Privacy Policy

Pengrill.co.uk
Operated by Penroc UK

Last Updated: 1 June 2026

1. INTRODUCTION

PENROC (“we”, “our”, “us”) is committed to protecting the privacy and security of personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit Pengrill.co.uk, place an order, contact us, or otherwise interact with our business.

We process personal data in accordance with:

UK General Data Protection Regulation (UK GDPR)
Data Protection Act 2018
Privacy and Electronic Communications Regulations (PECR)

Pengrill.co.uk is a business-to-business website and is intended for commercial customers only.

2. DATA CONTROLLER

The Data Controller responsible for your personal information is:

Penroc
Unit 4 Zone 3
Llandygai Industrial Estate
Bangor
Gwynedd
LL57 4YH

sales@pengrill.co.uk

3. INFORMATION WE COLLECT

We may collect and process the following information:

Business Information

Company name
Trading name
Company registration number
VAT registration number

Contact Information

Contact names
Job titles
Telephone numbers
Mobile numbers
Email addresses

Delivery and Billing Information

Invoice addresses
Delivery addresses

Order Information

Products ordered
Quantities purchased
Transaction history
Delivery records

Website Information

IP address
Browser type
Device information
Website usage information
Cookie information

Communications

Emails
Telephone enquiries
Website contact form submissions
Customer service correspondence

4. HOW WE COLLECT INFORMATION

We collect information:

Directly from customers
Through website enquiries
Through online orders
Through email correspondence
Through telephone conversations
Through cookies and website analytics technologies

5. PURPOSES FOR PROCESSING PERSONAL DATA

We process personal information for the following purposes:

Contract Performance

To:

Process orders
Deliver products
Manage customer accounts
Provide quotations
Respond to enquiries
Administer payments

Legitimate Business Interests

To:

Manage customer relationships
Improve products and services
Analyse website performance
Prevent fraud
Maintain business records
Recover debts

Legal Obligations

To:

Comply with tax requirements
Maintain accounting records
Respond to lawful requests from regulatory authorities
Meet legal and contractual obligations

Marketing Communications

Where lawful to do so, we may contact customers regarding:

Product updates
New product launches
Business-related promotional information

Recipients may opt out of marketing communications at any time.

6. LEGAL BASIS FOR PROCESSING

Under UK GDPR, we rely on the following lawful bases:

Contract

Processing necessary to fulfil orders and provide requested products and services.

Legitimate Interests

Processing necessary for the effective operation of our business, customer relationship management and service improvement.

Legal Obligation

Processing necessary to comply with legal and regulatory requirements.

Consent

Where consent is required, such as certain marketing activities or non-essential cookies, consent will be obtained before processing.

Consent may be withdrawn at any time.

7. PAYMENT INFORMATION

Payments made through the website are processed by secure third-party payment providers.

We do not store or retain:

Credit card numbers
Debit card numbers
Security codes (CVV)
Full payment card details

Payment information is processed directly by authorised payment providers in accordance with their own privacy and security policies.

8. SHARING INFORMATION

We do not sell personal information to third parties.

We may share information with trusted service providers where necessary for business operations, including:

Delivery Providers

To fulfil customer orders.

Payment Providers

To process transactions.

Website Service Providers

To host and maintain the website.

Professional Advisers

Including accountants, legal advisers and insurers.

Regulatory Authorities

Where required by law.

All third parties are required to process information securely and only for authorised purposes.

9. INTERNATIONAL TRANSFERS

We primarily process and store information within the United Kingdom.

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place as required under UK GDPR.

10. DATA RETENTION

We retain information only for as long as necessary to fulfil the purposes for which it was collected.

Typical retention periods include:

Customer Records - Up to 7 years following the end of the business relationship.

Financial Records - At least 6 years to comply with HMRC requirements.

Website Enquiries - Normally retained for up to 24 months unless further business activity occurs.

Marketing Records - Until consent is withdrawn or the information is no longer required.

At the end of the retention period, information is securely deleted or destroyed.

11. DATA SECURITY

We take appropriate technical and organisational measures to protect personal information from:

Unauthorised access
Disclosure
Alteration
Loss
Misuse

Security measures may include:

Password protection
Access controls
Secure hosting services
Firewall protection
Regular software updates
Staff awareness and training

Whilst we take reasonable steps to protect information, no internet transmission can be guaranteed completely secure.

12. YOUR RIGHTS

Under UK GDPR, individuals may have the following rights:

Right of Access - To request a copy of personal information held about them.

Right to Rectification - To request correction of inaccurate or incomplete information.

Right to Erasure - To request deletion of personal information where legally appropriate.

Right to Restrict Processing - To request limitation of processing activities.

Right to Object - To object to processing based on legitimate interests.

Right to Data Portability - Where applicable, to receive personal information in a portable format.

Right to Withdraw Consent - Where processing is based on consent.

Requests may be submitted to sales@pengrill.co.uk

13. COOKIES

Pengrill.co.uk uses cookies to:

Operate the website
Improve functionality
Analyse visitor behaviour
Improve customer experience

Further details are contained within our Cookie Policy.

14. THIRD-PARTY WEBSITES

Our website may contain links to external websites. We are not responsible for the privacy practices or content of external websites.

Users should review the privacy policies of those websites separately.

15. COMPLAINTS

If you have concerns regarding the handling of your personal information, please contact us first so we can investigate and resolve the matter. You also have the right to lodge a complaint with:

Information Commissioner’s Office (ICO)

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: www.ico.org.uk

Telephone: 0303 123 1113

16. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect legal, regulatory or operational changes.

The latest version will always be published on Pengrill.co.uk.

17. CONTACT DETAILS

For all privacy-related enquiries, please contact: