Who is responsible for your information
Vogue Plastics Machinery Ltd, company number 03136154, is the data controller. Contact us at jack@vogueplastics.com or write to Primary House, Spring Gardens, Macclesfield, Cheshire, SK10 2AP, United Kingdom.
Information we collect
- identity and contact details, including name, company, email, telephone, billing and delivery information;
- account, authentication and communication preferences;
- order, payment status, quotation, return and transaction records;
- machine, part, production and compatibility information submitted in enquiries;
- photographs, documents and other files you choose to upload;
- website security and technical information, such as IP address, browser, timestamps and server logs; and
- cookie and local-storage choices described in our Cookie Policy.
Please do not submit payment-card details, passwords, special-category information or other unnecessary sensitive information through an enquiry form.
How and why we use information
| Purpose | Main lawful basis |
|---|---|
| Responding to enquiries, identifying parts, sourcing machinery and preparing quotations | Steps requested before a contract and legitimate interests in responding to genuine business enquiries |
| Creating accounts, processing orders, payments, delivery, returns and customer service | Performance of a contract |
| Invoices, tax, accounting, fraud prevention and legal claims | Legal obligation and legitimate interests |
| Operating, securing and improving the website and services | Legitimate interests in reliable and secure business operations |
| Optional analytics or electronic marketing | Consent where consent is required |
Where we rely on legitimate interests, we consider the necessity and impact of the processing and do not use that basis where your interests or fundamental rights override ours.
Who receives information
We share information only where necessary with service providers supporting website hosting, database and file storage, authentication, email delivery, payment processing, fraud prevention, analytics where enabled, professional advice, carriers and delivery partners. Current technology providers may include Vercel, Supabase, Stripe, Resend and Google Analytics.
We may share information with manufacturers, machinery dealers, suppliers or industry contacts where necessary to investigate a sourcing request. We normally limit this to the technical and commercial information needed and avoid sharing personal contact details unless appropriate.
We may disclose information where required by law, to establish or defend legal rights, or in connection with a sale or restructuring of the business. We do not sell personal information.
International transfers
Some technology providers or business contacts may process information outside the United Kingdom. Where UK data protection law requires safeguards, we use an applicable adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another lawful safeguard. Contact us for further information about safeguards relevant to your data.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose collected, including legal, accounting and dispute requirements. Typical periods are:
- orders, invoices and associated financial records: generally six years after the relevant financial year or transaction;
- enquiries, quotations and uploaded files that do not become an order: normally up to 24 months after the enquiry closes;
- account details: while the account is active, followed by a limited period needed for security, transactions or legal claims;
- security and technical logs: normally up to 12 months, unless required longer to investigate an incident; and
- consent records: for as long as needed to demonstrate and respect the choice.
We may retain information longer where a legal dispute, regulatory request or investigation requires it, and may retain anonymised information that no longer identifies anyone.
Your rights
Depending on the circumstances, you may ask for access to your personal information, correction, erasure, restriction, portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.
You have the right to object at any time to direct marketing. To exercise a right, email us. We may need to verify your identity and will respond within the period required by law.
Security, children and automated decisions
We use proportionate technical and organisational measures designed to protect information, including access controls and private storage for enquiry attachments. No internet service can guarantee absolute security.
The website is intended for business users and adults. We do not knowingly collect information from children. We do not make decisions producing legal or similarly significant effects solely by automated processing.
Questions and complaints
Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, telephone 0303 123 1113, or the ICO's current postal address shown on its website.