Privacy Policy
(Compliant with UK GDPR & the Data Protection Act 2018)
Introduction
This Privacy Policy explains how Green Box Wholesale Ltd (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit and use our website (www.greenboxwholesale.co.uk) and our services. We are committed to safeguarding your privacy and ensuring compliance with UK data protection law.
Data We Collect
When you create a new account we will collect the following information:
- Personal Details: Full name and contact information, including email address and telephone number.
- Business Details: Shop name and address.
- Identification Documents: Copies of identity documents (e.g., passport of the company director) to verify identity.
- Proof of Address & Business Operation: Evidence such as a lease, deed, or other documentation proving your right to operate at the commercial address.
- Banking Information: Proof of a valid UK bank account (with any sensitive details appropriately redacted).
Our Legal Basis For Doing So:
We process your personal data on the following legal grounds:
- Contractual Necessity: To create and manage your account, and to provide you with our services.
- Legal Obligations: To comply with statutory requirements (e.g., anti-money laundering laws).
- Legitimate Interests: To maintain and improve our products and services, conduct market research, and send you promotional communications (where you have consented).
How We Use Your Information
Your personal data is used for the following purposes:
- Account Management: To verify your identity and ensure you meet our terms and conditions.
- Service Improvement: For internal record keeping, analytics, and to help us enhance our products and website.
- Communication: To contact you regarding your account, send promotional emails about new products or special offers (with an opt-out option provided in each email), and conduct market research.
- Legal Compliance: To share a limited amount of information with payment processors or regulatory bodies as required by law (e.g., for anti-money laundering compliance).
Data Security & Retention
We use industry-standard encryption and security measures to protect your personal data from unauthorized access, disclosure, or destruction. Your data is retained only for as long as necessary to fulfill the purposes outlined in this policy or as required by law (typically up to 7 years), after which it will be securely deleted.
How We Use Cookies
Our website uses cookies—small files placed on your device—to enhance your user experience and analyse site traffic. Cookies help tailor our website to your preferences, such as remembering your settings and providing relevant content. You can choose to accept or decline cookies through your browser settings; however, please note that disabling cookies may affect certain functionalities of our website. For more details, please see our Cookie Policy.
Links To Other Websites
Our website may contain links to external sites of interest. Once you click on a link and leave our site, we are not responsible for the privacy practices or content of those third-party websites. We encourage you to review their respective privacy policies before providing any personal information.
Your Rights
Under the UK GDPR, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Ask us to correct any inaccurate or incomplete data.
- Right to Erasure: Request the deletion of your personal data (subject to certain legal obligations).
- Right to Restrict Processing: Request that we limit the way we process your data under certain conditions.
- Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
- Right to Object: Object to the processing of your personal data where we rely on legitimate interests.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of past processing.
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within 28 days.
Controlling Your Personal Information
You can update or correct your personal information by contacting us. We will not sell, distribute, or lease your personal data to third parties except where required by law or with your explicit consent. Additionally, we do not store or share credit card details with third parties.
Access Requests
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). For more information on how to file a complaint, please visit https://ico.org.uk/.
Under 18s
Our services are intended solely for individuals aged 18 and over. We do not knowingly collect data from anyone under the age of 18. If we become aware that personal data from an individual under 18 has been collected, we will take steps to delete such information as soon as possible.
Disclosure to Third Parties
We will not disclose your personal data to third parties except in the following circumstances:
- To comply with legal obligations or respond to lawful requests by public authorities.
- To service providers (e.g., payment processors) who assist us in delivering our services, subject to appropriate confidentiality and data protection agreements.
Data Protection Officers
Our designated Data Protection Officer (DPO) is:
Arturas Tiurinas
Email: arturas@greenboxwholesale.co.uk
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically.
Contact Us
If you have any questions about this Privacy Policy or our data processing practices, please contact us by email at sales@greenboxwholesale.co.uk or write to us at:
GBW Distribution Ltd
Unit 22 Riverside Ind Park
Moody Lane
Grimsby
DN31 2AN