Privacy Policy

1. Who we are

Bay Drywall and Insulation Supplies Limited ("we", "us") is the data controller for personal data collected through www.baydrywall.co.uk. We are a private limited company registered in England & Wales (company no. 14473556). Registered office: Newport House, Newport Road, Stafford ST16 1DA. Trading address: Unit 3 Babbage Court, Totnes Industrial Estate, Totnes, Devon TQ9 5JE.

For any privacy question or request, email ian@baydrywall.co.uk, call 03330 908479, or write to us at our trading address.

2. The information we collect

Contact and quote enquiries: your name, email address, phone number (optional) and anything you put in your message, such as products, quantities and delivery postcode.
Trade credit applications: company name, registration number, registered and trading/delivery addresses, the credit limit requested, the main contact's name, directors' names, email addresses and phone numbers, the invoice/accounts email address, and any notes. If we need to verify identity, we may ask for photo ID. When we assess an application we also receive information about the company and its directors from credit reference agencies.
Customers and orders: contact, delivery and invoice details, order history and payment records.
Website use: our website host, Netlify, keeps standard technical server logs (such as IP address, browser type and the pages requested) to run and secure the site.

3. How we use it and our lawful basis

To answer enquiries and send quotes. Lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
To assess trade credit applications, including credit reference checks and identity verification, and to prevent fraud. Lawful basis: taking steps before entering into a contract, and our legitimate interest in managing credit risk and preventing fraud.
To supply and deliver orders, invoice and collect payment, and run trade accounts. Lawful basis: performance of a contract.
To keep accounting and tax records. Lawful basis: legal obligation.
To show Google Maps on our Contact page. Lawful basis: your consent, which you give by clicking “Show map”.

We don't sell your data, and we don't use it for marketing unless you have asked us to.

4. Credit reference checks

When a company applies for a trade credit account, we will search the records of one or more credit reference agencies about the company and its directors. The agencies may keep a record of the search. We use the results to decide whether to open an account and what credit limit to offer, and to help prevent fraud. We may also share information about how the account is run with credit reference agencies. A person makes the final decision; we don't make credit decisions by automated means alone.

We only share personal data where we need to:

Netlify, Inc., our website host and form provider, which processes data on our behalf to host this website, receive the forms you send and pass them to us by email. Netlify processes this data in the United States (see section 8).
IONOS, our email provider, which processes data on our behalf.
Credit reference and fraud prevention agencies, for trade credit applications.
Hauliers and suppliers who deliver your order, so they can get it to your site.
Our accountants and professional advisers, and HMRC or other authorities where the law requires it.
Google, only if you choose to load Google Maps, and to deliver the fonts this website uses (see section 7).

Enquiries placed through our online store, Insulation Warehouse Direct, are covered by that store's own privacy policy.

6. How long we keep it

Enquiries and quotes that don't lead to an order: 2 years from our last contact.
Trade credit applications and trade account records: 6 years after the account closes.
Customer order and invoice records: 6 years from the end of the financial year they relate to (for tax purposes).

We then delete or anonymise the data securely.

7. Cookies and third-party services

This website doesn't set any cookies of its own, and we don't use analytics or tracking.

Google Maps (Google Ireland Limited / Google LLC) shows where we're based. The map only loads if you click “Show map” on our Contact page. Google may then set cookies and collect data such as your IP address, and may transfer it to the United States under appropriate safeguards. See policies.google.com/privacy.
Google Fonts: our pages load their fonts from Google Fonts, so your browser sends your IP address to Google to download them. Google Fonts doesn't set cookies.

If you don't click “Show map”, the map isn't loaded. Your choice applies to that page visit only.

8. International transfers

Our email provider, IONOS, stores data in the UK or EU. Netlify, Inc., which hosts this website and handles its forms, processes data in the United States. That transfer is covered by Netlify's Data Processing Agreement, under the UK–US data bridge or, where that doesn't apply, standard contractual clauses with the UK International Data Transfer Addendum (IDTA). If other data is transferred outside the UK, for example to Google in the United States, we rely on the safeguards UK law allows, such as the UK–US data bridge or standard contractual clauses.

9. Keeping your data safe

The website uses an encrypted (HTTPS) connection. Access to enquiries, applications and account records is limited to people who need it to do their job.

10. Your rights

Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
have data deleted, or its use restricted, in some circumstances;
object to our use of your data based on legitimate interests;
receive your data in a portable format, where this applies;
withdraw consent at any time, where we rely on consent.

To use any of these rights, email ian@baydrywall.co.uk. We'll reply within one month. There's normally no charge.

11. Complaints

If you're unhappy with how we've handled your data, please contact us first and we'll try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk, 0303 123 1113.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.