Privacy Policy
Last updated: 4 September 2026
1 Who we are
This website and business are operated under the trading name Carboot Supplier.
For data-protection purposes, the data controller is: CARBOOT SUPPLIER, trading as Carboot Supplier.
Our contact details are:
Carboot Supplier
Corby Business Centre
Eismann Way
Corby
NN17 5ZB
United Kingdom
Telephone and WhatsApp: 07780 608 761
Email: info@carbootsupplier.co.uk
This Privacy Policy explains what personal information we collect, why we use it, who we may share it with and the rights available to you.
2 Information we collect
Depending on how you use our website or communicate with us, we may collect:
-
your full name;
-
your business or trading name;
-
your billing and delivery addresses;
-
your email address;
-
your telephone or WhatsApp number;
-
order, payment and transaction information;
-
details of products purchased, returned or discussed;
-
messages, enquiries, complaints and other correspondence;
-
information supplied to confirm that you are a business customer;
-
account and login information;
-
marketing preferences;
-
IP address, browser, device and approximate location information;
-
website activity, referring pages and interaction data;
-
cookie choices and consent records;
-
fraud-prevention and security information; and
-
any other information you choose to provide.
Please do not send us unnecessary sensitive personal information.
3 How we collect information
We may collect information:
-
when you visit or use our website;
-
when you place or attempt to place an order;
-
when you contact us by email, telephone, WhatsApp or website form;
-
when you create or use an account;
-
when you request support, make a complaint or return goods;
-
when you subscribe to marketing;
-
automatically through cookies and similar technologies;
-
from payment providers, delivery companies and website service providers; and
-
from publicly available business sources where reasonably necessary to confirm business status or prevent fraud.
4 Why we use your information
We may use personal information to:
-
respond to enquiries;
-
confirm that purchasers are acting in business;
-
process and fulfil orders;
-
take and administer payments;
-
arrange delivery or collection;
-
provide order updates and customer support;
-
manage returns, complaints, refunds and disputes;
-
maintain accounting and tax records;
-
prevent fraud, abuse and security incidents;
-
operate, protect and improve the website;
-
understand how visitors use the website;
-
establish, exercise or defend legal claims;
-
comply with legal and regulatory obligations; and
-
send marketing where permitted by law.
We will not use personal information for an unrelated purpose without a lawful reason.
5 Our lawful reasons for using information
We use personal information only where we have a lawful basis.
Contract
We use information where it is necessary to take steps requested before entering a contract or to perform a contract, including processing orders, payments, deliveries, collections, returns and customer-support requests.
Where the purchaser is a company or other organisation, we may instead rely on our legitimate interests when handling the personal information of its owners, employees or representatives.
Legal obligation
We use information where necessary to comply with tax, accounting, product-safety, fraud-prevention and other legal obligations.
Legitimate interests
We may use information where necessary for our legitimate business interests, provided those interests are not overridden by the person’s rights and freedoms.
These interests include:
-
operating and protecting our business;
-
responding to business enquiries;
-
confirming trade-customer status;
-
maintaining accurate records;
-
preventing fraud and misuse;
-
securing and improving our website;
-
recovering debts;
-
handling complaints and disputes; and
-
understanding and developing our services.
Consent
We rely on consent where the law requires it, including for certain marketing activities and non-essential cookies.
You may withdraw consent at any time. This will not affect processing that took place before consent was withdrawn.
6 Information required from you
Some information is needed to process an order, arrange delivery, comply with the law or enter a business contract.
If you do not provide required information, we may be unable to accept or fulfil an order.
If you do not provide a separate business or trading name, the full name entered with your order may be treated as your trading identity in accordance with our Business-to-Business Terms and Conditions.
7 Payments
Payments may be processed by Wix Payments or another payment provider made available through our checkout.
The payment provider may collect payment-card, bank, identity, fraud-prevention and transaction information directly from you. We do not normally receive or store complete payment-card details.
Payment providers process information under their own privacy terms and security arrangements. Please review the privacy information displayed by the relevant provider before paying.
8 Deliveries and collections
We may provide your name, delivery address, telephone number, email address and relevant order information to postal operators, couriers, fulfilment providers or collection personnel.
They use this information to deliver goods, provide tracking, communicate about delivery and deal with delivery problems.
9 Website hosting and Wix
Our website is created and hosted using Wix.
Wix may process information about website visitors and customers on our behalf, including contact, order, account, technical, cookie and website-usage information.
Information may be stored through Wix’s databases, applications and infrastructure. Wix may use approved service providers and process information in countries outside the United Kingdom.
Wix’s own privacy information explains its processing and international-transfer arrangements in greater detail.
10 WhatsApp and other communications
If you contact us using WhatsApp, your personal information will also be processed by WhatsApp and its associated companies under their own privacy terms.
Emails, telephone services and other communications may similarly involve third-party service providers.
Do not send payment-card details, passwords or unnecessary sensitive information through WhatsApp, email or our contact form.
