Privacy Policy

1. Who is responsible

EBENEZER SUPPLY PARTNERS LTD is responsible for the personal information described in this policy. Our postal address is 20 Ebenezer Street, Leeds WF3 3AD, United Kingdom. To ask a privacy question or exercise a data protection right, write to this address and mark your letter “Privacy”.

2. Information we may receive

You can browse this website without creating an account. Our hosting provider may process technical information needed to serve and secure the site, such as your IP address, request time, page requested, browser information and error records. If you submit the contact form, we receive and save the name, email address, phone number, selected department and message you provide, together with the time of submission and a submission identifier. The form saves these details in a JSON file in the website’s protected data folder. If you contact us by post, we may also receive your name, contact details and the information in your correspondence. Please do not send sensitive personal information unless it is needed for your enquiry.

3. Why we use information and our lawful bases

• Website operation and security: technical request data may be used to deliver pages, investigate faults and protect the site. Our lawful basis is our legitimate interest in operating a reliable and secure website.
• Enquiries and correspondence: we use contact form submissions and postal correspondence to understand and answer your enquiry. Our lawful basis is our legitimate interest in responding, or taking steps at your request before entering into a contract where relevant.
• Legal matters: information may be retained or disclosed where necessary to meet a legal obligation or establish, exercise or defend legal claims.

We do not use information collected through this website for automated decisions that have legal or similarly significant effects on you.

4. Who may receive information

Authorised personnel and service providers involved in hosting, maintenance or handling correspondence may access information where necessary for those purposes. Information may also be provided to a competent authority where required by law. We do not sell personal information collected through this website.

5. Retention

Hosting logs are kept for the period needed for operation, security and troubleshooting under the host’s settings, then deleted or anonymised. Contact form submissions remain in the JSON file until we review and delete them; deletion is a manual process and is not automatic. We retain submissions and postal correspondence while handling the enquiry and for any further period reasonably needed for follow-up, legal obligations or a dispute. We review information and remove it when it is no longer needed. You may ask us about a specific retention period by writing to the address above.

6. Cookies and external resources

The current website code does not set advertising or analytics cookies. The design loads Google Fonts from Google’s servers; when your browser requests a font, Google may receive technical data such as your IP address. This is separate from a link you choose to open. Your browser may also retain local cache data. If the website later adds non-essential cookies or tracking, we will update this policy and provide any choice required by law before using them.

7. International transfers and security

Loading Google Fonts or using technical service providers may involve processing outside the United Kingdom. Where we choose a provider that transfers personal information internationally, we will use an appropriate legal transfer mechanism where required. Contact form submissions are stored on the website server in a data folder configured to deny direct web access on Apache servers. Access to that folder must also be restricted in the configuration of any other web server used. We use reasonable organisational and technical measures to protect information, while recognising that no internet transmission is entirely risk-free.

8. Your rights

Subject to applicable conditions, you may request access to your personal information, correction of inaccurate information, erasure, restriction of processing or data portability. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent at any time without affecting earlier lawful processing. Send requests by post to the address in section 1. We may ask for information reasonably needed to confirm your identity. We normally respond within one month, subject to any extension allowed by law.

You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you are unhappy with our handling of personal information. We would welcome an opportunity to address your concern first.

9. Changes to this policy

We may update this policy when the website, our practices or the law changes. The date above identifies the current version. Material changes will be brought to visitors’ attention where appropriate.