Privacy policy
1. Introduction & Scope
One Stop Render Supplies Ltd ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring you have a positive experience on our website and when using our services. This Privacy Policy explains how we collect, use, disclose, and process your personal information when you visit our website at www.onestoprender.co.uk (the "Website"), make a purchase, interact with us, or otherwise communicate with us.
Scope: This Privacy Policy applies to all personal information we collect through any channel, including:
- Our Website
- Email communications
- Phone calls
- Social media
- Third-party platforms
- In-person transactions
Legal Basis: Our Website is hosted on the Shopify platform. By accessing and using our Website and Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use our Website.
2. Data Controller Information
One Stop Render Supplies Ltd is the data controller for personal information collected through our Website and services, meaning we determine the purposes and means of processing your personal information.
Contact Details:
- Address: One Stop Render Supplies Ltd (company number 16922752), Unit 4 Slough Business Centre, Bristol Way, Stoke Gardens, Slough, SL1 3TD, United Kingdom
- Email: info@onestoprender.co.uk
- Phone: +44 7955 544999
- Website: www.onestoprender.co.uk
3. Personal Information We Collect
We collect or process personal information in various categories, depending on how you interact with us. Personal information means information that identifies you or can reasonably be linked to you. We do not collect information that is anonymized or de-identified so that it cannot identify you.
3.1 Information You Provide Directly
Account Registration & Profile Information
- Name, email address, phone number
- Date of birth (if provided)
- Username and password
- Billing address
- Shipping/delivery address
- Payment preferences and settings
- Profile picture or avatar (if provided)
- Communication preferences
Payment & Financial Information
- Credit card, debit card, or bank account details
- Payment card type and last 4 digits
- Billing information
- Transaction history
- Payment confirmation records
- VAT/Tax ID (if applicable)
Purchase & Transaction Information
- Products viewed, added to cart, or purchased
- Order history and details
- Items on your wishlist
- Returns and exchanges
- Refund requests
- Warranty information
Communication & Feedback
- Messages sent through our contact forms
- Customer support inquiries and responses
- Email communications with our team
- Reviews and product ratings
- Survey responses and feedback
- Complaints and dispute information
Account Settings & Preferences
- Security questions and answers
- Privacy settings and preferences
- Marketing preferences
- Notification settings
- Saved addresses and payment methods
- Shopping preferences
3.2 Information Collected Automatically
Device & Browser Information
- Device type (desktop, mobile, tablet)
- Operating system and version
- Browser type and version
- Mobile device identifiers
- Device settings and configurations
- Screen resolution and display settings
Network & Connection Information
- Internet Protocol (IP) address
- Internet Service Provider (ISP)
- Geographic location (city, region, country)
- Connection speed and type
- Network identifiers
Website Usage & Interaction
- Pages visited and time spent on each page
- Links clicked and navigation paths
- Search queries and filters used
- Products viewed and interactions
- Scroll depth and engagement metrics
- Features used within the Website
- Error messages and technical issues encountered
- Referrer information (where you came from)
Cookies & Similar Technologies (See Section 6)
- Session identifiers
- Persistent cookies
- Pixel tags and web beacons
- Local storage data
- Cached information
Location Information
- City and country (inferred from IP address)
- Precise location (if you grant permission)
- Delivery location based on address provided
Engagement Metrics
- Click-through rates
- Bounce rates
- Time on site
- Page performance data
- User journey mapping
- Conversion tracking
3.3 Information from Third Parties
Service Providers
- Payment processors (e.g., Stripe, PayPal)
- Shipping and logistics partners (e.g., Pallet Ways, Royal Mail)
- Email service providers
- Customer support platforms
- Analytics providers
- Fraud detection services
Business Partners & Integrations
- Social media platforms (if you use social login)
- Marketing partners
- Affiliate networks
- Directory services
- Review platforms
Publicly Available Sources
- Business registries and public records
- Social media profiles (if linked to your account)
- Public databases
Other Users & Customers
- Information other customers provide about you (e.g., referrals, reviews mentioning you)
- Shared account information (family members or authorized representatives)
4. How We Collect Information
4.1 Active Collection (Information You Provide)
