Privacy Policy
Xtreme Plasma B2B Privacy Policy
Introduction
Xtreme Plasma ("we", "our", or "us") is committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information We Collect
We may collect and process the following categories of personal data when you interact with our B2B website, place an order, or apply for a credit account:
- Identity & Contact Data: Name, business address, telephone number, and email address.
- Transaction Data: Details about products and services you have purchased from us.
- Financial & Credit Data: Bank details, credit history, and asset information when applying for credit terms.
- Technical Data: IP address, browser type, device details, and cookie data collected automatically when you visit our website.
Lawful Bases and Purposes for Processing
We only process your personal data where we have a lawful basis under UK GDPR. We use your data for the following purposes:
- Performance of a Contract: To process orders, deliver goods, manage your account, and provide customer support.
- Legitimate Interests: To conduct business administration, prevent fraud, perform credit scoring, profile purchasing preferences, and improve our services, provided your rights do not override these interests.
- Legal Obligation: To comply with anti-money laundering regulations, tax laws, and legal requests from authorities.
Credit Reference Agencies
If you apply for credit, we may search the files of credit reference agencies who will record searches on your file. Details of how you conduct your account may be disclosed to these agencies and used by other credit grantors for credit decisions, fraud prevention, money laundering prevention, and tracing debtors.
Sharing Your Information
We will not share your personal details with external organisations except under the following circumstances:
- Supply chain partners, logistics providers, and couriers necessary to deliver your goods.
- Credit reference agencies and fraud prevention agencies.
- Professional service providers, IT vendors, and software agents supporting our business operations under strict data processing agreements.
Data Security and International Transfers
We implement robust technical and organisational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. If we transfer your data outside the UK or European Economic Area, we ensure appropriate safeguards are in place to protect it.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. When data is no longer needed, it is securely deleted or anonymised.
Your Legal Rights
Under UK data protection laws, you have specific rights regarding your personal data, including:
- Right of Access: You have the right to request a free copy of the information we hold about you.
- Right to Rectification: You can ask us to correct inaccurate or incomplete data.
- Right to Erasure: You can request the deletion of your data in certain circumstances.
- Right to Restrict Processing: You can ask us to suspend the processing of your personal data.
- Right to Object: You have the absolute right to object to direct marketing at any time.
Marketing and Opting Out
We may contact you by mail, telephone, SMS, or email regarding goods, services, or promotions that may interest you. You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.
Complaints and Contact Us
If you have any questions about this privacy policy, wish to exercise your rights, or want to make a complaint, please contact us using our website details. You also have the right to lodge a complaint at any time with the Information Commissioner's Office (ICO), the UK regulator for data protection issues.
Display prices in:GBP
