Privacy Policy (B2B)
Last updated: 24 September 2025
Allder Investments Limited (trading as “Garden Fencing Supplies”) (“we”, “us”, “our”) is committed to protecting the privacy of individuals whose personal data we process in the course of B2B trading. This Policy explains what we collect, why we collect it, how we use it, and your rights under the UK GDPR and the Data Protection Act 2018, together with the Privacy and Electronic Communications Regulations (PECR).
Scope: This Policy applies to personal data relating to business contacts (e.g., employees of our trade customers and suppliers), website users, credit applicants/guarantors, and individuals interacting with us by phone, email, online forms, or in person (including at our depot in Clacton-On-Sea, CO16 9QH). It does not cover processing by third parties for their own purposes.
1. Who we are (Controller)
Allder Investments Limited (TA Garden Fencing Supplies) is the controller of your personal data.
Registered office: Ewdens Yard, Holland Road, Little Clacton, CO16 9QH
Company number: 11794674
Correspondence address: Ewdens Yard, Holland Road, Little Clacton, CO16 9QH
Email (privacy queries): support@eastcoastfencing.com
Telephone: 0330 133 0896
2. What data we collect
We collect and process only what we need for B2B operations:
Identity & contact data: name, role, employer, work address, email, telephone, account references.
Account & order data: purchase history, delivery instructions, haulage contact details, proofs of delivery, claims correspondence.
Financial & credit data: payment records, credit status/limits, director/guarantor details where provided for credit assessment, results of identity/credit checks from credit reference agencies (CRAs).
Website & device data: IP address, device identifiers, pages viewed, referral source, approximate location, and cookie/analytics data (see §10).
Communications: enquiries, complaints, telephone notes, emails, portal messages.
Depot/operational data: visitor logs, CCTV footage at our premises (for safety and security).
Marketing preferences: opt-out status, engagement metrics (open/click).
We do not intentionally collect special category data. Please do not send such information to us.
3. Sources of data
Directly from you (forms, email, phone, portal orders, trade accounts, in person).
Your employer/colleagues (e.g., nominated contacts).
Public and third-party sources: Companies House, CRAs, logistics/haulage partners, fraud-prevention agencies, trade references.
Automatically via our website and cookies/analytics.
4. How we use your data & lawful bases
We process personal data only where a lawful basis applies:
To provide our products and services (process orders, deliver via hauliers, manage accounts, customer support): Contract and/or Legitimate Interests (efficient B2B operations).
To arrange delivery via third-party hauliers (share contact and address details, booking updates, PODs): Contract / Legitimate Interests.
To operate our website, portals and IT systems (security, availability, troubleshooting, analytics): Legitimate Interests.
To manage credit and payments (credit checks, fraud prevention, debt recovery): Legitimate Interests / Legal Obligation (e.g., financial record-keeping).
To send B2B marketing communications about our products and services to corporate contacts: Legitimate Interests and PECR compliance (opt-out provided on every message). Where consent is required (e.g., certain cookies or sole traders/partnerships), we rely on Consent.
To comply with laws (tax, accounting, health & safety, regulatory requests) and to establish/defend legal claims: Legal Obligation / Legitimate Interests.
CCTV for safety, security and crime prevention: Legitimate Interests.
You may object to processing based on legitimate interests (see §12).
5. Sharing your data
We share personal data with trusted recipients as necessary:
Haulage and logistics partners for delivery and POD management.
Payment service providers, banks and credit reference/fraud-prevention agencies (for payments, credit checks, collections).
IT & cloud providers (hosting, backups, email, CRM, analytics, website).
Professional advisers and insurers (legal, audit, insurance).
Authorities/regulators where required by law or to protect our rights.
Group companies/affiliates (if applicable).
We require recipients to protect your data and use it only for our specified purposes. We do not sell personal data.
6. International transfers
Some providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards, such as UK International Data Transfer Agreements (IDTA), UK Addendum to EU SCCs, or an adequacy decision. Details can be provided on request.
7. Retention – how long we keep data
We retain personal data only as long as needed for the purposes set out above and to meet legal, accounting and reporting requirements. Typical periods (subject to case-by-case review):
Account, orders, PODs, invoices: up to 7 years after the end of the relevant financial year.
Credit applications and checks: up to 6 years after account closure.
Customer service correspondence/claims: up to 6 years from closure.
CCTV: usually 30–90 days, unless required longer for an incident.
Marketing contact data: until you opt out or there has been no engagement for 24 months.
Website logs/analytics: typically 12–26 months, depending on tool settings.
Where statutory limitation or legal claims apply, we may retain relevant data longer.
8. Security
We apply technical and organisational measures appropriate to the risk, including access controls, encryption in transit where appropriate, network security, backups, staff training, supplier due diligence, and least-privilege policies. No system is perfectly secure; we maintain and test controls proportionately.
9. Marketing
We send B2B product updates to corporate subscribers on a legitimate interests basis, always with a clear opt-out. For sole traders/partnerships or where otherwise required by PECR, we obtain consent first. You can unsubscribe at any time via the link in the email or by contacting us (see §1).
10. Cookies & analytics
We use cookies and similar technologies to operate the site, remember preferences, measure performance and improve services.
Strictly necessary cookies: required for core functionality (login, basket, security).
Analytics/performance cookies: help us understand usage and improve the site.
Advertising/marketing cookies (if used): measure campaigns and show relevant content.
Where required, we display a cookie banner and gather your preferences. You can change settings at any time via our Cookie Settings tool and through your browser. For analytics, we use aggregated reports and IP masking where possible. See our Cookie Notice for details of individual cookies and lifespans.
11. Automated decision-making
We do not make decisions producing legal or similarly significant effects based solely on automated processing. If this changes, we will explain the logic, significance, and consequences and provide your related rights.
12. Your rights
Subject to legal limits, you have the following rights:
Access: request a copy of your personal data we hold.
Rectification: correct inaccurate or incomplete data.
Erasure: request deletion in certain circumstances.
Restriction: limit processing in certain cases.
Portability: receive data you provided to us in a machine-readable format, where processing is based on consent or contract and carried out by automated means.
Object: to processing based on legitimate interests, including direct marketing (we will stop marketing immediately on objection).
Withdraw consent: where processing relies on consent (e.g., non-essential cookies/marketing).
To exercise your rights, contact us using the details in §1. We may need to verify your identity. We aim to respond within one month (extendable by two months for complex requests).
13. Complaints
If you have concerns, please contact us first (see §1). You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK. See the ICO website for how to do this.
14. Children
Our services and website are intended for business use and not for children. We do not knowingly collect personal data from children.
15. Third-party links
Our website may contain links to third-party sites. Those sites have their own privacy notices. We are not responsible for their content or privacy practices.
16. Changes to this Policy
We may update this Policy periodically. The latest version will be posted on our website with the effective date shown at the top. Material changes will be highlighted reasonably.
17. Delivery & depots (operational notice)
For transparency: we deliver throughout England & Wales using third-party hauliers operating articulated lorries; collections are available by prior arrangement from our Clacton-On-Sea (CO16 9QH) depot. Personal data necessary to fulfil deliveries (contact names, numbers, addresses, instructions) will be shared with the haulier strictly for that purpose.