Privacy policy

Privacy Notice

Customers, prospective customers, suppliers, website users and business contacts

 

Effective date

15 September 2026

Document owner

Orlando Dupuy-Urisari / Data Protection Lead

Review date

September 2027

Version

2.0

 

1. Who we are

ORGATEX UK Limited (company number 07670092) supplies visual management and workplace organisation products and services. We are the controller of the personal data described in this notice. Registered office: 195a Kenton Road, Harrow, Middlesex, HA3 0HD. Data Protection Lead: Orlando Dupuy-Urisari. Contact: info@orgatexuk.co.uk or +44 191 386 1240.

2. Information we collect

·       Name, job title, employer and business contact details.

·       Enquiries, quotations, orders, delivery/site information, installation contacts and business correspondence.

·       Customer and supplier account information, purchase history, invoices and payment-status records.

·       Website account, checkout and enquiry information processed through Shopify.

·       Marketing preferences, unsubscribe/suppression records and engagement information.

·       Technical website information, including analytics and advertising identifiers where cookies or similar technologies are used with the required consent.

3. Why we use it and lawful bases

Purpose

Typical lawful basis

Examples

Responding to enquiries and quotations

Steps before contract / legitimate interests

Product, price, delivery and service enquiries.

Supplying products/services

Contract / legitimate interests

Orders, delivery, installation, account management and support.

Finance and compliance

Legal obligation / legitimate interests

Invoices, tax, accounting, fraud prevention and debt recovery.

Supplier/business relationships

Contract / legitimate interests

Purchasing, supplier management and correspondence.

B2B marketing

Legitimate interests where appropriate; consent where required; PECR also applies

Relevant product/service updates, newsletters and live marketing calls, subject to opt-out/TPS/CTPS rules.

Website analytics/advertising

Consent for non-essential storage/access technologies where required

Google Analytics and Google Ads.

Corporate transaction

Legitimate interests / legal obligation where relevant

Due diligence, sale, restructuring and integration.

4. Who we share information with

Where necessary, information may be shared with Microsoft 365, Sage, Shopify, Mailchimp, Google, Worldpay, Network Installations Ltd, Velstar, cloud-backup providers, couriers/installers, accountants and professional advisers. We also use Clarion Chase for recruitment. Processor and recipient roles vary depending on the service. Appropriate contractual or other data-protection arrangements are maintained where required.

5. Payments

Online payments are processed through Shopify checkout. Where a customer chooses to pay by card over the telephone, Worldpay is used. Orgatex does not retain full card details after the payment is processed.

6. Orgatex group and corporate transactions

Information may be shared with Orgatex GmbH where necessary for group support, integration and legitimate business purposes. In connection with a sale, investment, merger or restructuring, relevant information may be disclosed to purchasers and professional advisers, including Deloitte and legal advisers, subject to confidentiality, access controls and data minimisation.

7. International transfers

Some service providers may process personal data outside the UK. Where this occurs, Orgatex relies on an applicable lawful transfer mechanism, such as UK adequacy regulations or contractual safeguards. Germany and other EEA destinations may be covered by UK adequacy regulations.

8. Retention

We keep personal data only for as long as needed for the purpose collected and to meet legal, tax, accounting and contractual requirements. Core customer/supplier transaction records are normally retained for six years after the relevant financial year or relationship where appropriate. Prospect/enquiry records with no transaction are normally reviewed after two years. Marketing contacts are periodically reviewed; minimal suppression records may be retained longer to ensure an opt-out is respected. Historic data retained for longer periods is being reviewed under Orgatex's retention-remediation programme.

9. Direct marketing

Orgatex sends B2B marketing to corporate business contacts and makes live marketing calls. You may object to direct marketing at any time. Email marketing includes an unsubscribe option. Orgatex maintains suppression/do-not-contact records and screens live marketing call lists against the TPS and CTPS before calling. If we are unsure whether a contact is a corporate subscriber, we apply the more protective approach.

10. Cookies and website tracking

The website uses Shopify functionality and may use Google Analytics and Google Ads. Non-essential cookies or similar technologies are used only in accordance with the cookie choices provided to the user. See the separate Cookie Policy for the current cookie list and preference controls.

11. Your rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict, object to processing or receive certain information in portable form. Where processing relies on consent, you may withdraw it at any time. Contact info@orgatexuk.co.uk. You may also complain to the Information Commissioner's Office at ico.org.uk.

12. Changes to this notice

We may update this notice where our processing or legal obligations change. The current version should be published on the Orgatex UK website and made available on request.