Privacy Policy

Last Updated: 19 October 2026

1. Introduction

Boss Plant Sales Ltd is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, enquire about our products or services, or otherwise interact with our business.

We are committed to handling your personal information responsibly and in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended.

By using our website, you acknowledge that you have been provided with this Privacy Policy. Where consent is required to process your information, we will request it separately.

2. Who We Are

For the purposes of UK data protection legislation, the data controller responsible for your personal information is:

Company Name: Boss Plant Sales Ltd

Registered Address: Unit 23, Airfield Industrial Estate Cheddington Lane, Long Marston, Tring, Hertfordshire, United Kingdom, HP23 4QR

Company Registration Number: 08217490

Website: bossplantsales.co.uk

Email: marketing@bossplantsales.co.uk

Telephone: 01296 660 691

If you have any questions regarding this Privacy Policy or how your personal information is handled, please contact us using the details above.

3. Information We Collect

We may collect and process the following types of personal information:

Information You Provide Directly

Full name
Email address
Telephone number
Company or organisation name
Postal or business address
Information submitted through contact forms
Details relating to enquiries, quotations or purchases
Any additional information you voluntarily provide when contacting us

Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

Internet Protocol (IP) address
Browser type and version
Device type and operating system
Pages visited and time spent on our website
Website referral sources
Cookie information and website usage data

This information helps us understand how visitors interact with our website and improve its performance, functionality and user experience.

We do not intentionally collect sensitive personal information through our website unless it is necessary for a specific, lawful purpose.

4. How We Use Your Personal Information

We may use the personal information we collect for the following purposes:

Responding to enquiries and requests for information
Providing quotations, products or services
Processing customer orders and managing business relationships
Communicating with customers regarding products, services or enquiries
Providing customer support and aftersales assistance
Improving our website, products and services
Monitoring website performance and visitor engagement
Sending marketing communications where permitted by law
Maintaining the security and functionality of our website
Complying with legal and regulatory obligations
Maintaining accurate business and customer records

We will only process personal information where we have a valid lawful basis for doing so.

5. Legal Basis for Processing Personal Information

Under the UK GDPR, we must have a lawful basis for collecting and processing your personal information.

Depending on the circumstances, we may rely on the following legal bases:

Consent

Where you have given clear consent for us to process your personal information for a specific purpose, such as receiving certain marketing communications or enabling non-essential cookies.

Contractual Necessity

Where processing your personal information is necessary to fulfil a contract with you or take steps at your request before entering into a contract.

Legal Obligation

Where processing is necessary to comply with legal or regulatory requirements, including accounting, taxation and record-keeping obligations.

Legitimate Interests

Where processing is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms.

These interests may include responding to business enquiries, maintaining customer relationships, improving our services, preventing fraud and protecting our website.

Where we rely on legitimate interests, we consider the potential impact on individuals and their rights.

6. Marketing Communications

We may occasionally contact you with information about our products, services, promotions, company news or other relevant business updates.

We will only send electronic marketing communications where we have the appropriate consent or another lawful permission under PECR.

Where applicable, this may include marketing to existing customers under the conditions of the soft opt-in exemption.

You can opt out of receiving marketing communications at any time by:

Clicking the unsubscribe link in our marketing emails
Contacting us directly using the details provided in this Privacy Policy

We will respect your marketing preferences and process opt-out requests appropriately.

We will not sell your personal information to third-party marketing companies.

7. Cookies and Website Analytics

Our website may use cookies and similar technologies to improve functionality, understand visitor behaviour and enhance the overall user experience.

Cookies are small text files stored on your device when you visit a website.

Depending on the services enabled on our website, cookies may include:

Essential Cookies

These are necessary for the website to function correctly, including security, navigation and essential functionality.

Analytics Cookies

These help us understand how visitors use our website, including which pages are visited and how users interact with our content.

Functional Cookies

These enable additional website features and may remember preferences selected by visitors.

Marketing Cookies

These may be used to measure advertising effectiveness and deliver relevant advertising content.

Where legally required, we will obtain your consent before placing non-essential cookies or using similar tracking technologies.

You can manage your cookie preferences through our website’s cookie consent controls, where available, or through your browser settings.

Further information about the specific cookies used, their providers and their duration should be provided in our Cookie Policy or cookie preferences panel.

