Verplas Limited – Website Privacy Notice

Last Updated: July 2026
Data Controller: Verplas Limited (UK Company Registration: 02033296), Unit 7 Verwood Industrial Estate, Blackhill, Verwood, Dorset, BH31 6HA. Supervisory
Registration: Registered as a data controller with the UK Information Commissioner’s Office (ICO). [1, 2, 3]

1. Types of Personal Data We Collect

We collect and process the following categories of information when you interact with our website:

  • Identity & Contact Data: First name, last name, business email address, job title, and phone number supplied via our Verplas Contact Page or technical request portals. [1, 2]
  • Technical & Usage Data: Internet Protocol (IP) address, browser type, time-zone settings, and operating system gathered automatically during your visit.
  • Cookie & Marketing Data: Your preferences regarding analytical cookies, tracking pixels, and subscription choices for marketing communications. [1, 2]

2. Purposes and Lawful Bases for Processing

In accordance with Article 6 of the UK GDPR, we process your information under the following defined legal grounds: [1, 2]

Processing Activity

Data Category Used

UK GDPR Lawful Basis

Responding to commercial sales, orders, or support inquiries

Identity & Contact Data

Legitimate Interest (necessary for business operations)

Providing brochure, CAD, or regulatory document downloads

Identity & Contact Data

Performance of a Contract (to deliver requested assets)

Distributing opt-in marketing materials or product alerts

Identity & Contact Data

Consent (freely given, specific, and revocable)

Optimising website security, layout, and service analytics

Technical & Usage Data

Legitimate Interest (to secure and monitor our platform)

3. International Data Transfers and Third Parties

Because Verplas Limited is part of the Sweden-based Indutrade AB Group, personal data may occasionally be stored or accessed across European Union systems. [1]

  • Protection Standards: Any transfers of data outside the UK to the EEA are legally protected under the UK Government’s Adequacy Regulations. [1]
  • Service Providers: Data is shared with web hosts, analytics platforms, and enterprise CRM solutions solely under strict Data Processing Agreements (DPAs). We do not sell or lease user data to third-party marketing brokers. [1, 2, 3]

4. Data Minimisation and Retention

We enforce strict data minimisation routines. Personal data from standard inquiries is retained only as long as necessary to fulfill the operational business context or satisfy regulatory corporate auditing laws. Technical web logs are automatically overwritten or anonymised after a standard 12-month period. [1, 2]

5. Your Legal Rights Under UK Law

Under the UK GDPR, you maintain comprehensive data rights which you can exercise at no cost: [1, 2, 3]

  • Right of Access (Subject Access Request): Request a complete copy of all your personal records within 30 calendar days.
  • Right to Rectification: Mandate immediate corrections to any inaccurate or outdated information.
  • Right to Erasure (‘Right to be Forgotten’): Request the absolute deletion of your personal records from all corporate infrastructure.
  • Right to Restrict or Object: Oppose data processing based on legitimate interests, or completely halt direct marketing profiling at any time.
  • Right to Data Portability: Request data transmission to another controller in a structured digital format. [1, 2, 3, 4, 5]

6. Contact and Regulatory Complaints

To exercise any legal rights, or to submit questions about this policy, please contact our data compliance coordinator directly:

  • Email: sales@verplas.co.uk
  • Postal Address: Data Compliance, Verplas Limited, Unit 7 Verwood Industrial Estate, Dorset, BH31 6HA [1, 2]

If you remain dissatisfied with our response, you retain the legal right to lodge a formal complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection. [1, 2]