Privacy policy.

Who we are.

Pallet Racking Services Wales is the controller of the personal data described in this policy. That means we decide why and how it is used, and we are responsible for looking after it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

• Name: Pallet Racking Services Wales
• Address: Gwauniarll, Seven Sisters, Neath, South Wales, SA10 9EW
• Email: sales@palletrackingwales.co.uk
• Telephone: 07814 627770

We are a small business and have not appointed a data protection officer. Questions about this policy or your data go to the email address above.

What we collect.

We only collect personal data that you give us, or that is created when you use this website with your consent.

When you send an enquiry

Our forms (the project enquiry, contact form, site survey request, inspection booking, checklist download and photo identification request) ask for some or all of the following:

• Your name, company, email address and telephone number.
• Your site address and postcode.
• Details about your building, storage, racking, stock, timescales and the problem you want to solve, including anything you type into a message field.
• For inspection bookings: approximate bays and runs, racking make, date of last inspection, preferred month and whether you have an appointed Person Responsible for Racking Safety.
• Photographs you upload, for example to help identify the make of your racking. Please avoid uploading photographs that show people's faces or other personal information.
• The page you sent the enquiry from and the time it was sent, used to route the enquiry and to filter spam.

When you contact us directly

If you email or telephone us, we keep the correspondence and any notes of the call so we can answer your question and follow up.

When you browse this website

If you accept analytics cookies, we collect anonymous usage and page speed information through Vercel Web Analytics and Speed Insights. If you accept functional cookies, the Google Maps embed on the contact page loads and Google may collect data as described in its own policy. The cookie policy lists every cookie and storage item in detail.

How we use it, and our lawful basis.

UK GDPR requires a lawful basis for each use of personal data. Ours are:

Where we rely on legitimate interests, we have considered your rights and expectations. A business contact asking about racking can reasonably expect us to reply and to keep a record of the conversation. We do not send marketing emails unless you have asked to receive them, and you can opt out at any time.

We do not use your data for automated decision-making or profiling.

Who we share it with.

We do not sell personal data. We share it only with service providers who process it on our behalf, under written terms that require them to protect it, and with others only where the law requires.

• Resend (email delivery): when you submit a form, the details and any photographs are sent to our inbox by Resend, which acts as our processor.
• Vercel (website hosting, analytics and performance): the website is hosted on Vercel. Vercel processes technical data such as IP addresses to serve the site and protect it. If you consent to analytics, Vercel Web Analytics and Speed Insights process anonymous usage data.
• Google (maps): only if you consent to functional cookies, the map on the contact page is loaded from Google.
• Our email, accounting and IT providers, who store our business records.
• Professional advisers such as accountants, insurers and lawyers, where needed.
• Manufacturers or subcontractors working on your project, limited to what they need, such as a site address and contact name.

International transfers.

Some of our providers, including Resend, Vercel and Google, are based in, or use servers in, the United States or elsewhere outside the UK. Where personal data is transferred outside the UK, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or on the International Data Transfer Addendum to standard contractual clauses, so that your data receives equivalent protection.

How long we keep it.

• Enquiries that do not lead to work: up to 2 years from our last contact, so we can pick up a conversation where it left off, then deleted.
• Customer records, quotations, contracts and invoices: 6 years after the end of the financial year in which the work finished, to meet tax and accounting requirements and to deal with any claims.
• Inspection and installation records: for as long as we have a working relationship with the site and for 6 years afterwards, because they may be needed to show what was inspected or installed.
• Photographs uploaded for identification: deleted once the enquiry is closed, unless they become part of a project record.
• Analytics data: held by Vercel in aggregated form under its own retention policy.

How we protect it.

The website is served over an encrypted connection, form submissions are validated and sent directly to our inbox, and access to our email and records is limited to the people who need it. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data and to respond promptly if something goes wrong.

Your rights.

Under UK GDPR you have the right to:

• Ask for a copy of the personal data we hold about you (subject access).
• Ask us to correct data that is inaccurate or incomplete.
• Ask us to delete your data, where there is no good reason for us to keep it.
• Ask us to restrict how we use your data while a concern is looked into.
• Object to our use of your data where we rely on legitimate interests, and to any direct marketing at any time.
• Ask for data you gave us to be transferred to you or another organisation in a machine-readable format, where the processing is based on consent or contract.
• Withdraw your consent at any time, where we rely on consent. For cookies, use the cookie settings button on the cookie policy page or in the footer.

To use any of these rights, email sales@palletrackingwales.co.uk. We will reply within one month. There is normally no charge.

Complaints.

If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection.

• Website: ico.org.uk/make-a-complaint (opens in a new tab)
• Telephone: 0303 123 1113
• Wales office: Information Commissioner's Office, 2nd Floor, Churchill House, Churchill Way, Cardiff, CF10 2HH

Changes to this policy.

We may update this policy when our services, providers or the law change. The date at the top shows when it was last updated. This version was last updated on 1 October 2026.