Legal
Privacy policy
Last updated:
This policy explains what we do with personal data when you browse this website, send a trade enquiry, or place a wholesale order with us. We are the data controller for that data under the UK GDPR and the Data Protection Act 2018.
1. Who we are
2. What data we collect
We sell luggage wholesale to businesses, so most of the data we handle is business contact data. We collect:
- Contact data: your name, role, email address and phone number.
- Business data: company name, VAT number where you have one, delivery and invoicing addresses.
- Enquiry and order data: the sizes, series and quantities you ask about, quotes issued, order history and correspondence about a shipment.
- Communications: emails, phone notes and messages exchanged with our team, including notes from any video call held to discuss an order.
- Technical data: IP address, browser and device type, and pages viewed, collected through our hosting logs and any analytics cookies you consent to.
We do not ask for or knowingly collect special category data, and we do not take card details on this website. Payments for wholesale orders are handled by bank transfer or by a payment provider that collects the payment data directly.
3. Why we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Answering trade enquiries and preparing quotes | Legitimate interests, or steps before entering a contract |
| Processing, packing and delivering a wholesale order | Performance of a contract |
| Managing a trade account and after-sales support | Performance of a contract |
| Sending updates about stock and new series to existing trade contacts | Consent, or soft opt-in for existing customers |
| Site security, fraud prevention and keeping records of correspondence | Legitimate interests |
| Website analytics | Consent, given through the cookie banner |
| Keeping invoices, VAT and accounting records | Legal obligation |
Where we rely on legitimate interests, that interest is running and growing a wholesale supply business; we balance it against your rights and you can object at any time.
4. Who we share it with
We share data only with parties who help us run the business, and only as far as they need it:
- Our website hosting and domain provider.
- Our email provider and the tools we use to send trade updates.
- Our payment provider and our bank, for invoicing and settlement.
- The video-call platform we use when a call is easier than email.
- Suppliers, warehouses and courier or pallet carriers, so goods can be picked and delivered to you.
- Our accountant and, where needed, our legal advisers.
We may also disclose data where the law requires it, for example to a tax authority or in response to a court order. We do not sell personal data.
5. International transfers
Our goods ship from the UK and most of our providers store data in the UK or the EEA. Where a provider stores or processes data outside the UK, we rely on UK adequacy regulations, or on appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us which safeguard applies to a specific provider.
6. How long we keep it
- Invoices and order records: six years after the end of the relevant financial year, to meet UK tax and accounting rules.
- Trade account and contact records: while the account is active, and for a reasonable period afterwards in case you order again.
- Enquiries that do not lead to an order: kept only as long as we need them to follow up, then deleted.
- Marketing data: until you unsubscribe or object.
- Server and security logs: a short retention period set by our hosting provider.
7. Security
The website is served over HTTPS. Access to mailboxes, order records and accounting systems is limited to the people who need it, protected by strong passwords and two-factor authentication where the provider supports it. We review who has access when someone joins or leaves. No system is perfectly secure, but if a breach affects your rights we will notify you and the ICO as the law requires.
8. Cookies
Essential cookies keep the site working and are always on. Analytics and any advertising cookies are set only if you agree through the cookie banner, and you can change or withdraw that choice at any time by clearing cookies in your browser and making a new selection. Most browsers also let you block cookies entirely, although parts of the site may then behave differently.
9. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Rectification of data that is wrong or incomplete.
- Erasure of data we no longer have a reason to keep.
- Restriction of processing while a dispute is resolved.
- Portability of data you gave us, in a machine-readable format.
- Objection to processing based on legitimate interests, and to direct marketing at any time.
To exercise a right, email . We reply within one month and may ask you to confirm your identity first. Exercising your rights is free.
10. Withdrawing consent
Where we rely on consent, you can withdraw it at any time: use the unsubscribe link in any message we send, change your cookie choice, or email us. Withdrawing consent does not affect processing carried out before you withdrew it, and it does not affect records we must keep by law.
11. Complaints
If you are unhappy with how we handle your data, tell us first at and we will look into it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
12. Age of users
This is a trade website intended for business buyers. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, email us and we will delete it.
13. Changes to this policy
We may update this policy as our suppliers, tools or legal duties change. The date at the top shows the current version, and we will tell trade contacts by email if a change materially affects them.