11 Who we share information with
Where reasonably necessary, we may share information with:
-
Wix and website service providers;
-
payment processors and banks;
-
delivery, courier and fulfilment providers;
-
email, telephone and messaging providers;
-
IT, security, hosting and data-storage providers;
-
accountants, bookkeepers, insurers and professional advisers;
-
fraud-prevention and debt-recovery providers;
-
law-enforcement agencies, courts, regulators and public authorities;
-
a purchaser, investor or adviser involved in a proposed sale or reorganisation of the business; and
-
other parties where you direct us or give valid consent.
We do not sell personal information to third parties.
Service providers are permitted to use information only as necessary to provide their services or as otherwise allowed by law.
12 International transfers
Some service providers, including Wix, payment processors and communications providers, may process information outside the United Kingdom.
Where the law requires safeguards for an international transfer, we rely on an applicable adequacy regulation, approved contractual safeguards or another lawful transfer mechanism.
You may contact us for further information about the safeguards relevant to your information.
13 How long we keep information
We retain personal information only for as long as reasonably necessary.
We will normally retain:
-
order, payment, invoice and accounting records for six years after the end of the relevant financial period or for any longer period required by law;
-
customer-service, complaint, dispute and legal records for up to six years after the matter is closed;
-
general enquiries that do not result in an order for up to 12 months after the last communication;
-
unsuccessful or abandoned order information for a limited period needed for security, troubleshooting and fraud prevention;
-
marketing information until you unsubscribe, withdraw consent or the information is no longer needed; and
-
suppression records after an opt-out where necessary to ensure that marketing is not sent again.
Technical logs and cookie information are retained according to our operational requirements, security needs and the settings of the relevant website service.
We may retain information for longer where reasonably necessary for a legal claim, investigation, fraud-prevention measure, safety issue or legal obligation.
14 Marketing
We may send information about our stock, bundles, services or offers where:
-
you have consented;
-
the law permits us to contact an existing business customer; or
-
another lawful business-to-business marketing rule applies.
You can stop marketing at any time by:
-
using the unsubscribe option in a marketing message;
-
emailing info@carbootsupplier.co.uk; or
-
contacting us using the details in this Policy.
Stopping marketing will not prevent necessary communications concerning an order, payment, delivery, safety notice or customer-service matter.
We may retain limited suppression information so that we can honour your opt-out.
15 Cookies
Our website may use cookies and similar technologies.
Strictly necessary cookies help the website operate, maintain security, remember basket contents and provide services requested by visitors. These cookies do not normally require consent.
Analytics, advertising and other non-essential cookies should be used only after the visitor has made the required cookie choice.
Our cookie banner or Cookie Policy should explain:
-
the cookies in use;
-
who provides them;
-
what they do;
-
how long they remain active; and
-
how visitors can change or withdraw consent.
You can also control cookies through your browser. Disabling necessary cookies may prevent parts of the website or checkout from working correctly.
16 Security
We use reasonable organisational and technical measures intended to protect personal information from unauthorised access, loss, misuse, alteration or disclosure.
These measures may include access controls, password protection, secure website connections, payment-provider security, software updates and limiting information access to those who need it.
No internet transmission or storage system can be guaranteed as completely secure. You are responsible for protecting passwords and devices used to access the website.
Please contact us promptly if you believe information connected with us has been lost, misused or accessed without permission.
17 Your data-protection rights
Depending on the circumstances, you may have the right to:
-
ask for confirmation that we use your personal information;
-
receive a copy of personal information we hold about you;
-
ask us to correct inaccurate or incomplete information;
-
ask us to delete information;
-
ask us to restrict how information is used;
-
object to processing based on legitimate interests;
-
object to direct marketing at any time;
-
receive certain information in a portable format;
-
withdraw consent where processing relies on consent; and
-
complain to the Information Commissioner’s Office.
These rights are subject to legal conditions and exceptions. For example, we may need to retain information to meet tax obligations or deal with a legal claim.
We may request reasonable information to confirm your identity before responding.
We will normally respond within one month, although the law permits additional time in certain circumstances.
18 Automated decisions
We do not currently make decisions producing legal or similarly significant effects about you solely through automated processing.
Payment, fraud-prevention or website providers may use automated tools as part of their services. Their privacy information should explain that processing.
19 Children
Our website and products are intended for adults acting in business.
We do not knowingly sell to children or intentionally collect information from anyone under 18. A person under 18 must not place an order or submit personal information through the website.
If you believe a child has supplied information to us, please contact us so that we can investigate and take appropriate action.
20 Links and third-party websites
Our website may link to marketplaces, social platforms or other third-party websites.
We do not control those organisations’ privacy practices. Their use of personal information is governed by their own privacy policies.
A link does not mean that we endorse or accept responsibility for a third party’s privacy practices.
21 Changes to this Policy
We may update this Privacy Policy when our practices, service providers or legal obligations change.
The latest version will appear on our website with its updated date. Material changes may also be communicated using another appropriate method.
22 How to contact us
For questions, requests or concerns about personal information, contact:
Carboot Supplier
Corby Business Centre
Eismann Way
Corby
NN17 5ZB
United Kingdom
Email: info@carbootsupplier.co.uk
Telephone: 07780 608 761
23 Complaints
Please contact us first so that we have an opportunity to investigate your concern.
You also have the right to complain to the UK Information Commissioner’s Office. Information about making a complaint is available at www.ico.org.uk.
Making a complaint does not affect any other legal rights available to you.
