Privacy Policy
Website: wctscaffold.co.uk
Business Name: WCT Scaffold Supplies Ltd
ICO Registration Number: ZB369688
Contact Email: sales@wctscaffold.co.uk
Address: WCT Scaffold Supplies, Newcourt Barton, Clyst Road, Topsham, EX3 0DB
Last Updated: May 2026
1. Who We Are
This website is operated by WCT Scaffold Supplies Ltd (“we”, “us”, “our”). For the purposes of UK data protection law, we are the Data Controller of the personal data we process. If you have any questions about this policy or your personal data, you can contact us at: Email: sales@wctscaffold.co.uk Address: WCT Scaffold Supplies, Newcourt Barton, Clyst Road, Topsham, EX3 0DB
2. Personal Data
We Collect We may collect and process the following categories of personal data: Information you provide directly Name Email address Telephone number Postal address Any information submitted via contact forms, enquiries, or correspondence Information collected automatically IP address Browser type and version Device information Pages visited Date and time of visits Website usage data and behaviour Referral source Marketing and communication data Communication preferences Newsletter subscription status Email engagement (opens and clicks) You are not required to provide personal data to us. However, we may be unable to respond to enquiries or provide services without it.
3. How We Collect Your Data
We collect personal data: Directly from you when you submit forms, contact us, or use our services Automatically via cookies and similar tracking technologies when you use our website
4. How We Use Your Personal Data
We only use your personal data where we have a lawful basis under UK GDPR. Purpose Lawful Basis Responding to enquiries Legitimate interests Providing quotations or services Contract Managing bookings or orders Contract Website security and spam prevention Legitimate interests Website analytics Consent Email marketing Consent or soft opt-in (PECR) Legal and regulatory compliance Legal obligation
5. Legitimate Interests
Where we rely on legitimate interests, we ensure that our business needs do not override your rights and freedoms. Our legitimate interests include: Responding to customer enquiries Operating and improving our website Preventing fraud, spam, and misuse Maintaining system security Managing customer relationships We have carried out Legitimate Interest Assessments (LIAs) where required. You have the right to object to processing based on legitimate interests.
6. How We Store and Protect Your Data
Your personal data is stored securely using a combination of: Secure website hosting systems Email systems Business administration tools We implement appropriate technical and organisational security measures including: Password protection Access controls Secure servers Restricted staff access Where third-party providers process data on our behalf, they are required to comply with UK data protection law and operate under Data Processing Agreements (DPAs).
7. Contact Forms
When you submit a contact form: Your data is sent to us via email and/or stored securely in our system We use it solely to respond to your enquiry We do not use contact form data for marketing unless you have provided consent We retain enquiry data for up to 24 months for customer service and record-keeping purposes. Please do not submit sensitive personal data (such as health information or financial details) unless specifically requested.
8. Payments
Where payments are processed through our website: Payment processing is handled by secure third-party providers We do not store or have access to full card details Payment providers act as independent data controllers for payment processing.
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies. We use a cookie consent system to ensure non-essential cookies are only set with your consent. Types of cookies we use: Strictly necessary cookies (website functionality) Analytics cookies (Google Analytics 4) Marketing cookies (Meta/Facebook advertising) You can manage or withdraw consent at any time via cookie settings. Rejecting non-essential cookies will not affect your ability to use our website.
10. Google Analytics
We use Google Analytics 4 to understand how users interact with our website. Google Analytics may collect: Anonymised IP address Pages visited Time spent on site User interactions Device and browser information General location (country/region) Conversion events (e.g. enquiries or purchases) We use this data to improve our website, services, and marketing. Google may process data outside the UK. Where this occurs, appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses are in place. Google Privacy Policy: https://policies.google.com/privacy
11. Meta (Facebook & Instagram) Advertising
We may use the Meta Pixel to: Measure advertising performance Build advertising audiences Deliver relevant adverts Meta Platforms Ireland Ltd may act as a joint data controller for certain processing. Meta may use automated profiling for advertising purposes. These cookies are only used with your consent. Meta Privacy Policy: https://www.facebook.com/privacy/policy/
12. Third-Party Service Providers
We may share personal data with trusted third parties including: Website hosting providers Email service providers Google services (Analytics, reCAPTCHA, Search Console) Marketing platforms (e.g. Mailchimp or Brevo) Payment processors These providers only process data where necessary and are contractually required to keep it secure.
13. Marketing
We may send marketing communications where: You have explicitly consented, or You are an existing customer and we are relying on the PECR soft opt-in You can opt out of marketing at any time by: Clicking “unsubscribe” in emails, or Contacting us directly
14. International Data Transfers
Some third-party providers may transfer personal data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including: UK International Data Transfer Agreement (IDTA), or UK-approved Standard Contractual Clauses Transfers only occur where adequate protection is ensured.
15. How Long We Keep Your Data
We retain personal data only for as long as necessary: Data Type Retention Period Enquiries Up to 24 months Customer records Up to 6 years (tax/accounting requirements) Analytics data Up to 14 months Marketing data Until you unsubscribe or withdraw consent Security logs Up to 12 months
16. Your Data Protection Rights
Under UK GDPR, you have the right to: Access your personal data Request correction Request deletion Restrict processing Object to processing Withdraw consent at any time Request data portability To exercise your rights, contact: sales@wctscaffold.co.uk We may need to verify your identity before responding. We will respond within one calendar month.
17. Withdrawing Consent
Where processing is based on consent, you can withdraw it at any time via: Cookie settings on our website Email opt-out links Contacting us directly Withdrawal does not affect processing carried out before consent was withdrawn.
18. Data Security
We take appropriate technical and organisational measures to protect your personal data from: Loss Misuse Unauthorised access Alteration Disclosure We also use security tools such as spam and abuse detection where appropriate.
19. Data Breaches
If you believe your personal data has been compromised, please contact us immediately at: sales@wctscaffold.co.uk We will investigate and take appropriate action in line with UK GDPR requirements.
20. Legal Disclosures
We may disclose personal data where required: By law By court order To comply with legal obligations To protect our legal rights
21. External Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices and recommend reviewing their privacy policies separately.
22. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page.