Privacy Policy

• Effective Date: 8 January 2024
• Last Reviewed: 4 July 2025

This Privacy Policy explains how GSM Electrical Supplies Ltd collects, uses, discloses, and protects your personal data when you interact with us online or offline, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who We Are

• GSM Electrical Supplies Ltd
• Company Number: 8655213
• Registered Office: Unit 12, Pavilion Workshops, Chesterfield, S42 5UW
• Email: sales@gsmsupplies.co.uk
• Tel: 01246 488938

We are the data controller of your personal data and are committed to protecting your privacy.

2. What Data We Collect

We may collect and process the following personal data:

• Identity Data: Name, job title, company name
• Contact Data: Email address, phone number, address
• Transactional Data: Purchase history, payment details (if applicable)
• Technical Data: IP address, browser type, device identifiers
• Usage Data: Pages visited, interaction data, clickstream
• Marketing Preferences: Consent records, communication preferences

3. How We Collect Your Data

We collect data through:

• Direct interactions: You provide data by filling out forms, subscribing to newsletters, emailing or calling us, or visiting us in person.
• Automated technologies: We collect technical and usage data using cookies and similar technologies.
• Third-party sources: Social media platforms, analytics providers, or public databases.

4. Lawful Basis for Processing

We only process your personal data when the law allows us to. These include:

• Consent – when you have given clear permission
• Contract – where processing is necessary to perform a contract with you
• Legal obligation – where we are required to comply with the law
• Legitimate interests – where it is necessary for our business and your interests do not override this

5. How We Use Your Data

We may use your data to:

• Process and deliver orders or services
• Respond to enquiries
• Send service or marketing communications (if you opt in)
• Improve our website, services and customer experience
• Comply with legal obligations
• We do not use your data for automated decision-making or profiling.

6. Marketing Communications

We may send you marketing emails if:

• You’ve purchased from us and we’re contacting you about similar products or services (soft opt-in)
• You’ve provided explicit consent
• You can unsubscribe at any time using the link in our emails or by contacting us directly.

7. Cookies

We use cookies and similar technologies to:

• Understand how visitors use our website
• Remember your preferences
• Improve website performance

We will not set non-essential cookies (e.g. analytics or marketing) without your consent. You can update your cookie preferences anytime using our cookie banner or browser settings. For full details, see our Cookie Policy.

8. Sharing Your Data

We may share your data with:

• Employees and contractors – for operational purposes
• Service providers – such as marketing platforms (e.g. Mailchimp), payment processors, or IT support
• Professional advisers – such as lawyers or accountants
• Regulators or law enforcement – where legally required
• All third-party service providers are bound by confidentiality and data protection obligations.

9. International Transfers

Some of our service providers may process your data outside the UK. In such cases, we ensure that appropriate safeguards are in place, such as:

• UK-approved Standard Contractual Clauses
• Transfers to countries deemed to have adequate data protection by the UK government

10. How We Protect Your Data

We use physical, electronic and organisational measures to safeguard your data, including:

• Firewalls and encryption
• Role-based access controls
• Staff training in data protection

11. Data Retention

We only keep your data for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting obligations. Typically:

• Customer and enquiry data: up to 7 years after last interaction
• Email marketing lists: until you unsubscribe or withdraw consent

12. Your Rights

Under the UK GDPR, you have the right to:

• Access your data
• Rectify inaccurate data
• Erase your data (“right to be forgotten”)
• Restrict processing
• Object to processing (especially direct marketing)
• Data portability
• Withdraw consent at any time (for consent-based processing)
• Lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk

To exercise your rights, contact:

???? sales@gsmelec.co.uk

???? 01246 488938

13. Third-Party Links

Our website may include links to third-party websites or plug-ins. We are not responsible for their privacy practices. We encourage you to read their privacy notices.

14. Updates to This Policy

We may update this Privacy Policy from time to time to remain compliant. The latest version will always be posted here, with the most recent review date at the top.