8. Sharing Your Personal Information

We may share personal information with trusted third parties where necessary to operate our business and provide our services.

These may include:

Website hosting and IT service providers
Customer relationship management (CRM) providers
Email and marketing communication platforms
Payment processing providers
Delivery and logistics partners
Professional advisers, including accountants and legal representatives
Analytics and website performance providers
Regulatory authorities or law enforcement agencies where legally required

We require third-party service providers processing personal information on our behalf to maintain appropriate security and confidentiality measures.

We will only share personal information where there is an appropriate lawful basis and a legitimate reason to do so.

9. International Data Transfers

Some of the third-party services we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that appropriate safeguards are in place in accordance with applicable UK data protection legislation.

These may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another legally recognised transfer mechanism.

You may contact us for further information about relevant international transfers and the safeguards used.

10. How We Protect Your Information

We take the security of personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, loss or destruction.

Depending on the information and systems involved, these measures may include:

Secure website connections using HTTPS encryption
Password-protected systems and accounts
Restricted access to personal information
Appropriate data storage and backup procedures
Security monitoring and software updates
Internal procedures for handling personal information

Although we take reasonable precautions to protect personal information, no method of electronic transmission or storage can be guaranteed to be completely secure.

11. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including satisfying applicable legal, accounting and reporting requirements.

Retention periods depend on the type of information and the purpose for which it is processed.

For example:

Customer and transaction records may be retained for periods required by tax, accounting and contractual obligations.
Enquiry information will be retained for a period appropriate to the enquiry and any resulting business relationship.
Marketing information will be retained while we have a lawful reason to use it, subject to your marketing preferences and applicable retention requirements.
Website analytics information will be retained in accordance with the settings and retention periods of the relevant analytics services.

When personal information is no longer required, we will securely delete or anonymise it, unless continued retention is legally necessary.

12. Your Data Protection Rights

Under the UK GDPR, you have a number of rights regarding your personal information, subject to applicable conditions and exemptions.

These include:

Right of Access

You can request a copy of the personal information we hold about you.

Right to Rectification

You can request that inaccurate or incomplete personal information is corrected.

Right to Erasure

You can request the deletion of your personal information in certain circumstances.

Right to Restrict Processing

You can request that we restrict the processing of your personal information in certain circumstances.

Right to Data Portability

You may request to receive certain personal information in a structured, commonly used and machine-readable format.

Right to Object

You can object to certain types of processing, including processing based on legitimate interests.

You have the right to object to the processing of your personal information for direct marketing purposes at any time.

Rights Relating to Automated Decision-Making

You have rights and protections relating to certain decisions made solely through automated processing that produce legal or similarly significant effects.

Right to Withdraw Consent

Where we rely on your consent to process personal information, you may withdraw that consent at any time. Withdrawal will not affect processing lawfully carried out before consent was withdrawn.

To exercise your rights, please contact us using the details provided in Section 2.

We will respond to requests within the timeframes required by applicable data protection legislation, normally within one month.

13. Third-Party Websites

Our website may contain links to external websites operated by third parties.

We are not responsible for the privacy practices, content or security of these external websites.

We recommend reviewing the privacy policies of any third-party websites before providing personal information.

14. Children’s Privacy

Our website is not specifically intended for children, and we do not knowingly collect personal information from children through our general website enquiry processes.

If we become aware that personal information has been collected from a child without an appropriate lawful basis, we will take suitable steps to address the matter.

15. Information Required to Provide Our Services

Certain personal information may be necessary for us to respond to enquiries, provide quotations, process orders or fulfil contractual obligations.

Where information is required for these purposes, we will make this clear at the point of collection.

If you choose not to provide information that is necessary for a particular service, we may be unable to process your request or provide that service.

16. Automated Decision-Making and Profiling

Where we do not use solely automated decision-making that produces legal or similarly significant effects, we will not make such decisions about individuals through our website.

If this changes, we will update this Privacy Policy and provide any additional information required by law.

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in legislation, our business practices or the way we process personal information.

Any updates will be published on this page, and the date at the top of the policy will be revised accordingly.

We encourage visitors to review this Privacy Policy periodically.

Where significant changes affect how we process personal information, we will provide additional notification where required by law.

18. Complaints and Contact Information

If you have any questions, concerns or complaints regarding how we handle your personal information, please contact us in the first instance.

Company: Boss Plant Sales Limited