Privacy Policy
Last updated: 13 May 2026
This Privacy Policy explains how Building Plastics (Wales) Ltd collects, uses, stores and shares personal data.
1. Who we are
Building Plastics (Wales) Ltd is the data controller responsible for your personal data.
Company number: 07681432
VAT number: 191922296
Registered office: Unit 1 Block E, Penmaen Industrial Estate, Pontllanfraith, Blackwood, Wales, NP12 2DQ
Email: info@buildingplastics.co.uk
Telephone: 01495 781167
2. Personal data we collect
We may collect and process the following personal data:
- name;
- billing address;
- delivery address;
- email address;
- telephone number;
- order details and order history;
- payment information, processed securely by payment providers;
- account details where you create an online account or trade account;
- communication records, including emails, calls, returns and complaints;
- IP address, device information, browser information and website usage data;
- marketing preferences and cookie consent choices;
- information provided in trade applications or account payment processes.
We do not intentionally collect special category data through our website.
3. How we collect personal data
We collect personal data when you:
- place an order;
- create an account;
- complete a contact form, returns form, trade application or account payment form;
- contact us by email, telephone, post, social media or in store;
- subscribe to marketing;
- use our website;
- accept or reject cookies;
- make a payment or request a refund.
We may also receive personal data from payment providers, delivery companies, website service providers, fraud prevention tools and other suppliers involved in processing orders.
4. Why we use your data and our lawful bases
We use personal data for the following purposes:
| Purpose | Lawful basis |
| Processing orders, payments, deliveries, collections, returns and refunds | Contract |
| Responding to enquiries and customer service requests | Contract or legitimate interests |
| Managing trade accounts and account payments | Contract and legitimate interests |
| Keeping accounting, VAT and tax records | Legal obligation |
| Preventing fraud, misuse and security incidents | Legitimate interests |
| Improving our website, products and services | Legitimate interests or consent where cookies require consent |
| Sending marketing communications | Consent, or soft opt-in where legally permitted |
| Managing complaints and legal claims | Legal obligation and legitimate interests |
| Complying with legal and regulatory requirements | Legal obligation |
Where we rely on legitimate interests, we balance our interests against your rights and freedoms.
Where we rely on consent, you may withdraw consent at any time.
5. Marketing
We will only send marketing communications where we have a lawful basis to do so.
You can unsubscribe from marketing emails using the unsubscribe link in the email, by changing your preferences where available, or by contacting us at info@buildingplastics.co.uk.
Withdrawing marketing consent does not affect the lawfulness of processing before withdrawal and does not stop us sending service messages about orders, deliveries, payments, returns or legal notices.
6. Cookies and analytics
We use cookies and similar technologies on our website. Essential cookies are required for the website to work. Non-essential cookies, such as analytics or marketing cookies, are only used where consent is required and you have given that consent.
For more information, please see our Cookie Policy.
7. Who we share personal data with
We only share personal data where necessary. Recipients may include:
- delivery and courier companies;
- payment processors and finance/payment service providers;
- IT, ecommerce, hosting and website service providers;
- analytics and cookie management providers, where used;
- email marketing providers, where used;
- professional advisers, including accountants, insurers and legal advisers;
- fraud prevention and security providers;
- regulators, public authorities, courts or law enforcement where required.
We do not sell personal data.
Where suppliers process personal data for us, we expect them to protect it and only use it for authorised purposes.
8. International transfers
Some service providers may process personal data outside the UK. Where this happens, we will take steps to ensure appropriate safeguards are in place, such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or another lawful transfer mechanism.
9. How long we keep personal data
We keep personal data only for as long as necessary for the purpose for which it was collected, including legal, accounting, tax, warranty, dispute and business record requirements.
Typical retention periods include:
- order, invoice, payment and accounting records: up to 6 years;
- trade account records: for the duration of the account and up to 6 years after closure;
- returns, complaint and dispute records: up to 6 years after resolution where necessary;
- marketing records: until you unsubscribe or withdraw consent, plus a suppression record to ensure we do not contact you again;
- website analytics data: normally up to 12 months unless configured otherwise;
- cookie consent records: for the period required to evidence consent choices.
We may keep data longer where required for legal claims, regulatory obligations or fraud prevention.
10. If you do not provide personal data
Where we need personal data to process an order, arrange delivery, take payment, manage a return or comply with legal obligations, we may be unable to provide the relevant product or service if you do not provide it.
11. Your rights
Subject to legal conditions and exemptions, you have the right to:
- access your personal data;
- ask us to correct inaccurate or incomplete data;
- ask us to erase your data;
- restrict processing;
- object to processing;
- request data portability;
- withdraw consent where processing is based on consent;
- complain to the Information Commissioner’s Office.
To exercise your rights, contact info@buildingplastics.co.uk.
We may need to verify your identity before responding.
12. Complaints
If you have a complaint about how we use your personal data, please contact us first at info@buildingplastics.co.uk so we can investigate and respond.
Please include your name, contact details, the nature of your complaint and any relevant order or account information.
You also have the right to complain to the Information Commissioner’s Office. The ICO can be contacted via www.ico.org.uk.
13. Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
No website, email system or online service is completely secure. Please contact us immediately if you believe your personal data or account has been compromised.
14. Automated decision-making
We do not use personal data for solely automated decision-making that produces legal or similarly significant effects. If this changes, we will update this policy.
15. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will be published on our website.