Privacy Policy

---

Effective Date: 28/08/2025
Company: ITR Commercial Ltd (“we”, “our”, “us”)
Registered in: United Kingdom

1. Introduction

ITR Commercial Ltd is committed to protecting your privacy and ensuring your personal data is handled in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, purchase products, or contact us.

By using our services, you agree to the practices described in this policy.

2. Information We Collect

We may collect and process the following types of personal information:

• Identity Information: Name, company name, job title.
• Contact Information: Email address, phone number, billing address, delivery address.
• Account Information: Login details if you create an online account.
• Payment Information: Payment card details (processed securely via third-party payment providers, we do not store full card details).
• Order Information: Purchase history, custom design specifications, preferences.
• Technical Information: IP address, browser type, device type, operating system.
• Marketing Preferences: Communication preferences and marketing consent.
   

3. How We Use Your Data

We use your personal data for the following purposes:

• To process and fulfil your orders.
• To communicate with you about your purchases, enquiries, or customisations.
• To manage your account with us.
• To provide customer service and support.
• To send you marketing communications (only if you have consented).
• To improve our website, services, and customer experience.
• To comply with legal and financial obligations.
   

4. Legal Basis for Processing

We process your data under the following lawful bases:

• Contract: Processing is necessary to fulfil an order or service.
• Consent: For marketing communications or optional services.
• Legal Obligation: To meet UK legal and tax requirements.
• Legitimate Interest: For business improvement, fraud prevention, and customer service.
   

5. Sharing Your Data

We respect your privacy and will never sell your personal data. We may share your information with:

• Payment processors (e.g. Stripe, PayPal, banks).
• Delivery companies (e.g. Royal Mail, DPD, couriers).
• IT service providers (website hosting, cloud storage, email systems).
• Professional advisors (accountants, auditors, legal advisors).
• Regulatory authorities (if required by law).
   

All third parties are required to comply with data protection law.

6. Data Retention

We retain personal data only as long as necessary:

• Order and invoice data: 6 years (legal requirement for tax purposes).
• Customer account details: Until you request deletion.
• Marketing data: Until you opt out or withdraw consent.
   

7. Security of Data

We implement appropriate technical and organisational measures to protect personal data, including:

• Secure servers and encryption.
• Access restricted to authorised staff.
• Regular system monitoring and updates.
   

8. Cookies & Tracking

Our website uses cookies to:

• Enable basic functionality (shopping cart, login).
• Improve user experience.
• Analyse site traffic via Google Analytics or similar tools.
   

You can control cookie settings via your browser.

9. Your Rights

Under UK GDPR, you have the right to:

• Access a copy of your personal data.
• Request correction of inaccurate data.
• Request deletion of your data (where legally possible).
• Restrict or object to processing.
• Withdraw consent for marketing at any time.
• Request transfer of your data (data portability).
   

To exercise your rights, contact us using the details below.

10. Marketing Preferences

You will only receive marketing communications if you have opted in. You can unsubscribe at any time by clicking the link in emails or contacting us directly.

11. International Transfers

We do not routinely transfer personal data outside the UK. If transfers occur, we ensure compliance with UK GDPR safeguards.

12. Children’s Privacy

Our services are not directed at individuals under 16. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with a revised “Effective Date.”

14. Contact Us

If you have any questions or concerns about this policy or how we handle your data, please contact:

ITR Commercial Ltd
Email: privacy@itrcommercial.co.uk
Address: 15 Street Barn, Sompting, Lancing, BN15 0GN

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.