- Forms & Sign-ups: When you create an account, place an order, or subscribe to our newsletter
- Checkout Process: When you enter payment and shipping information
- Customer Support: When you contact us via email, phone, or contact form
- Feedback & Reviews: When you submit reviews, ratings, or feedback
- Surveys & Contests: When you participate in surveys or promotions
- Social Media: When you interact with us on social platforms or use social login
4.2 Passive Collection (Automatic)
- Cookies & Web Beacons: We automatically collect data through cookies and similar tracking technologies (see Section 6)
- Server Logs: We collect information from server logs about your access to the Website
- Google Analytics: We use Google Analytics to track visitor behavior (see Section 7.1)
- Google Ads & Remarketing: We track conversions and user behavior for advertising purposes (see Section 7.2)
- Third-Party Analytics: We use other analytics platforms to understand website usage
- Pixels & Tags: Third-party pixels track your activity across websites
4.3 Information from Service Providers
Our service providers may collect and share information with us as part of providing services, including:
- Payment processors sharing transaction confirmations
- Shipping providers sharing delivery tracking data
- Email platforms sharing engagement metrics
- Analytics services sharing user behavior data
5. How We Use Your Personal Information
We use personal information for the following purposes:
5.1 Providing Services
- Creating and maintaining your account
- Processing orders and payments
- Fulfilling and shipping orders
- Handling returns, exchanges, and refunds
- Providing customer support and responding to inquiries
- Remembering your preferences and items you're interested in
- Enabling you to post reviews and ratings
- Facilitating communications about your transactions
- Personalizing your shopping experience
- Recommending products based on your history
5.2 Marketing & Advertising
- Sending promotional emails about new products, sales, and offers
- Sending SMS marketing messages (if you opted in)
- Creating targeted advertising campaigns on our Website and other websites
- Showing you ads for products you've viewed or added to cart (remarketing)
- Analyzing marketing campaign effectiveness
- Conducting A/B testing on marketing messages
- Creating audience segments for marketing purposes
- Personalizing website content based on your interests
- Sending birthday or anniversary offers
- Notifying you of special promotions or limited-time offers
Opt-Out: You can opt out of promotional emails by clicking the "Unsubscribe" link in any email. You can manage marketing preferences in your account settings.
5.3 Website Improvement & Analytics
- Analyzing website traffic and usage patterns
- Identifying which features and content are most popular
- Improving website performance and user experience
- Testing new features and functionality
- Conducting market research and trend analysis
- Creating aggregate reports and insights
- Optimizing page load times and functionality
- Identifying and fixing technical issues
- Understanding customer journey and behavior
5.4 Security & Fraud Prevention
- Detecting, investigating, and preventing fraudulent transactions
- Protecting against unauthorized access and cyberattacks
- Verifying your identity and authentication
- Monitoring for suspicious activity and security threats
- Complying with fraud prevention standards (PCI DSS)
- Protecting our Website and services from misuse
- Investigating and responding to security incidents
- Maintaining audit trails and security logs
- Protecting customer data and privacy
5.5 Legal & Regulatory Compliance
- Complying with UK and EU data protection laws (GDPR, UK GDPR, Data Protection Act 2018)
- Responding to valid legal requests from law enforcement
- Complying with tax and regulatory obligations
- Enforcing our Terms of Service and other agreements
- Investigating legal claims and disputes
- Participating in legal proceedings and litigation
- Maintaining records for regulatory compliance
- Fulfilling obligations under consumer protection laws
5.6 Business Operations
- Accounting and financial record-keeping
- Auditing and internal controls
- Business planning and forecasting
- Quality assurance and training
- Organizational development
- Merger, acquisition, or sale of business
- Corporate governance and compliance monitoring
5.7 Communication
- Sending transactional emails (order confirmations, shipping updates, receipts)
- Providing customer service responses
- Sending account notifications and alerts
- Notifying you of policy changes
- Requesting feedback or surveys
- Sending newsletters (if subscribed)
6. Cookies & Tracking Technologies
6.1 What Are Cookies?
Cookies are small text files stored on your device that help us recognize you when you return to our Website. We use various types of cookies to improve your experience and provide personalized services.
