Privacy Policy

This privacy policy explains how Lowell Resolve (“we”, “us”, “our”) handles personal data collected through this website and in the course of supplying wholesale goods and sourcing services to business customers.

The data controller is [Registered company name], a company registered in England and Wales with company number [Company number], whose registered office is at [Registered address line 1], [Registered address line 2], [Town or city], [Postcode], United Kingdom.

Where registration with the Information Commissioner’s Office is required, our registration number is [ICO registration number].

We are a business-to-business supplier, so most of the information we handle relates to organisations rather than individuals. Where we do collect personal data, it is usually business contact information.

• Enquiry and quotation data. Your name, company name, business email address, telephone number, job title and the details of the products or requirement you describe to us.
• Trade account data. Trading name, registered company name, company number, VAT number, trading address, main contact details and the commercial information needed to assess and operate an account.
• Correspondence. Records of emails, calls and messages exchanged with you about enquiries, quotations, orders and accounts.
• Technical data. Information your browser sends when you visit this website, such as IP address, device type and pages viewed, to the extent it is processed by our hosting provider for security and reliability.

Please do not submit special category data, payment card details or commercially sensitive information through the website forms. If a requirement needs to be handled confidentially, contact us and we will agree a suitable route.

We use personal data for the following purposes:

• Responding to enquiries and preparing quotations.
• Assessing, opening and administering trade accounts.
• Processing, fulfilling and supporting orders.
• Maintaining business records and managing our commercial relationship.
• Complying with legal, accounting and regulatory obligations.
• Protecting the security and integrity of our systems and this website.

Under the UK GDPR we rely on the following lawful bases, depending on the activity:

• Contract. Where processing is necessary to take steps at your request before entering into a contract, or to perform a contract with your organisation.
• Legitimate interests. To operate and develop a business-to-business supply relationship, to respond to trade enquiries and to keep proper commercial records, provided your rights do not override those interests.
• Legal obligation. Where we are required to retain or disclose information, for example for tax, accounting or regulatory purposes.
• Consent. Where you have given consent for a specific purpose, such as optional marketing. Consent can be withdrawn at any time.

We do not sell personal data. We may share it with:

• Service providers who support our operations, such as website hosting, email and business software providers, acting on our instructions.
• Suppliers and carriers, where this is necessary to source, prepare or deliver goods you have ordered.
• Professional advisers, including accountants and legal advisers, where relevant to our business.
• Regulators, law enforcement or other authorities where we are legally required to do so.

We keep personal data only as long as necessary for the purpose it was collected for, and to meet our legal and accounting obligations. In practice that means:

• Enquiries that do not lead to a relationship are kept for a limited period and then deleted.
• Trade account and transaction records are retained for the period required by UK tax and accounting law.
• Correspondence is retained for as long as it remains commercially relevant.

Specific retention periods should be confirmed here once your record retention schedule is finalised: [Retention schedule detail].

Where UK data protection law applies to your personal data, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of data where there is no continuing need to keep it.
• Object to, or request restriction of, certain processing.
• Request transfer of data you provided to us, where applicable.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us using the details in the section below. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure. No transmission over the internet can be guaranteed to be completely secure, so we cannot warrant absolute security of information sent to us online.

Where a service provider processes data outside the UK, we take steps to ensure an appropriate safeguard is in place, such as UK adequacy regulations or the International Data Transfer Agreement.

Information about the cookies and similar technologies used on this website is set out in our Cookie Policy.

For any question about this policy or how we handle personal data, contact us at [Data protection email address] or write to us at [Registered address line 1], [Registered address line 2], [Town or city], [Postcode], United Kingdom.

We may update this policy from time to time. The current version is always published on this page, and was last updated on [Date last updated].