Privacy Policy
How we collect, use and protect your personal information.
PackagingPapa Ltd ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website packagingpapa.co.uk or use our services. Please read it carefully.
1 Who We Are
PackagingPapa Ltd is the data controller for personal data collected through this website. We are registered in England and Wales.
2 Data We Collect
We may collect and process the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Name, job title | You, directly |
| Contact Data | Email, phone, address | You, directly |
| Transaction Data | Order details, invoices | Our ordering system |
| Technical Data | IP address, browser type, pages visited | Automated (cookies) |
| Marketing Data | Email preferences | You, directly |
| Communications | Enquiries, live chat logs | You, directly |
We do not collect any special category data (health, race, religion, etc.) and we do not knowingly collect data from persons under 16 years of age.
3 How We Use Your Data
We use personal data for the following purposes:
- To respond to quote requests and enquiries
- To process orders and manage customer accounts
- To send transactional emails (order confirmations, shipping notifications)
- To send marketing communications (with your consent)
- To improve our website and services through analytics
- To comply with legal and regulatory obligations
- To prevent fraud and ensure website security
4 Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
- Contract: Processing necessary to fulfil orders or respond to pre-contractual enquiries.
- Legitimate Interests: Analytics, fraud prevention, and improving our services.
- Consent: Marketing emails and non-essential cookies (you can withdraw at any time).
- Legal Obligation: Tax records, accounting, and regulatory compliance.
5 Sharing Your Data
We do not sell your personal data. We may share it with trusted third parties only where necessary:
- Payment processors (e.g. Stripe) — to process secure payments
- Courier & logistics partners — to deliver your orders
- IT & hosting providers — to operate and maintain our website
- Analytics platforms (e.g. Google Analytics) — anonymised traffic data
- Marketing platforms (e.g. Mailchimp) — where you have opted in to email marketing
- Professional advisors — accountants, solicitors, insurers
All third parties are required to maintain appropriate security measures and may only use your data as instructed by us.
6 Data Retention
We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law. Our standard retention periods are:
- Customer order records: 7 years (UK tax law)
- Website enquiry data: 2 years
- Marketing consent records: Until withdrawal + 1 year
- Website analytics (anonymised): 26 months
7 Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
To exercise any right, email us at privacy@packagingpapa.co.uk. We will respond within 30 days.
8 Cookies
Our website uses cookies to enhance your experience. The types of cookies we use:
| Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Session management, security | No |
| Functional | Remembering preferences | No |
| Analytics | Understanding how the site is used (Google Analytics) | Yes |
| Marketing | Remarketing and advertising | Yes |
You can manage cookie preferences via our cookie consent banner or your browser settings.
9 Security
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, destruction, alteration, or unauthorised access. These include SSL encryption, firewalls, access controls, and regular security assessments. However, no internet transmission is 100% secure. If you suspect a data breach, please contact us immediately.
10 Contact & Complaints
For data protection queries, please contact our Data Protection Lead:
Email: privacy@packagingpapa.co.uk
Post: Data Protection Lead, PackagingPapa Ltd, 123 Packaging Street, London, EC1A 1BB
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.