Privacy Policy

Effective Date: 31 July 2025

Introduction

This Privacy Policy outlines how Kriloha Ltd (“we”, “us”, “our”) collects and processes personal data from representatives of businesses using our website www.brassandmetalparts.com (“Website”). We are committed to protecting personal data in accordance with the UK GDPR, Data Protection Act 2018, and PECR.

Who We Are

Kriloha Ltd (www.brassandmetalparts.com)

3 Stanhope Gate, Yorktown Business Park Camberley GU15 3DW
0044 7832 353304
info@brassandmetalparts.com

Personal Data We Collect

We collect limited personal data in the context of B2B interactions:

Names and job titles
Business email addresses and phone numbers
Business addresses
Enquiry and purchase history
Website usage data (IP address, cookies)

Lawful Basis for Processing

Purpose of Processing

Responding to enquiries

Managing B2B contracts

Email marketing to corporate addresses

Order fulfilment and communication

Analytics and website security

We do not collect or process any special category data.

Lawful Basis

Legitimate interests

Contractual necessity

Legitimate interests (PECR-compliant)

Contractual necessity

Legitimate interests

Data Sharing

We may share personal data with:

Delivery partners and logistics providers
IT and cloud service providers
Payment processors (e.g. invoice payment services)
Legal authorities, if required

We do not sell or rent your data.

Retention

We retain data for as long as necessary for legitimate business purposes, contract performance, or legal obligations (usually 6–7 years).

International Transfers

If personal data is transferred outside the UK, we ensure safeguards such as adequacy decisions or Standard Contractual Clauses (SCCs).

Your Rights

Business representatives have the right to:

Access and correct their data
Object to direct marketing
Request erasure or restriction of processing
Lodge a complaint with the ICO (www.ico.org.uk)

To exercise rights, email: info@brassandmetalparts.com.