Privacy Policy

Last updated: October 2026

1. Who we are

Safeguard Industrial Ltd (“Safeguard”, “we”, “us”) is the controller of the personal data described in this policy. We are a company registered in Scotland, company number SC885223, with our registered office at Third Floor, 3 Hill Street, Edinburgh, EH2 3JP.

For anything to do with your personal data, email info@safeguardindustrial.co.uk or call 0131 210 0416.

2. What we collect

Contact and business details — name, job title, company, email, phone, and billing and delivery addresses, when you ask for a quote, apply for a trade account, place an order or contact us.
Order and account details — what you buy, quotes, invoices, payment status and your trade account login.
Business contacts we find ourselves — for businesses we think may need our products, we record the company name, business address, phone number, website and a named contact's work email, taken from the company's own website, public business directories and Companies House.
Emails with us — emails you exchange with our team, linked to your company's record so we can see the history of our conversations.
Marketing email activity — whether our emails to you were delivered, which links you clicked, and whether you unsubscribed or the email bounced.
Artwork — logos you upload for branded workwear.
Payment details — handled by Stripe. We never see or store your full card number.
Technical data — IP address and browser details in our security logs, and, only if you accept analytics cookies, how you use the site (see our cookie policy).

3. How we use it, and our lawful basis

To quote for, supply, deliver and invoice your order, and run your trade account — performance of a contract (or steps you asked us to take before one).
To keep accounting and tax records — legal obligation.
To answer enquiries, follow up quotes and tell business customers about relevant products — our legitimate interests in running and growing the business. You can opt out of marketing at any time.
To send occasional product news by email to business contacts — our legitimate interests in marketing to businesses. We only send these to business email addresses, never personal ones. Every email has an unsubscribe link that works straight away. We see which links in an email are clicked, but we do not use hidden tracking pixels to see whether you opened it unless you have agreed to that.
To plan sales visits — legitimate interests. Business addresses are looked up on Google Maps to plan the route.
To keep the site and accounts secure and prevent fraud — legitimate interests.
To send a basket reminder — your consent. Only if you tick “Email me a reminder if I don't finish checking out” in your basket and give an email address: if the order isn't paid a couple of hours later, we send one email with a link back to your basket, and no more.
Website analytics — your consent, which you can withdraw at any time from “Cookie settings” in the footer.

We do not make decisions about you by purely automated means.

4. Who we share it with

We never sell your data. We share only what each service needs to do its job for us:

Stripe — card payments
Xero — invoicing and accounts
Microsoft 365 — email
Brevo — sending our marketing emails
Google Maps Platform — looking up business addresses to plan sales visits
Google Analytics — website statistics, only with your consent
Our UK hosting provider, and Backblaze for encrypted off-site backups
Suppliers, decorators and couriers who make up, brand and deliver your order
WhatsApp (Meta), if you choose to message us there
Professional advisers, and public authorities where the law requires it

5. Transfers outside the UK

Some of these providers process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations or by the UK's approved contract clauses (the International Data Transfer Agreement or the UK Addendum).

6. How long we keep it

Orders, invoices and account records — six years after the end of the financial year they relate to, as UK tax law requires.
Enquiries and quotes that don't lead to an order — up to two years.
Emails with us, as linked to your company's record — 12 months.
Business contact details and marketing email activity — while you remain a customer or a business we are in touch with, and removed when you ask us to delete them.
If you unsubscribe, we keep your email address on a “do not email” list for as long as we send marketing, so that you are never emailed again.
Uploaded artwork not used on a quote or order — deleted after 30 days.
An email address given only for a basket reminder, and the saved basket — deleted after 14 days.
Security logs — 90 days.
Analytics data — no longer than 14 months in Google Analytics.

7. Your rights

Under UK GDPR you can ask to see, correct or delete your data; to restrict or object to how we use it (including any marketing); and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. Email info@safeguardindustrial.co.uk and we will respond within one month.

8. Complaints

Please tell us first so we can put things right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

9. Changes

We will update this page if how we use personal data changes. The date at the top shows the latest version.