Privacy Policy - GSH Supplies

Last Updated: 13 September 2026

Effective Date: 13 September 2026

1. Who We Are

GSH Supplies ("we", "us", "our") is the data controller for the purposes of the UK

General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our details are:

Business Name: GSH Supplies

Registered Address: 15 Edward Avenue, Morden, Surrey, SM4 6EP, United

Kingdom

Website: https://www.gshsupplies.co.uk

Email: info@gshsupplies.co.uk

If you have any questions about this policy or how we handle your data, please

2. What This Policy Covers

This policy explains how we collect, use, store and protect your personal

information when you:

- Visit our website www.gshsupplies.co.uk

- Create an account, place an order, or make an enquiry

- Contact us by email, phone, or contact form

- Subscribe to our newsletter or marketing communications

We operate as an online-only retailer. We do not have a physical retail shop.

3. What Personal Data We Collect

We may collect the following categories of data:

a) Identity & Contact Data: Your full name, company name (if applicable), billing

address, delivery address, email address, telephone number.

b) Account Data: Username, password (encrypted), account preferences, order

history.

c) Transaction Data: Products purchased, order value, order dates, delivery

instructions, returns and refunds.

d) Financial Data: We do NOT store full payment card details. Payments are

processed securely by our third-party payment providers including Stripe, PayPal,

Apple Pay, Google Pay, and card networks (Visa, Mastercard, American Express).

We only retain last 4 digits and transaction reference for accounting purposes.

e) Technical & Usage Data: IP address, browser type, device type, operating

system, time zone, how you use our website, pages viewed, time on site, referring

URL.

f) Communication Data: Records of emails, live chat, and customer service

enquiries.

g) Marketing Data: Your preferences for receiving marketing and your

communication preferences.

4. How We Use Your Data and Our Lawful Bases

We only use your personal data where the law allows us to. Under UK GDPR, we

rely on:

1. Performance of a Contract: To process your online orders, take payment,

arrange delivery via courier partners, and provide customer support. Without this

data we cannot fulfil your order.

2. Legitimate Interest: To improve our website and product range, prevent fraud,

secure our website, manage our business operations, and for B2B marketing to

existing customers about similar products we supply.

3. Legal Obligation: To comply with HMRC tax and accounting obligations (we must

keep invoice records for 6 years), and to comply with consumer law.

4. Consent: For sending marketing newsletters (where you have opted-in), for

non-essential cookies (analytics and marketing), and for any other purpose where

we specifically ask for your consent. You can withdraw consent at any time.

We will never sell your personal data.

5. Online Orders

As an online-only store, when you place an order on www.gshsupplies.co.uk we

collect your name, address, email and phone number to:

- Create your customer account (if you choose to)

- Process payment and prevent fraud

- Pick, pack and dispatch your order

- Share delivery details with our courier partners (e.g. Royal Mail, DPD,

Parcelforce, UPS)

- Send order confirmations, dispatch notifications and delivery updates

- Handle returns, refunds and warranties

6. Who We Share Your Data With

We only share data where necessary to run our online business:

- Delivery Companies: To deliver your orders to 15 Edward Avenue and all

customer addresses.

- Payment Providers: Stripe, PayPal, Apple Pay, Google Pay, and our merchant

acquirer to securely process payments. They have their own privacy policies.

- E-commerce Platform & IT Providers: Our website host, Shopify/WooCommerce

[delete as applicable], email service, cloud storage and backup providers.

- Professional Services: Accountants and HMRC for tax compliance, and our

business insurers.

- Legal Authorities: Police, Trading Standards, ICO or other regulators if legally

required.

All our service providers are required to keep your data secure and only use it

under our instructions.

7. Cookies and Similar Technologies

Our website uses cookies. A cookie is a small text file stored on your device.

Essential Cookies (always on): Needed for basket, checkout, login and security.

Non-Essential Cookies (only with your consent via our cookie banner):

- Analytics Cookies: e.g. Google Analytics 4, to understand how visitors use

www.gshsupplies.co.uk so we can improve it.

- Marketing Cookies: e.g. Meta Pixel, Google Ads to show relevant products.

You can change your cookie preferences at any time via the [Cookie Settings] link

in our website footer or by adjusting your browser settings. For more detail, see our

Cookie Policy.

8. Data Retention

We keep your personal data only as long as needed:

- Customer accounts and order records: 6 years from end of financial year + current

year to comply with HMRC tax law.

- Guest checkout orders: 6 years for tax purposes.

- Enquiry emails without a purchase: 12 months.

- Marketing consent: Until you unsubscribe or ask us to delete it.

- Technical logs and cookies: Up to 26 months.

After this period, data is securely deleted or anonymised.

9. Data Security

We take security seriously. We have implemented:

- SSL/TLS encryption across www.gshsupplies.co.uk (look for the padlock)

- Secure, encrypted payment processing - we never see or store full card numbers

- Passwords stored in encrypted format

- Limited access to personal data to staff who need it for order fulfilment

- Regular security updates and backups

Despite our best efforts, no online transmission is 100% secure. Please keep your

account password confidential.

10. International Transfers

Our primary data storage is within the UK / EEA.

Some of our payment providers and IT providers (e.g. Google, PayPal) may

transfer data outside the UK/EEA (including to the USA). Where this happens, we

ensure appropriate safeguards are in place, such as UK adequacy regulations,

Standard Contractual Clauses, or the provider being part of the UK-US Data Bridge

framework.

11. Your Legal Rights

Under UK GDPR you have the right to:

- Access: Get a copy of your personal data.

- Correction: Ask us to correct inaccurate data.

- Erasure: Ask us to delete your data (where there is no legal reason to keep it).

- Restriction: Ask us to pause processing.

- Objection: Object to processing based on legitimate interest, and to direct

marketing.

- Portability: Ask us to transfer your data to you or another provider.

- Withdraw Consent: At any time where we rely on consent.

To exercise your rights, email info@gshsupplies.co.uk. We will respond within one

month. You will not have to pay a fee.

You also have the right to lodge a complaint with the Information Commissioner's

Office (ICO):

ICO, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

Website: https://ico.org.uk/ | Helpline: 0303 123 1113

12. Marketing

If you have purchased from us or opted-in on our website, we may send you

occasional emails about new products, restocks and offers relevant to GSH

Supplies.

You can opt-out at any time by:

- Clicking 'unsubscribe' in any marketing email

- Emailing info@gshsupplies.co.uk with subject 'Unsubscribe'

We will not share your email for third-party marketing. We will continue to send

essential transactional emails (order confirmations, delivery updates) even if you

opt-out of marketing.

13. Children's Privacy

Our website and products are not intended for children under 16. We do not

knowingly collect data from children. If you believe a child has provided us data,

please contact us.

14. Third-Party Links

Our website may contain links to other websites (e.g. payment providers, couriers).

We are not responsible for the privacy practices of those sites. Please read their

privacy policies.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes in law or our business. The

latest version will always be posted at https://www.gshsupplies.co.uk/privacy-policy

with the 'Last Updated' date at the top. Significant changes will be notified by email

or a notice on our website.

If you have any questions about this Privacy Policy, please contact:

GSH Supplies

15 Edward Avenue, Morden, Surrey, SM4 6EP

Email: info@gshsupplies.co.uk

Website: https://www.gshsupplies.co.uk

GSH Supplies