Last updated: 22 Oct 2026
1. Who we are
This website is operated by SCREWFIX DIRECT LIMITED Company number 03006378 (company number 14541300, registered in England and Wales), whose registered office is at Trade House Mead Avenue, Houndstone Business Park, Yeovil, Somerset, BA22 8RT ("Anulartarjeta SCREWFIX", "we", "us", "our"). We are the controller of the personal data described in this policy and are registered with the Information Commissioner's Office (ICO) under registration number ZA024201.
If you have any questions about this policy or how we handle your data, contact us:
- Email: info@anulartarjeta.com
- Telephone: 44 333 011 2112 (Mon-Fri 8am-5.30pm, Sat 9am-1pm)
- Post: SCREWFIX DIRECT LIMITED Company number 03006378, Trade House Mead Avenue, Houndstone Business Park, Yeovil, Somerset, BA22 8RT
- Online: our contact form
2. The data we collect
We collect only the information we need to sell, deliver and support our products:
| Category | Examples | Source |
|---|---|---|
| Identity & contact | Name, business name, billing and delivery address, email, telephone number | You, via checkout or our forms |
| Transaction | Products bought, order value, order reference, delivery details | You and our payment provider |
| Payment | Payment status, card type and last four digits only. We never receive or store your full card number. | Stripe |
| Communications | Messages, enquiries, warranty claims, call notes, marketing preferences | You |
| Trade account | Company number, VAT number, trading history, credit reference results | You and credit reference agencies |
| Technical | IP address, browser type, device, pages viewed (only where you consent to analytics) | Your device |
We do not knowingly collect data from children under 13, and we do not collect special category data.
3. How and why we use your data
UK GDPR requires us to have a lawful basis for each use of your data:
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order, handling returns, refunds and warranty claims | Performance of a contract |
| Keeping accounting and VAT records | Legal obligation |
| Answering enquiries and providing customer support | Legitimate interests (responding to customers) or contract |
| Assessing trade account and credit applications | Legitimate interests / steps prior to a contract |
| Preventing fraud and keeping our website secure | Legitimate interests and legal obligation |
| Sending marketing emails | Consent, or for existing customers the "soft opt-in" under PECR. You can unsubscribe at any time. |
| Analytics and advertising cookies | Consent |
| Product safety notices and recalls | Legal obligation and legitimate interests |
4. Who we share it with
We never sell your personal data. We share it only with trusted service providers who act on our instructions under written contracts:
- Stripe Payments Europe Ltd / Stripe Payments UK Ltd — payment processing and fraud prevention. Stripe acts as an independent controller for some purposes; see Stripe's privacy policy.
- Couriers and pallet networks — to deliver your order (name, address, phone, email).
- Website hosting, email and IT providers — to run this website and our systems.
- Accountants, auditors and professional advisers.
- Credit reference agencies — for trade credit applications only.
- Authorities — HMRC, the police or regulators where we are required by law.
5. International transfers
Some of our providers process data outside the UK. Where this happens we make sure an adequate level of protection applies, for example a UK adequacy regulation, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
- Order, invoice and accounting records: 6 years from the end of the financial year (HMRC requirement).
- Warranty and product safety records: for the warranty period plus 6 years.
- Enquiries that do not lead to an order: 2 years.
- Marketing preferences: until you unsubscribe, then a suppression record so we do not contact you again.
- Declined trade applications: 12 months.
7. Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to our processing, including any direct marketing (absolute right);
- data portability;
- withdraw consent at any time where we rely on consent;
- not be subject to decisions based solely on automated processing.
To exercise any right, contact us using the details above. We will respond within one month and there is normally no charge.
8. Security
Our website is served over HTTPS. Card payments are handled entirely on Stripe's PCI DSS Level 1 certified platform. Access to customer data is limited to staff who need it, protected by strong passwords and multi-factor authentication.
9. Cookies
We use strictly necessary storage to make the website work and, only with your consent, optional analytics and marketing cookies. See our cookie policy for details and to change your choices.
10. Complaints
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
11. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it was last changed. Significant changes will be highlighted on our website or emailed to you.