Privacy Policy
Last updated: March 2026 | Version: 2.0
1. Who We Are
This website is operated by Nigel Rose Limited (trading as Trade LockWholesale), a company registered in England and Wales.
| Registered Name | Nigel Rose Limited |
| Trading As | Trade LockWholesale / LockWholesale.co.uk |
| Address | Unit A3a, Rose Business Estate, Marlow Bottom, Marlow, SL7 3ND |
| info@lockwholesale.co.uk | |
| Phone | 01494 444884 |
| ICO Registration | Registered with the Information Commissioner’s Office (ICO) |
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Nigel Rose Limited is the Data Controller for personal data collected through this website.
2. What Data We Collect
2.1 Data You Provide Directly
- Account registration: name, company name, email address, phone number, billing and delivery address, trade credentials (for trade account approval)
- Placing an order: name, billing/delivery address, payment information (processed securely — we do not store card details), order history
- Contact forms & enquiries: name, email, message content
- Newsletter sign-up: email address and marketing preferences
2.2 Data Collected Automatically
- Usage data: pages visited, time on site, referring URL, browser type, device type, operating system
- IP address: used for security, fraud prevention and approximate location
- Cookies and tracking technologies: see Section 7 below
2.3 Data From Third Parties
We may receive data from payment processors (e.g. Stripe, PayPal) confirming transaction status, and from analytics providers such as Google Analytics regarding how users reach and interact with our site.
3. How We Use Your Data
| Purpose | Legal Basis (UK GDPR) |
|---|---|
| Processing and fulfilling orders | Contract performance (Art. 6(1)(b)) |
| Managing your trade account and verifying trade status | Contract performance (Art. 6(1)(b)) |
| Sending order confirmations, invoices and delivery updates | Contract performance (Art. 6(1)(b)) |
| Responding to enquiries and customer support | Legitimate interests (Art. 6(1)(f)) |
| Preventing fraud and ensuring website security | Legitimate interests (Art. 6(1)(f)) |
| Improving our website and product range | Legitimate interests (Art. 6(1)(f)) |
| Sending marketing emails (if opted in) | Consent (Art. 6(1)(a)) |
| Complying with legal obligations (e.g. tax records) | Legal obligation (Art. 6(1)(c)) |
4. Who We Share Your Data With
We do not sell your personal data. We share it only where necessary with trusted third parties:
- Payment processors (e.g. Stripe, PayPal, Sage Pay) — to process transactions securely. Card data never passes through or is stored on our servers.
- Delivery and logistics partners — name, address and contact details to fulfil your order.
- Email service providers — to send transactional and marketing emails.
- Analytics providers (e.g. Google Analytics) — anonymised usage data to help us improve the site.
- IT and hosting providers — who process data on our behalf under data processing agreements.
- Legal and regulatory authorities — where required by law (e.g. HMRC for tax purposes).
All third-party processors are required to handle your data in accordance with UK GDPR. Where data is transferred outside the UK, appropriate safeguards are in place.
5. How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Order and transaction records | 7 years (HMRC legal requirement) |
| Active customer accounts | Duration of account plus 3 years after last activity |
| Inactive accounts (no orders) | 2 years from registration, then deleted |
| Marketing preferences / email list | Until you unsubscribe or withdraw consent |
| Enquiry / contact form submissions | 2 years |
| Server and security logs | 90 days |
6. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you (Subject Access Request)
- Right to rectification — ask us to correct inaccurate or incomplete data
- Right to erasure — request deletion of your data where there is no compelling reason to retain it
- Right to restrict processing — ask us to limit how we use your data
- Right to data portability — receive your data in a structured, commonly used format
- Right to object — object to processing based on legitimate interests or for direct marketing
- Rights related to automated decision-making — we do not make solely automated decisions that significantly affect you
To exercise any of these rights, please contact us at info@lockwholesale.co.uk. We will respond within 30 days. There is no charge for reasonable requests.
7. Cookies
Our website uses cookies — small text files stored on your device. We use the following categories:
| Type | Purpose | Examples |
|---|---|---|
| Strictly Necessary | Essential for the website and shopping cart to function. Cannot be disabled. | WooCommerce session, CSRF token, login session |
| Functional | Remember your preferences (e.g. recently viewed items) | WooCommerce preferences |
| Analytics | Understand how visitors use the site (anonymised) | Google Analytics (_ga, _gid) |
| Marketing | Relevant advertising and remarketing (only with consent) | Google Ads, Facebook Pixel |
You can manage or withdraw cookie consent at any time via our cookie banner or your browser settings. Blocking strictly necessary cookies may affect site functionality.
8. Website Security
- SSL/TLS encryption for all data transmitted to and from this website (HTTPS)
- Payment card data handled exclusively by PCI-DSS compliant payment processors — we never store card details
- Regular security updates and vulnerability monitoring
- Access controls limiting staff access to personal data on a need-to-know basis
- Secure password policies and two-factor authentication for admin access
In the event of a data breach likely to result in risk to your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay.
9. Children’s Privacy
Our website and services are intended for business-to-business (B2B) trade customers only. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data to us, please contact us immediately.
10. Links to Other Websites
Our website may contain links to third-party websites (e.g. manufacturer sites, trade associations). We are not responsible for the privacy practices of those sites and recommend you review their policies independently.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will always reflect the most recent revision. Significant changes will be communicated to registered account holders by email.
12. Contact & Complaints
For any data protection queries, please contact us first:
- Email: info@lockwholesale.co.uk
- Phone: 01494 444884
- Post: Nigel Rose Limited, Unit A3a, Rose Business Estate, Marlow Bottom, Marlow, SL7 3ND
If you remain unsatisfied, you may lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
- Post: ICO, Wycliffe House, Water Lane, Wilmslow, SK9 5AF