6.2 Types of Cookies We Use
Essential/Necessary Cookies
- Session cookies (maintain your login session)
- Security cookies (protect your account)
- Functionality cookies (remember your preferences)
- These are required for the Website to function properly and cannot be disabled
Performance & Analytics Cookies
- Google Analytics cookies (track website usage)
- Shopify analytics cookies (understand customer behavior)
- Hotjar cookies (track user interactions and heatmaps)
- Purpose: Analyze how visitors use our Website
- Can be declined: Yes, through cookie consent preferences
Marketing & Remarketing Cookies
- Google Ads cookies (track conversions and show targeted ads)
- Facebook Pixel (track user behavior for ad targeting)
- LinkedIn cookies (professional network targeting)
- Mailchimp cookies (email marketing tracking)
- Purpose: Show you relevant ads on other websites
- Can be declined: Yes, through cookie consent preferences
Third-Party Cookies
- Social media platforms may set cookies when you use social login
- Payment processors may set cookies for fraud prevention
- Affiliate networks may set cookies to track referrals
6.3 Cookie Duration
- Session cookies: Deleted when you close your browser
- Persistent cookies: Stored for 6-24 months
- Analytics cookies: Usually stored for 26 months (Google Analytics default)
6.4 Cookie Consent
When you first visit our Website, you will see a cookie consent banner. You can:
- Accept all cookies: Essential + Performance + Marketing cookies
- Accept necessary only: Only essential cookies required for function
- Customize: Choose which types you want to allow
- Manage preferences: Change your choices anytime in cookie settings
6.5 Other Tracking Technologies
Web Beacons & Pixels
- We use tracking pixels on our Website and in emails
- Third-party pixels (Google, Facebook) track your behavior
- These help us measure marketing effectiveness
Local Storage & IndexedDB
- We store some information in your browser's local storage
- This persists across sessions and helps improve performance
Server-Side Tracking
- We track user behavior through server logs
- This helps us understand website traffic patterns
6.6 Do Not Track Signals
Some browsers include a "Do Not Track" feature. Currently, there is no industry standard for recognizing or implementing DNT signals. If you enable DNT in your browser, we will still collect analytics data through our Website and services, but we will respect your preference not to be targeted by third-party advertising networks when technically feasible.
7. Google Services & Integrations
7.1 Google Analytics
What We Use It For:
- Tracking website traffic and user behavior
- Understanding which pages are popular
- Analyzing visitor demographics and interests
- Measuring marketing campaign effectiveness
- Identifying technical issues and performance bottlenecks
Data Collected:
- Pages visited and time spent
- Device and browser information
- Geographic location
- Traffic sources (where you came from)
- User interactions and events
- Conversion tracking (purchases, sign-ups)
Data Retention: Google Analytics retains data for up to 26 months by default
How to Opt Out:
- Use the Google Analytics Opt-Out Browser Add-on
- Adjust your cookie consent preferences
- Visit: https://myaccount.google.com/data-and-privacy
Privacy Policy: https://policies.google.com/privacy
7.2 Google Ads & Remarketing
What We Use It For:
- Showing you ads for products you've viewed
- Retargeting you with relevant offers
- Measuring ad performance and conversions
- Creating audience segments for targeted advertising
- A/B testing ad creative and messaging
Data Collected:
- Pages you visit and products viewed
- Items added to cart or purchased
- Conversion events (purchases)
- Device and browser information
- Demographic data (age, gender, interests)
Audience Segments:
- People who visited our site but didn't purchase
- People who added items to cart
- Past customers (for win-back campaigns)
- Similar audiences to our best customers
How to Opt Out:
- Manage your Google Ad preferences: https://adssettings.google.com
- Use Google's Ads Transparency and Control tool
- Enable "Opt out of personalized ads" in your Google Account
Privacy Policy: https://policies.google.com/privacy
7.3 Google Shopping Feed
What We Use It For:
- Listing products on Google Shopping
- Creating product ads on Google
- Tracking product performance
Data Shared with Google:
- Product names, descriptions, prices, images
- Inventory levels
- Product reviews and ratings
- Sales data and conversions
Privacy Policy: https://policies.google.com/privacy
7.4 Google Customer Reviews
What We Use It For:
- Collecting and displaying customer reviews
- Building trust through verified purchase reviews
- Tracking customer satisfaction
Data Shared with Google:
- Customer names (first name or initials)
- Review text and ratings
- Purchase confirmation
- Email address (for verification only)
Privacy Policy: https://policies.google.com/privacy
7.5 Google Fonts & CDN
What We Use It For:
- Loading fonts to display our Website
- Content delivery optimization
Data Collected:
- IP address (when loading fonts)
- User agent (browser type)
Privacy Policy: https://policies.google.com/privacy
8. Third-Party Disclosures & Data Sharing
8.1 Service Providers
We share personal information with service providers who perform services on our behalf:
Payment Processing
- Stripe, PayPal, Square
- Process your payment securely
- Comply with PCI DSS standards
Shipping & Logistics
- Pallet Ways (bulk shipping)
- Royal Mail, DPD, Parcelforce (standard delivery)
- Track and deliver your orders
Email & Communications
- Mailchimp (email marketing)
- Zendesk (customer support)
- Twilio (SMS messaging)
Analytics & Insights
- Google Analytics (website analytics)
- Shopify Analytics (platform analytics)
- Hotjar (user behavior tracking)
- Lucky Orange (session recording)
Customer Support & Feedback
- Zendesk (support ticketing)
- Trustpilot (review collection)
- Survicate (surveys)
Hosting & Infrastructure
- Shopify (platform hosting)
- AWS/Google Cloud (data storage)
- Cloudflare (CDN & security)
Fraud Prevention & Security
- Sift Science (fraud detection)
- MaxMind (risk assessment)
- Payment processors (fraud verification)
Advertising & Marketing
- Google Ads (remarketing)
- Facebook Ads (marketing campaigns)
- LinkedIn Ads (B2B targeting)
8.2 Business Partners
We may share information with business partners for:
- Joint marketing campaigns
- Co-branded services
- Referral partnerships
- Affiliate programs
Your Choices: You can opt out of partner sharing by contacting us.
