Privacy Policy

Chain Supply UK is a trading name of Howcroft Group Limited, a company registered in England & Wales. Our registered office is:

We are the data controller for personal information collected through this website. This policy explains what data we collect, why we collect it, and how we handle it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We collect the following categories of personal data:

a) Identity & Contact Information

• Full name and job title
• Email address and telephone number
• Company name and VAT number (for B2B customers)
• Billing and delivery addresses

b) Transaction & Order Data

• Details of products and services you have purchased or enquired about
• Payment information (processed securely via Stripe — we do not store card details)
• Order history, quote requests and correspondence

c) Technical & Usage Data

• IP address, browser type and operating system
• Pages visited, time on site and referral source
• Cookie identifiers and session data

d) Marketing Preferences

• Newsletter subscription status and communication preferences

We use your personal data only where we have a lawful basis to do so:

We will never sell your personal data to third parties. You may withdraw consent for marketing at any time by emailing allan@chainsupply.co.uk or clicking "unsubscribe" in any email we send.

We use cookies — small text files stored on your device — to help our website function correctly and to understand how visitors use it. The cookies we use include:

• Essential cookies: Required for the website and shopping cart to operate.
• Analytics cookies (Google Analytics / GA4): We use Google Analytics (ID: G-FNM615Q6E5) to collect anonymised data about site usage. Data is processed by Google LLC under a data processing agreement.
• Marketing cookies (Google Ads): We use Google Ads (AW-17874601500) to measure the effectiveness of advertising campaigns.
• HubSpot cookies: We use HubSpot to manage enquiries and email marketing. HubSpot may set cookies to track form submissions and page visits.

You can control or disable cookies through your browser settings. For more information, visit allaboutcookies.org.

We may share your personal data with:

• Stripe: For secure payment processing. Stripe is PCI-DSS compliant.
• HubSpot: For CRM, enquiry management and email marketing.
• Google: For analytics and advertising measurement (anonymised data).
• Delivery carriers: Name and delivery address shared as required to fulfil shipments.
• Legal and regulatory authorities: Where required by law (e.g. HMRC, courts).

All third-party processors are required to handle your data in accordance with UK GDPR.

We retain personal data only for as long as necessary:

• Customer order records: 7 years (to comply with HMRC accounting requirements)
• Enquiry and quote records: 3 years from last contact
• Marketing consent records: Until consent is withdrawn, then deleted within 30 days
• Website analytics data: 26 months (Google Analytics default)
• Cookies: Session cookies expire when you close your browser; persistent cookies up to 2 years

When data is no longer required, it is securely deleted or anonymised.

As a data subject in the UK, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data where there is no lawful reason to retain it.
• Right to restrict processing: Ask us to pause processing of your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at allan@chainsupply.co.uk. We will respond within 30 days. If unsatisfied, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113.

We implement appropriate technical and organisational security measures, including SSL/TLS encryption for data in transit, secure hosting infrastructure, and restricted staff access to personal data on a need-to-know basis.

Payment card data is never stored on our servers — all card transactions are handled directly by Stripe.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this policy periodically.

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern: