Privacy Policy

Who We Are

Bulky Stock is a UK based sole trader business providing carton wholesale, product sourcing and managed international delivery. For data protection enquiries, contact info@bulkystock.com.

Information We Collect

• Identity and business details, including name, company name and account type.
• Contact and address details, including email, telephone number, billing address and delivery address.
• Account information, saved addresses and password security records. We do not see your plain-text password.
• Order, payment status, invoice, shipment, tracking and customer service records.
• Sourcing briefs, uploaded reference images and messages sent through our forms or live chat.
• Technical and security information, including IP address, device, browser, logs and cookie choices.
• Marketing preferences and engagement where you have chosen to receive communications.

Why We Use It And Our Lawful Bases

We process information where it is necessary to perform a contract or take requested steps before a contract, including account creation, quotations, checkout, payment, sourcing, delivery and order support.

We process information to comply with legal obligations relating to tax, accounting, fraud prevention, product safety, customs and lawful requests from authorities.

We rely on legitimate interests to secure and improve the service, prevent misuse, maintain business records, understand customer enquiries and manage supplier and delivery operations, provided those interests are not overridden by your rights.

We rely on consent for optional cookies, live chat cookies and electronic marketing where consent is required. Consent can be withdrawn at any time.

Payments

Card payments are handled by Stripe. Stripe receives the information needed to process and protect the payment. Bulky Stock does not store complete card numbers or card security codes. Bank transfer records include the payment reference and confirmation needed to match funds to an order.

Who Receives Information

We share only information reasonably needed with service providers involved in operating the business. These may include Stripe, website hosting and security providers, email delivery providers, Crisp live chat, professional advisers, manufacturers, freight forwarders, customs agents, couriers and delivery partners.

Manufacturers normally receive product and quantity information rather than customer details. Freight, customs and final delivery providers may receive the recipient name, business, address, telephone number, email and shipment information needed to complete delivery.

We may disclose information where required by law, to protect legal rights, investigate fraud or respond to a valid authority request. We do not sell personal information.

International Transfers

Manufacturers, freight providers and technology suppliers may operate outside the UK or European Economic Area. Where data protection law requires safeguards, we use an available lawful transfer mechanism such as adequacy regulations, approved contractual clauses or another permitted safeguard. You can contact us for more information about a relevant transfer.

How Long We Keep Information

• Orders, invoices, payments and tax records are normally retained for up to seven years.
• Account records are kept while the account remains active and then for as long as reasonably needed for legal, fraud and support purposes.
• Support and sourcing enquiries are normally retained for up to two years after the enquiry is closed, unless they form part of an order or legal record.
• Security logs are normally retained for up to twelve months unless needed to investigate an incident.
• Marketing records are kept until you unsubscribe or the information is no longer useful, with a limited suppression record retained to respect your choice.

Your Rights

Depending on the circumstances and lawful basis, you may have rights to access, correct, erase, restrict or object to the use of personal information, and to receive portable information. You can withdraw consent where processing relies on consent and object at any time to direct marketing.

Some rights are not absolute. We may retain information where it is needed for orders, tax, fraud prevention, legal claims or another lawful reason. We may ask for information to verify your identity before acting on a request.

Cookies And Live Chat

Essential cookies keep the basket, checkout, region selection, security and account functions working. Optional services may store additional cookies only after the relevant choice is made. Read the Cookie Policy for details and preference controls.

Security

We use reasonable technical and organisational measures to protect information, including encrypted website connections, access controls, account authentication, software updates and payment processing through specialist providers. No internet service can guarantee absolute security.

Children

Bulky Stock is a business ordering service and is not intended for children. Accounts and orders must be created by someone aged 18 or over with authority to act for the buyer.

Automated Decisions

We do not make decisions producing legal or similarly significant effects solely through automated processing. Payment and fraud providers may perform automated risk checks under their own privacy terms.

Complaints

Please contact us first so we can investigate a privacy concern. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Changes To This Policy

We may update this notice when our services, suppliers or legal obligations change. The current version and update date will remain available on this page.