8.3 Legal Requirements
We may disclose personal information when required by law or in response to:
- Subpoenas or court orders
- Law enforcement requests
- Government agency requests
- Regulatory compliance obligations
- Protecting our legal rights and the rights of others
- Investigating fraud or security incidents
8.4 Business Transfers
If our business is involved in a merger, acquisition, bankruptcy, or sale of assets:
- Your personal information may be transferred as part of that transaction
- We will provide notice before personal information becomes subject to a different privacy policy
- You will have an opportunity to opt out if applicable
8.5 Aggregate & De-identified Data
We may share aggregate or de-identified information that cannot identify you with:
- Business partners for market analysis
- Researchers for academic studies
- Publicly in reports and presentations
- This data cannot be used to identify you
9. International Data Transfers
9.1 Where Your Data Is Stored
Your personal information is collected, stored, and processed in the United Kingdom and European Economic Area (EEA). However, some of our service providers (particularly those hosted by US companies like Google, Shopify, AWS) may process your data outside the UK/EEA.
9.2 Standard Contractual Clauses
When we transfer personal information outside the UK/EEA, we rely on:
- European Commission Standard Contractual Clauses (SCCs)
- UK International Data Transfer Agreement (IDTA)
- Adequacy decisions (for countries with equivalent data protection)
These safeguards ensure your data receives adequate protection even outside the UK/EEA.
9.3 Your Rights Regarding Transfers
You have the right to:
- Ask for details of the transfer mechanisms used
- Request information about safeguards in place
- Contact us if you have concerns about international transfers
10. Data Retention
10.1 Retention Periods by Data Type
Account Information
- Retention: For as long as your account is active, plus 3 years after account closure
- Reason: Maintain account history, handle disputes, comply with tax laws
Payment & Financial Information
- Retention: 7 years
- Reason: UK tax law requires retention for 6 years; we retain 7 for accounting purposes
Transaction & Order Information
- Retention: For as long as needed to provide services + 3 years
- Reason: Handle returns, refunds, disputes, and warranty claims
Communications & Support Records
- Retention: 3 years from last communication
- Reason: Handle follow-up issues and resolve disputes
Marketing & Communications
- Retention: Until you unsubscribe
- Reason: Deliver marketing communications you've consented to
Website Analytics
- Retention: 26 months (Google Analytics default)
- Reason: Track trends and improve website performance
Cookies
- Retention: Varies by cookie type (see Section 6)
- Reason: Session management, analytics, marketing
Legal & Compliance Records
- Retention: As required by law, typically 7 years
- Reason: Regulatory compliance and legal protection
10.2 Deletion Requests
When you request deletion of your personal information:
- We will delete it within 30 days (or as required by law)
- Some information may be retained for legal, tax, or operational reasons
- Deleted data cannot be recovered from live systems, but may exist in backups for up to 3 months
11. Data Security
11.1 Security Measures
We implement technical and organizational security measures to protect your personal information:
Encryption
- SSL/TLS encryption for data in transit (HTTPS)
- AES-256 encryption for data at rest
- Encrypted payment data storage
Access Controls
- Role-based access restrictions
- Multi-factor authentication for staff
- Principle of least privilege access
- Regular access audits
Network Security
- Firewalls and intrusion detection systems
- DDoS protection via Cloudflare
- Regular security scanning and penetration testing
- PCI DSS Level 1 compliance for payment data
Data Protection
- Regular backups (encrypted)
- Disaster recovery procedures
- Data loss prevention (DLP) systems
- Secure deletion protocols
Employee Security
- Background checks for staff
- Confidentiality agreements
- Data protection training
- Incident response procedures
Vendor Management
- Security assessments of service providers
- Data processing agreements in place
- Regular vendor audits
- Requirement to report security incidents
11.2 Limitations
No Perfect Security: While we use industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.
