Privacy & Cookies Policy

Who we are & how to reach us

Eastern Seals (UK) Ltd ("Eastern Seals", "we", "us") is the data controller for personal data collected through our websites, sales channels, and customer services. If you have questions about this notice or wish to exercise your rights, contact our Data Protection Officer at:

Data Protection Officer
Eastern Seals (UK) Ltd
Unit 3 Sovereign Business Park, Jubilee Industrial Estate
Ashington, Northumberland, NE63 8UG
itsupport@easternseals.co.uk

Information we collect

We only collect information needed to provide and improve our services. This includes:

• Identity and contact data (name, company, billing and delivery addresses, phone number, email).
• Account data such as account type, customer number, account identifiers, saved addresses, account preferences, and login/session records.
• Transaction data such as baskets, quotes, order history, product codes, product quantities, delivery details, invoices, payment records, and credit applications.
• Technical data including device identifiers, IP address, and cookie identifiers for security and analytics.
• Communications data such as enquiries, support tickets, survey responses, marketing preferences, and how you heard about us.
• Anti-spam form data, including hidden fields used to identify automated submissions.

When you apply for a credit account we also receive information from credit reference agencies to verify identity, assess creditworthiness, and prevent fraud.

Customer accounts, passwords & order history

When you create a website account, we use your email address to identify the account and to help you sign in. Your email address and account identifiers may be stored in our account and authentication systems so we can connect your login to saved details, checkout activity, and order history. Password credentials are handled by our authentication service and are not stored in plain text in Eastern Seals' business systems.

We store customer profile details, billing and delivery addresses, and order information so you can view past orders, repeat purchases more easily, and receive customer support. Trade account applications may create a pending login and customer account record while our office team reviews trade access.

How and why we use personal data

We rely on the following lawful bases under the UK GDPR and Data Protection Act 2018:

• Contract: To set up accounts, process orders, deliver products, manage payments, provide order history, and support account services.
• Legitimate interests: To maintain network security, detect fraud and automated form abuse, improve services, assess product performance, forecast demand, manage stock, and understand how customers use our products and website.
• Consent: For optional marketing, non-essential cookies and analytics, and any optional processing where consent is requested separately.
• Legal obligation: To comply with accounting, taxation, and regulatory requirements.

The privacy checkbox used when creating an account confirms that you understand the processing needed to run your account. It does not opt you in to marketing communications.

Automated tools (such as credit scoring or fraud screening) may be used to protect our business and customers. You can request human review of an automated decision by contacting the Data Protection Officer.

Product performance & service improvement

We may use purchase history, order lines, product codes, quantities, delivery outcomes, returns, complaints, and support enquiries to assess product performance, improve availability, manage quality issues, support traceability, and plan future stock or service improvements. Where practical, we use aggregated or anonymised reporting so individual customers are not identified.

Who we share data with

We only share information with trusted organisations that support our operations, including:

• Delivery and logistics partners so your orders arrive safely.
• Payment service providers and banks to process transactions securely.
• IT, authentication, hosting, and cloud service providers who host, secure, and maintain our systems, including providers used for website account authentication.
• Marketing and research agencies that manage communications or gather feedback on our behalf.
• Credit reference agencies and fraud prevention bodies when assessing or servicing credit accounts.

We never sell personal data. Any transfer outside the UK/EEA is protected by contracts and safeguards that meet UK GDPR requirements.

How long we keep data

We keep personal data only for as long as necessary. Account profile and authentication records are kept while the account remains active or while they are needed to provide account services. Most customer, order, and financial records are retained for up to seven years to meet legal and accounting obligations. We may keep information longer if required for legal claims, warranty matters, product traceability, or regulatory investigations. When data is no longer needed it is securely deleted or anonymised.

If you ask us to close or delete your account, we will remove or disable account access where possible, but some order, invoice, traceability, and accounting records may need to be retained for legal or legitimate business reasons.

Security

We use access controls, authentication services, encrypted connections, and operational security measures to protect personal data. Password credentials for website accounts are managed through our authentication service. Staff access to customer and order information is limited to people who need it for sales, support, fulfilment, finance, IT, quality, or account administration.

Your rights

You can exercise any of the following rights at any time:

• Access the personal data we hold and request a copy.
• Ask us to correct inaccurate or incomplete information.
• Request deletion or restriction of your data in certain circumstances.
• Object to processing based on legitimate interests or direct marketing.
• Request data portability for information you provided to us.
• Withdraw consent at any time where processing relies on consent.

Contact itsupport@easternseals.co.uk to make a request. You also have the right to lodge a complaint with the Information Commissioner's Office (www.ico.org.uk) if you are unhappy with how we handle your data.

Cookie notice

Cookies are small text files that help us run our website, keep it secure, and understand usage patterns. We categorise cookies as:

• Essential: Required for navigation, security, and remembering your consent choices.
• Performance: Anonymous analytics that help us understand page performance and improve the site.
• Marketing: Tools that personalise communications and measure campaign effectiveness.

You can manage cookie preferences at any time using the floating "cookie" button on every page or via the consent banner shown when you first visit. For details about individual scripts, refer to the consent manager or contact us.

Keeping in touch

We'll only send marketing communications when you have opted in. You can manage preferences through your account, via the unsubscribe link in our emails, or by contacting our customer services team.