Metro Fixings — Data Privacy Notice

Last Updated: June 2026

At Metro Fixings, we take your privacy seriously. This privacy notice explains how we collect, use, store, and protect your personal data when you visit our website, purchase our products, or interact with us.

We act as the "Data Controller" for the personal information you provide, ensuring it is processed in strict compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What Personal Data We Collect

We only collect the information necessary to fulfill your orders and provide a great shopping experience. This may include:

• Identity Data: Name, business name, and job title.

• Contact Data: Billing address, delivery address, email address, and phone numbers.

• Financial Data: Payment details (processed securely via our encrypted payment gateways—we do not store your full card details).

• Transaction Data: Details about products you have purchased from us and payments to and from your account.

• Technical Data: IP address, login data, browser type, and cookie information when you navigate our website.

2. How and Why We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we use your data under the following legal bases:

• To Fulfill a Contract: To process and deliver your orders, manage your account, and handle customer service requests.

• Legitimate Interests: To improve our website, optimise our product offerings, and send you relevant marketing updates (which you can opt out of at any time).

• Legal Compliance: To comply with tax, accounting, or statutory reporting obligations.

3. Data Sharing and Third Parties

We never sell your data to third parties. To run our business efficiently, we only share your information with trusted service providers who adhere to strict data protection standards, including:

• Delivery & Courier Services: To ship your orders to your job site or premises.

• Payment Processors: To securely handle transaction payments.

• IT & System Administrators: To maintain the security and functionality of our website and database.

• Credit Reference Agencies: Where necessary to assess credit lines for business accounts.

4. Data Security and Retention

We have implemented robust security measures to prevent your personal data from being accidentally lost, altered, disclosed, or accessed without authorisation.

We only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including any legal, accounting, or reporting requirements (typically up to 7 years following a financial transaction to meet UK tax guidelines).

5. Your Legal Rights

Under the UK GDPR, you have complete control over your personal data. You have the right to:

• Access: Request a copy of the personal data we hold about you.

• Correction: Request that we correct any inaccurate or incomplete information.

• Erasure ("Right to be Forgotten"): Request that we delete your data, subject to certain legal exceptions (such as open tax records).

• Restriction or Objection: Object to or restrict the processing of your data, including direct marketing.

• Data Portability: Request the transfer of your data to another service provider.

6. How to Contact Us or Lodge a Complaint

If you have any questions about this privacy notice, wish to exercise any of your rights, or want to update your communication preferences, please get in touch:

• Email: sales@metrofixings.co.uk

• Phone: 01707 375172

• Postal Address: Metro Fixings, Unit 3 Tewin Court, Tewin Road, Welwyn Garden City, Hertfordshire, AL7 1AU.

If you feel your data has not been handled correctly, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). However, we would appreciate the chance to resolve any concerns with you directly first.