Privacy policy
Privacy Notice
Customers, prospective customers, suppliers, website users and business contacts
|
Effective date |
15 September 2026 |
Document owner |
Orlando Dupuy-Urisari / Data Protection Lead |
|
Review date |
September 2027 |
Version |
2.0 |
1. Who we are
ORGATEX UK Limited (company number 07670092) supplies visual management and workplace organisation products and services. We are the controller of the personal data described in this notice. Registered office: 195a Kenton Road, Harrow, Middlesex, HA3 0HD. Data Protection Lead: Orlando Dupuy-Urisari. Contact: info@orgatexuk.co.uk or +44 191 386 1240.
2. Information we collect
· Name, job title, employer and business contact details.
· Enquiries, quotations, orders, delivery/site information, installation contacts and business correspondence.
· Customer and supplier account information, purchase history, invoices and payment-status records.
· Website account, checkout and enquiry information processed through Shopify.
· Marketing preferences, unsubscribe/suppression records and engagement information.
· Technical website information, including analytics and advertising identifiers where cookies or similar technologies are used with the required consent.
3. Why we use it and lawful bases
|
Purpose |
Typical lawful basis |
Examples |
|
Responding to enquiries and quotations |
Steps before contract / legitimate interests |
Product, price, delivery and service enquiries. |
|
Supplying products/services |
Contract / legitimate interests |
Orders, delivery, installation, account management and support. |
|
Finance and compliance |
Legal obligation / legitimate interests |
Invoices, tax, accounting, fraud prevention and debt recovery. |
|
Supplier/business relationships |
Contract / legitimate interests |
Purchasing, supplier management and correspondence. |
|
B2B marketing |
Legitimate interests where appropriate; consent where required; PECR also applies |
Relevant product/service updates, newsletters and live marketing calls, subject to opt-out/TPS/CTPS rules. |
|
Website analytics/advertising |
Consent for non-essential storage/access technologies where required |
Google Analytics and Google Ads. |
|
Corporate transaction |
Legitimate interests / legal obligation where relevant |
Due diligence, sale, restructuring and integration. |
4. Who we share information with
Where necessary, information may be shared with Microsoft 365, Sage, Shopify, Mailchimp, Google, Worldpay, Network Installations Ltd, Velstar, cloud-backup providers, couriers/installers, accountants and professional advisers. We also use Clarion Chase for recruitment. Processor and recipient roles vary depending on the service. Appropriate contractual or other data-protection arrangements are maintained where required.
5. Payments
Online payments are processed through Shopify checkout. Where a customer chooses to pay by card over the telephone, Worldpay is used. Orgatex does not retain full card details after the payment is processed.
6. Orgatex group and corporate transactions
Information may be shared with Orgatex GmbH where necessary for group support, integration and legitimate business purposes. In connection with a sale, investment, merger or restructuring, relevant information may be disclosed to purchasers and professional advisers, including Deloitte and legal advisers, subject to confidentiality, access controls and data minimisation.
7. International transfers
Some service providers may process personal data outside the UK. Where this occurs, Orgatex relies on an applicable lawful transfer mechanism, such as UK adequacy regulations or contractual safeguards. Germany and other EEA destinations may be covered by UK adequacy regulations.
8. Retention
We keep personal data only for as long as needed for the purpose collected and to meet legal, tax, accounting and contractual requirements. Core customer/supplier transaction records are normally retained for six years after the relevant financial year or relationship where appropriate. Prospect/enquiry records with no transaction are normally reviewed after two years. Marketing contacts are periodically reviewed; minimal suppression records may be retained longer to ensure an opt-out is respected. Historic data retained for longer periods is being reviewed under Orgatex's retention-remediation programme.
9. Direct marketing
Orgatex sends B2B marketing to corporate business contacts and makes live marketing calls. You may object to direct marketing at any time. Email marketing includes an unsubscribe option. Orgatex maintains suppression/do-not-contact records and screens live marketing call lists against the TPS and CTPS before calling. If we are unsure whether a contact is a corporate subscriber, we apply the more protective approach.
10. Cookies and website tracking
The website uses Shopify functionality and may use Google Analytics and Google Ads. Non-essential cookies or similar technologies are used only in accordance with the cookie choices provided to the user. See the separate Cookie Policy for the current cookie list and preference controls.
11. Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict, object to processing or receive certain information in portable form. Where processing relies on consent, you may withdraw it at any time. Contact info@orgatexuk.co.uk. You may also complain to the Information Commissioner's Office at ico.org.uk.
12. Changes to this notice
We may update this notice where our processing or legal obligations change. The current version should be published on the Orgatex UK website and made available on request.