Privacy policy

1Introduction

We appreciate the trust you place in us when sharing your personal data, and keeping that data secure matters to us. This notice explains how we collect and use your personal data, during and after your relationship with us, in line with our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It also covers who we share it with, the rights you have over your personal data, and how to exercise them.

Please read this alongside any other privacy notice we may give you on specific occasions, so you understand how and why we use your information. If you have questions or want to exercise your rights, use the details in the Contact us section below.

2Who we are

Bunzl Safety is a trading name of Bunzl UK Limited, registered in England and Wales under company number 02902454, and part of Bunzl plc. For the purposes of the UK GDPR, Bunzl plc is the data controller for personal data collected through our websites, by telephone and through related social media. It means we decide what data is collected, how it is used and how it is protected.

3This website

This website is an information site for Bunzl Safety. It has no customer accounts and no online ordering. The personal data it collects is limited to:

• The contact form. Your name, company, email address, phone number if you give it, and the content of your message. Messages are delivered to us by Formspree, Inc., a form processing service based in the United States, and are used only to reply to you and pass your enquiry to the right team.
• Server logs. Our hosting provider, Netlify, Inc., based in the United States, records standard technical information about each visit, such as your IP address, browser type and the page requested, to deliver the site and keep it secure.

This website does not use cookies for analytics or advertising. The only thing it stores on your device is your answer to our cookie question. See our cookie policy.

4The data we hold about you

Across the Bunzl Safety companies, we may collect, store and use the following categories of personal data (this list is not exhaustive):

• Personal contact details such as name, title, addresses, telephone numbers and personal email addresses.
• Business contact details such as position, company name, company address, business telephone number and email.
• Age or date of birth.
• Bank account details and tax or VAT status information.
• For credit arrangements, other data relating to trading information.
• Where you visit our sites or take deliveries from us, CCTV footage and information from electronic means such as geolocation data for deliveries.
• Cookie information and information about your use of our information and communications systems.

5How we collect and use personal data

We collect personal data for one or more of these purposes:

• To fulfil a contract with you, or with the organisation you represent. In these cases it may be your organisation, rather than you, that provided us with your data.
• To initiate and complete commercial transactions for the purchase of products or services.
• To deliver products you have purchased directly or indirectly from us.
• To communicate with suppliers of goods and services.
• To keep accounts and other business records.
• To carry out marketing, electronic or otherwise, including sharing within the Bunzl group.
• To comply with legal or regulatory requirements, including health and safety obligations.
• To deal with complaints or queries from customers and suppliers.
• To keep our websites and business infrastructure secure and running.

We may also collect additional information from third parties, including credit reference agencies.

Technical information

So that every visitor can use and navigate our websites, we also collect the IP address used to connect your device to the internet, your browser type and version, time zone setting, operating system and platform, and information about your visit. On this website that information is held in our hosting provider’s server logs and is not used to identify you.

6Lawful basis for processing

Under Article 6 of the UK GDPR we rely on our legitimate interests, on the need to perform a contract, on your consent, or on a legal obligation, to collect and use personal data to run our business and provide a service you have requested. In some cases we are under a legal duty to use or disclose data, for example to comply with a request from an official body. When we process on the basis of legitimate interest, we make sure our interests and rights do not override yours.

When you send us a message through this website, we rely on our legitimate interest in responding to business enquiries, or on taking steps at your request before entering into a contract.

7Sharing your personal data

We may share your data on a need-to-know basis, only where it is necessary or where we are required to. This may include other companies in the Bunzl group where your enquiry is best handled by one of them, and professional advisers and service providers such as accountants, legal counsel, consultants, insurers, IT and communications providers, suppliers, and logistics and transport services. For this website, our service providers are Netlify, Inc. (hosting) and Formspree, Inc. (contact form).

We may also share data with any competent law enforcement body or regulator as required by law, and when we buy or sell any business or assets. We put the necessary safeguards in place so that data we are responsible for stays properly protected when shared with third parties. We never sell personal data.

8International transfers

We are a global organisation and use third parties in other countries to help run our business, including other Bunzl group companies. This can include countries outside the UK that do not have laws providing equivalent protection for personal data. Messages sent through this website, and the technical data in our hosting provider’s logs, are processed in the United States.

Where we transfer personal data outside the UK, we do so lawfully: under UK adequacy regulations where they apply, or otherwise under the International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another safeguard recognised under the UK GDPR. We require third parties to respect the security of your data and to treat it in line with the law.

9How long we keep your data

We keep your data only as long as necessary for our business needs and to meet any legal or regulatory duty to retain it. Whatever the period, we keep it subject to appropriate security. To decide the right retention period we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use, the purposes of processing, whether we can achieve them another way, and the applicable legal requirements.

Messages sent through this website are kept for as long as needed to deal with your enquiry. If you become a customer, the privacy notice of the Bunzl Safety company you deal with applies to your account data.

10Security measures

We put measures in place to protect your data and prevent it being accidentally lost, used or accessed without authority, altered or disclosed. We limit access to those who have a business need to know. We have no control over what happens between your device and the boundary of our infrastructure, so you should be aware of information security risks and take steps to safeguard your own information. We accept no liability for breaches beyond our control.

11Your rights

You have certain rights over the personal data we hold. To exercise them, use the Contact us section below. To process your request we will ask you for valid identification. Your rights are:

• The right to be informed about our data processing, which this notice provides.
• The right of access to a copy of the personal data we hold about you, free of charge.
• The right to rectification of inaccurate data, and to have incomplete data completed.
• The right to erasure of your data in certain circumstances, where no overriding legal basis to keep it remains.
• The right to restrict processing, where we keep the data but stop processing it.
• The right to data portability, to have data you gave us transferred to another controller in a commonly used, machine-readable format.
• The right to object to processing based on legitimate interest, to direct marketing, or to a task carried out in the public interest.
• The right to withdraw consent at any time where processing is based on it.
• The right to human intervention in any automated decision-making about you.

You do not have to pay to exercise any of these rights. We have one month to respond.

12Do you have to provide your data?

You are never required to provide personal data, but you may need to when you enter a contract for our services or products. We will not be able to provide them unless you give us the data we need. You will also need to provide certain data if you contact us to exercise your rights under section 11.

13Automated decision-making

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. This website does not profile visitors and does not use cookies to tailor content. You can review or change your cookie choice at any time through the cookie settings.

14Marketing

We may use your data to carry out marketing within the Bunzl group. We only contact people who want to receive marketing, and for our own legitimate interests. If you object to marketing, electronic or otherwise, tell us and we will stop. We may still need to contact you to provide services and products.

15Cookies

Cookies are small text files placed on your device by sites you visit. This website does not set cookies. The only thing it saves on your device is your answer to our cookie question, which is strictly necessary to remember your choice. If we ever add analytics or other non-essential cookies, we will ask for your consent before setting them and update our cookie policy first.

Other Bunzl websites, including those of our individual companies, may use cookies to make their sites work, monitor usage and show relevant content. Each has its own cookie tool and policy, which apply once you are there. You can also block cookies in your browser settings, though blocking all cookies may stop parts of a site working.

16Contact us

Any comments, questions or suggestions about this policy or our handling of your personal data should be emailed to dataprotection.enquiries@bunzl.com.

You can also write to our registered office:

17Complaints

We have appointed a Data Protection Privacy Champion to oversee compliance with this notice. If you have concerns about our use of your data, we would like the chance to respond, so please contact us using the details above. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the independent regulator for data protection in the UK.

For individuals in the European Union, Bunzl plc has appointed Bunzl Outsourcing Services BV as its representative under the EU GDPR, to deal with supervisory authorities and data subjects: