Privacy Policy

We may update and improve this Privacy Policy periodically to reflect changes necessary to protect both you and Witch Group Ltd. 

If you have any questions about this Privacy Policy or how we process your personal data, please contact:

Email: sales@witchgroup.co.uk
Phone: 01282 442 400
Address: Witch Group Ltd, The Summit Building, Unit 1, Shorten Brook Way, Altham Business Park, Altham, Accrington, BB5 5YJ.

Alternatively, you can complete our contact form