Verplas Limited – Website Privacy Notice
1. Types of Personal Data We Collect
We collect and process the following categories of information when you interact with our website:
- Identity & Contact Data: First name, last name, business email address, job title, and phone number supplied via our Verplas Contact Page or technical request portals. [1, 2]
- Technical & Usage Data: Internet Protocol (IP) address, browser type, time-zone settings, and operating system gathered automatically during your visit.
- Cookie & Marketing Data: Your preferences regarding analytical cookies, tracking pixels, and subscription choices for marketing communications. [1, 2]
Processing Activity
Data Category Used
UK GDPR Lawful Basis
Responding to commercial sales, orders, or support inquiries
Identity & Contact Data
Legitimate Interest (necessary for business operations)
Providing brochure, CAD, or regulatory document downloads
Identity & Contact Data
Performance of a Contract (to deliver requested assets)
Distributing opt-in marketing materials or product alerts
Identity & Contact Data
Consent (freely given, specific, and revocable)
Optimising website security, layout, and service analytics
Technical & Usage Data
Legitimate Interest (to secure and monitor our platform)
3. International Data Transfers and Third Parties
Because Verplas Limited is part of the Sweden-based Indutrade AB Group, personal data may occasionally be stored or accessed across European Union systems. [1]
- Protection Standards: Any transfers of data outside the UK to the EEA are legally protected under the UK Government’s Adequacy Regulations. [1]
- Service Providers: Data is shared with web hosts, analytics platforms, and enterprise CRM solutions solely under strict Data Processing Agreements (DPAs). We do not sell or lease user data to third-party marketing brokers. [1, 2, 3]
4. Data Minimisation and Retention
We enforce strict data minimisation routines. Personal data from standard inquiries is retained only as long as necessary to fulfill the operational business context or satisfy regulatory corporate auditing laws. Technical web logs are automatically overwritten or anonymised after a standard 12-month period. [1, 2]
5. Your Legal Rights Under UK Law
Under the UK GDPR, you maintain comprehensive data rights which you can exercise at no cost: [1, 2, 3]
- Right of Access (Subject Access Request): Request a complete copy of all your personal records within 30 calendar days.
- Right to Rectification: Mandate immediate corrections to any inaccurate or outdated information.
- Right to Erasure (‘Right to be Forgotten’): Request the absolute deletion of your personal records from all corporate infrastructure.
- Right to Restrict or Object: Oppose data processing based on legitimate interests, or completely halt direct marketing profiling at any time.
- Right to Data Portability: Request data transmission to another controller in a structured digital format. [1, 2, 3, 4, 5]
6. Contact and Regulatory Complaints
To exercise any legal rights, or to submit questions about this policy, please contact our data compliance coordinator directly:
- Email: sales@verplas.co.uk
- Postal Address: Data Compliance, Verplas Limited, Unit 7 Verwood Industrial Estate, Dorset, BH31 6HA [1, 2]
If you remain dissatisfied with our response, you retain the legal right to lodge a formal complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection. [1, 2]
