Privacy Policy

Stead-Fast Rock UK Limited (company no. 13817977) is the data controller for personal information collected through this website. We are a UK supplier of printers, ink and toner cartridges, printing paper, and office accessories. Contact: steadfastrockuk@gmail.com, +44 7570 774842.

We collect personal information through the following means:

• Website forms — when you place an order, submit an enquiry, or request a quote.
• Order placement — name, shipping address, email address, phone number, and purchase history.
• Phone — if you call us directly, we may note details needed to handle your enquiry.

We do not run customer accounts and we do not buy, sell, or rent personal data to third parties.

• To process and fulfil your orders and handle payments.
• To contact you about your order or enquiry.
• To notify you of relevant changes to our service.
• To send you communications you have specifically requested, or to recommend similar products based on your purchase history (see Marketing below).
• To personalise the service where you have given permission.

We process order and payment data on the basis of contract — it is necessary to fulfil what you have purchased. We handle enquiries on the basis of legitimate interests. Where we recommend related products to existing customers, we rely on legitimate interests and give you a clear right to object at any time (see Your rights below).

If you are an existing customer, we may occasionally contact you about products similar to those you have bought. You can object to this at any point — before completing an order, by using the unsubscribe link in any marketing message, or by emailing steadfastrockuk@gmail.com. We will never use your data for unrelated third-party marketing.

We may analyse purchase history to identify which products may be relevant to you. This is used only to make communications more useful and is never used to make automated decisions that affect you in a significant way. You can object to this at any time by contacting steadfastrockuk@gmail.com.

We share data only with service providers who need it to operate our business, and only under confidentiality obligations:

• Stripe — payment processing. We never see or store card details.
• Supabase — order and customer database.
• Vercel — website hosting.
• Resend — transactional email (order confirmations).

We will never sell or rent your information to third parties.

We take reasonable technical measures to protect your data, including SSL encryption, firewall protection, and antivirus and malware controls. Suspicious traffic is monitored and blocked. No method of transmission over the internet is 100% secure, but we keep our security practices up to date.

Order records are kept for 6 years to meet UK tax and accounting requirements. Enquiry data is retained only as long as needed to handle your request. Marketing data is retained until you withdraw consent or until a prolonged period of inactivity makes it no longer relevant.

We use no advertising or cross-site tracking cookies. See the Cookies page for the full list of what the site stores.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data where we have no legal obligation to retain it.
• Object to or restrict certain processing, including marketing and profiling.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email steadfastrockuk@gmail.com. We will respond within one month.

If you are unhappy with how we have handled your data, please contact us first at steadfastrockuk@gmail.comand we will do our best to resolve it. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.