Website privacy notice

Privacy Policy

This notice explains how Trade and Transport Ltd handles personal information when you use this website, submit an enquiry or otherwise contact us about our services.

Last updated

1. Who we are

Trade and Transport Ltd is the controller of the personal information described in this notice when we decide how and why it is used.

You can contact us about privacy at info@tradeandtransport.uk or by writing to Trade and Transport Ltd, Yard 1, Sidney Street, Bolton, BL3 6BG, United Kingdom.

2. Information we collect

We collect information you give us in a website enquiry, quote request, email or telephone conversation. We also process limited technical information needed to deliver, protect and administer the website.

  • Your name, company, email address and telephone number.
  • The service you are interested in, collection and delivery postcodes, preferred date or time, and the contents of your message.
  • Records connected with an enquiry, including its source page, submission time, handling status, administrative notes and any email-notification status.
  • Your website consent choices. The site stores those choices in your browser's local storage so it can respect them on later visits.
  • A one-way hashed, IP-derived key and request timing information used for persistent form rate limiting. The source IP address is not stored in that rate-limit record.
  • For authorised website administrators, the sign-in email address, password-verification hash, rate-limit records and short-lived session information needed to protect the content manager. Plaintext administrator passwords are not stored.
  • Connection, device and security information that Cloudflare may process when providing the website's hosting and protection infrastructure.

3. How we use information

We use personal information to receive and respond to enquiries, discuss requirements and quotations, arrange an agreed service, keep appropriate business records, operate and secure the website, prevent abusive submissions, comply with legal obligations, and establish or defend legal claims.

The acknowledgement beside an enquiry form allows us to use the submitted information to answer that enquiry. It is not a sign-up for unrelated marketing. We do not currently use marketing tracking on this website.

4. Lawful bases

The lawful basis depends on why we are using the information. We use the following bases where they apply.

  • Steps at your request before entering a contract, and performance of a contract, when we discuss or provide a requested service.
  • Our legitimate interests in responding to business communications, managing enquiries and records, protecting the website, preventing abuse and running the business efficiently, provided those interests are not overridden by your rights.
  • Compliance with a legal obligation, including where records or disclosures are required by law.
  • Consent for optional analytics storage or access and the related analytics processing. You can withdraw that consent at any time through Cookie settings.

5. Where information is stored and who receives it

Website enquiries and their handling records are stored in Cloudflare D1. Website and CMS content is also stored in Cloudflare D1, while uploaded website media is stored in Cloudflare R2. These services form part of the Cloudflare-hosted website infrastructure.

If enquiry email notifications are configured, Resend receives the contact details and enquiry content needed to deliver a notification to our team. If Resend is not configured, the enquiry is still stored in D1 for authorised staff, but that notification is not sent.

If Google Analytics is configured and you grant analytics consent, Google receives website usage information for analytics. Analytics does not load before that consent is granted, and no marketing tracking is currently used.

We may also disclose relevant information to professional advisers, suppliers helping us respond to or fulfil a request, or public authorities where disclosure is required by law. We do not sell personal information.

6. International transfers

Cloudflare and, when enabled, Resend or Google may process information in countries outside the United Kingdom. Where this is a restricted transfer, we require a lawful transfer mechanism, such as an applicable UK adequacy regulation or appropriate contractual safeguards. You can contact us for information about the safeguards relevant to your personal information.

7. How long information is kept

We keep enquiry records only for as long as reasonably needed to answer the enquiry, manage any resulting business relationship, maintain necessary business and accounting records, meet legal obligations, resolve disputes, and establish or defend claims. The appropriate period depends on the nature of the enquiry and whether it leads to an agreed service. Information is then deleted or anonymised when it is no longer required.

Enquiry rate-limit records cease affecting submissions after ten minutes, while administrator sign-in limits expire after fifteen minutes. Administrator sessions expire after no more than eight hours and also end after thirty minutes of inactivity. Expired records are removed during later activity. Consent choices remain in your browser's local storage until you change them or clear that browser storage. If analytics is enabled with your consent, Google retains analytics data according to the configured analytics retention settings.

8. Security

We use appropriate technical and organisational measures to protect personal information, including controlled administrative access, hosted storage and abuse-prevention controls. No internet service is completely secure, so please do not include special category, financial or other highly sensitive information in a general enquiry unless we have asked you to use an appropriate channel.

9. Your data protection rights

Depending on the circumstances and the lawful basis, you may have rights to access your personal information, have inaccurate information corrected, request deletion or restriction, receive certain information in a portable format, or object to particular processing. Where we rely on consent, you may withdraw it at any time without affecting processing that was lawful before withdrawal.

To exercise a right, contact info@tradeandtransport.uk. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk. We would appreciate the opportunity to address your concern first.

10. Automated decisions

We do not use information collected through this website to make solely automated decisions that produce legal or similarly significant effects. Automated rate limiting may temporarily reject repeated form submissions to protect the service from abuse.

11. Cookies and similar technologies

The website uses local storage to remember consent choices. The Cloudflare hosting and security layer may also set a strictly necessary __cf_bm cookie for bot mitigation. Authorised administrators receive short-lived, strictly necessary security cookies when using the private content manager. Google Analytics loads only if it has been configured and you grant analytics consent. No marketing tracking is currently used. See the Cookie Policy and use the Cookie settings control to review or change your choices.

12. Changes to this notice

We may update this notice when the website, our suppliers or our handling of personal information changes. The date above shows when this version was last updated. Material changes will be explained on this page or through another appropriate notice.

Email info@tradeandtransport.uk or write to Trade and Transport Ltd, Yard 1, Sidney Street, Bolton, BL3 6BG, United Kingdom.