Privacy Policy

1. Introduction

Oak & Barrel Supplies Ltd (“we”, “us”, “our”) is committed to protecting the personal data of individuals who interact with our website and trade enquiry process. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website at oak-and-barrel.com or contact us by email or telephone.

Oak & Barrel Supplies Ltd is a company registered in England and Wales (Company number: 16761925), with a registered address at 13 Grilse Close, Enfield, London, N9 0UT.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect

We may collect and process the following categories of personal data:

• Contact and identity information: name, email address, telephone number, and company or organisation name provided when submitting a trade enquiry.
• Business and trade information: venue type, business type, product category, estimated quantity, timescale, delivery location, and repeat supply requirements submitted through the trade enquiry form.
• Communications: the content of any email or telephone communication you send to us or have with us.
• Technical data: standard website access logs and cookies necessary for the operation of the website (see Cookie Policy).

We do not collect sensitive personal data (as defined under UK GDPR) in the normal course of our trade enquiry process.

3. How we use your data

We use your personal data for the following purposes:

• To respond to and manage trade enquiries submitted through our website or by email or telephone.
• To discuss, shape, and progress product sourcing, procurement, and supply enquiries relevant to your business requirements.
• To maintain records of procurement, sourcing, and supply activity where relevant to the enquiry and supply process.
• To communicate with you about your enquiry, including lead times, product availability, specifications, and fulfilment arrangements.
• To comply with any applicable legal obligations.

4. Lawful basis for processing

We process personal data on the following lawful bases under UK GDPR:

• Legitimate interests: processing is necessary for our legitimate interests in managing trade enquiries and commercial procurement activity, where this does not override your rights.
• Consent: where you have provided explicit consent through the trade enquiry form, for example by checking the consent checkbox before submitting your enquiry.
• Legal obligation: where processing is required to comply with a legal obligation applicable to us.
• Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

5. Data retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. In general terms:

• Trade enquiry data is retained for a period appropriate to the enquiry lifecycle and any subsequent supply relationship.
• Where an enquiry does not progress to a supply arrangement, data is retained for a reasonable period and then securely deleted.
• Procurement and supply records may be retained for longer periods where required for legal, financial, or operational purposes.

6. Data sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data in the following limited circumstances:

• With suppliers and fulfilment partners where necessary to progress a procurement or supply enquiry you have submitted.
• With professional advisers (solicitors, accountants) where necessary for our business operations.
• Where required by law, regulation, or court order.

7. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• The right to access the personal data we hold about you.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure of your data (subject to certain conditions).
• The right to restrict processing of your data.
• The right to data portability (where applicable).
• The right to object to processing based on legitimate interests.
• The right to withdraw consent at any time (where processing is based on consent).
• The right to lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, please contact us at [email protected].

8. Cookies

Our website uses cookies necessary for its operation. We do not currently use analytics or advertising cookies. Please see our Cookie Policy for further information.

9. Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. All data submitted through our website is transmitted securely.

10. Contact us

If you have any questions about this Privacy Policy, or wish to exercise your data protection rights, please contact us:

11. Information Commissioner's Office

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.