Privacy Policy
Last updated: 19 September 2026
How we collect, use, store and protect your personal data when you use hiluxpoly.co.uk or order from us.
1. Who we are
This policy is issued by Hilux Poly, the trading name of Iftikhar Plastic & Company UK Ltd (Company No. 13075442, VAT GB 372 3433 08), registered office Unit 11 Wetherby Business Park, Wetherby Road, Osmaston Industrial Estate, Derby DE24 8HL (“Hilux Poly”, “we”, “us”, “our”).
We are the data controller for the personal data described in this policy. For any question about this policy or how we handle your data, contact sales@Hiluxpoly.co.uk or 01332 732118.
2. What we collect
Information you give us
- When you place an order: name, delivery and billing address, email address, phone number, and order details. Payment card details are entered directly into our payment provider’s secure checkout, we never see or store your full card number.
- When you request a trade or bulk quote: company name, contact details, and whatever you tell us about volume, product and delivery needs.
- When you contact us by email, phone, WhatsApp or a contact form: your contact details and the content of your message.
- When you sign up for updates: your email address and marketing preferences.
Information collected automatically
- Technical data, IP address, browser and device type, pages viewed, and how you arrived at the site, collected via cookies and similar technologies. See Cookies below.
3. How we use it
- Processing, dispatching and invoicing your order
- Responding to quote requests and customer service queries, including returns and disputes
- Meeting our legal and accounting obligations (invoices, tax records, dispute records)
- Improving the site, understanding which pages and products are useful
- With your consent, sending occasional updates about products, pricing or offers, you can withdraw this consent at any time
- Preventing fraud and keeping the site secure
4. Our legal basis for using it
| Activity | Legal basis |
|---|---|
| Processing your order, delivering goods, handling returns | Performance of a contract with you |
| Invoicing, tax and accounting records | Legal obligation |
| Site security, fraud prevention, basic analytics | Legitimate interest, running a secure, working website |
| Marketing emails or offers | Your consent, given at sign-up and withdrawable at any time |
5. Who we share it with
We don’t sell your personal data. We share it only where needed to run the business:
- Couriers, to deliver your order, we share the name, address and contact details needed to get it to you
- Payment processor (Stripe), to take payment securely; Stripe processes your card details directly and Hilux Poly does not store them
- Website, hosting and IT service providers, who run the systems this site and our order processing depend on
- Our accountant, for bookkeeping and tax purposes
- HMRC or other authorities, where we’re legally required to
Each of these only receives what they need to do their specific job, and is required to keep it secure.
6. International transfers
Some of our service providers (for example, payment processing and hosting infrastructure) may process data outside the UK. Where that happens, we rely on providers who maintain appropriate safeguards, such as the UK’s international data transfer addendum or equivalent standard contractual clauses.
7. How long we keep it
- Order, invoice and payment records: kept for as long as UK tax law requires (currently at least 6 years)
- Quote requests and general correspondence: kept while relevant to an ongoing relationship, then deleted or anonymised
- Marketing contact details: kept until you unsubscribe or ask us to delete them
8. Cookies
The site uses cookies to run the shopping cart and checkout, remember your preferences, and understand how the site is used. Full detail, including the categories of cookie we use and how to control them, is in our Cookie Policy.
9. Keeping your data safe
We use reasonable technical and organisational measures to protect your data, including secure checkout via our payment provider, access controls on our systems, and limiting data access to what each provider or team member needs. No online system is 100% secure, but we take this seriously and review it regularly.
10. Your rights
Under UK GDPR, you have the right to:
- Access, ask us what personal data we hold about you
- Rectification, ask us to correct inaccurate data
- Erasure, ask us to delete your data, where we’re not required to keep it (e.g. for tax records)
- Restrict or object, ask us to limit how we use your data, or object to certain uses
- Portability, ask for a copy of data you’ve given us in a portable format
- Withdraw consent, for anything we do on the basis of your consent, such as marketing
To exercise any of these, contact us using the details below. We’ll respond within one month.
11. Children
This site is aimed at businesses and adults ordering packaging materials. We don’t knowingly collect data from children.
12. Changes to this policy
We may update this policy from time to time, for example if we change suppliers or add a new service. We’ll update the “last updated” date above when we do. Significant changes will be made clear on this page.
13. Contact & complaints
Questions or requests about your data: sales@Hiluxpoly.co.uk, 01332 732118, or Unit 11 Wetherby Business Park, Wetherby Road, Osmaston Industrial Estate, Derby DE24 8HL.
If you’re unhappy with how we’ve handled your data, you also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or 0303 123 1113.