Privacy policy

Who we are

This website is run by Masted Limited, a company registered in England and Wales under company number 15808609, whose registered office is at 51a Station Road, London, E12 5BP ("Masted", "we", "us"). We are the controller of the personal data described in this policy.

For any question about this policy or your data, email enquires@masted.co.uk or write to us at our registered office.

Data we collect

We collect only what we need to deal with you:

• Enquiries. When you use our enquiry form or email us: your name, business name, email address, phone number if given, and what you write to us.
• Trade accounts. If you open an account: business contact details, delivery and invoice addresses, order history, and the information needed for payment and credit checks.
• Technical data. When you visit the site, our hosting provider records standard server logs, including your IP address, browser type and the pages requested. We use these to keep the site secure and working.

We do not use analytics or advertising tracking on this website.

How we use it and our lawful basis

• To reply to enquiries and prepare quotes: our legitimate interests in responding to people who contact us, and steps taken at your request before entering into a contract.
• To supply goods and services and manage your account: performance of a contract.
• To keep accounting and tax records: legal obligation.
• To protect the website from misuse: our legitimate interests in running a secure service.
• To send occasional trade updates to business customers, where you have not opted out: our legitimate interests. Every such email includes a way to stop them.

Who we share it with

We do not sell personal data. We share it only with service providers who help us run the business, under contracts that require them to protect it:

• Vercel Inc., which hosts this website.
• Our email delivery provider, which carries messages sent through the enquiry form.
• Carriers and pallet networks, who receive delivery names, addresses and phone numbers so they can deliver your order.
• Our accountants, bank, payment and credit-reference providers, and professional advisers, where needed.
• Authorities such as HMRC where the law requires it.

When you load a page, your browser also fetches fonts from Google Fonts and photographs from Unsplash's image service. Those providers receive your IP address in order to send the files.

International transfers

Some of our providers process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations (including the UK extension to the EU-US Data Privacy Framework) or the International Data Transfer Addendum to the EU standard contractual clauses.

How long we keep it

• Enquiries that do not lead to an account: up to 12 months from our last contact.
• Customer, order and invoice records: six years after the end of the financial year they relate to, as required for tax and company law.
• Server logs: kept by our hosting provider for a short period in line with its own retention settings.

Your rights

You have the right to ask for a copy of your personal data, to have it corrected, to have it deleted, to restrict or object to how we use it, and to have it transferred to you or another organisation. Some rights depend on the lawful basis we rely on.

To use any of these rights, email enquires@masted.co.uk. We will respond within one month. There is normally no charge.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Security

The website is served only over encrypted connections. Access to customer records is limited to people who need it for their work.

Changes to this policy

We will update this page if the way we use personal data changes. The date at the top shows when it was last revised.