Your Responsibility: You are responsible for:
- Keeping your account credentials confidential
- Not sharing your password with anyone
- Logging out of your account on shared devices
- Reporting unauthorized access immediately
Data in Transit: Information you send to us over the internet may not be secure while in transit. We recommend not sending sensitive information through unsecured channels.
12. Your Rights & Choices
12.1 Rights Available to All Users
Regardless of where you live, you have the right to:
Access Your Information
- Request a copy of personal information we hold about you
- Understand how we use and process your data
- Learn about third parties who have received your data
Correct Information
- Request correction of inaccurate personal information
- Update outdated information
- Request completeness of your data
Delete Information
- Request deletion of your personal information (right to be forgotten)
- Exceptions: Where we have a legal obligation to retain data or legitimate business reasons
- Deletion does not apply to de-identified or aggregated data
Opt Out of Marketing
- Unsubscribe from promotional emails (click link in email)
- Manage preferences in your account settings
- Request removal from mailing lists via email or phone
Data Portability
- Request a copy of your data in a structured, machine-readable format (CSV, JSON)
- Request transfer to another service provider
- Exceptions: Where technically unfeasible or would violate others' rights
Manage Cookies & Tracking
- Adjust cookie consent preferences
- Opt out of analytics tracking
- Opt out of targeted advertising
- Disable cookies in browser settings (may affect functionality)
12.2 Additional Rights for UK & EEA Residents
If you live in the United Kingdom or European Economic Area, you have additional rights under GDPR and UK GDPR:
Restriction of Processing
- Request that we limit how we use your data
- Useful when accuracy is questioned or processing is unlawful
- We will still store the data but restrict its use
Object to Processing
- Object to direct marketing (we will stop immediately)
- Object to profiling and automated decision-making
- Object to processing based on legitimate interests
Automated Decision-Making & Profiling
- Request information about automated decisions affecting you
- Request human review of automated decisions
- Right not to be subject to decision based solely on automated processing
- Note: We do not use your data for automated decisions that have legal effects
Withdraw Consent
- Withdraw consent at any time (doesn't affect prior processing)
- Request confirmation consent was withdrawn
- Effect is future processing only
Lodge a Complaint
- Complain to your local data protection authority
- UK: Information Commissioner's Office (ICO)
- EEA: Your national data protection authority
- You can still request our response first
12.3 How to Exercise Your Rights
Submit a Request:
- Email: info@onestoprender.co.uk
- Phone: +44 7955 544999
- Mail: One Stop Render Supplies Ltd (company number 16922752), Unit 4 Slough Business Centre, Bristol Way, Stoke Gardens, Slough, SL1 3TD
- Through your account settings on our Website
Verification: We may ask you to verify your identity before processing your request. This protects your privacy and security.
Authorized Agent: You can designate an authorized agent to submit requests on your behalf. We require proof of authorization.
Response Timeline:
- Most requests: 30 days
- Complex requests: Up to 90 days
- We will notify you if we need an extension
No Discrimination: We will not discriminate against you for exercising your rights. You will not be denied services or charged differently.
13. Children's Privacy
13.1 Age Restriction
Our Website and services are not intended for children under 18 years old. We do not knowingly collect personal information from children under 18.
If you are under 18: Please do not use our Website or provide us with personal information.
If you are a parent/guardian: If your child has provided us with personal information without your consent, please contact us immediately, and we will delete it.
13.2 Parental Access
Parents and guardians can:
- Request access to personal information we hold about their child
- Request deletion of information about their child
- Revoke any consent previously given on behalf of a child
Contact: info@onestoprender.co.uk with proof of parental relationship.
13.3 COPPA & Similar Laws
We comply with:
- Children's Online Privacy Protection Act (COPPA) - US
- UK Online Safety Bill provisions on children's data
- GDPR special protections for children under 16
14. Third-Party Links & Services
14.1 External Websites
Our Website may contain links to third-party websites and services not operated by us:
- We are not responsible for the privacy practices of external sites
- Review their privacy policies before providing information
- Links don't constitute endorsement of third-party practices or content
- Use at your own risk – we cannot guarantee their security
14.2 Social Media Integration
If you use social login (Facebook, Google, etc.):
- You authenticate through that platform
- We receive limited information from their API
- Their privacy policy applies to their data collection
- You control what information you share via privacy settings
14.3 Third-Party Content
Information you share on public areas of our Website or on social media:
- May be viewed by other users without restrictions
- May be indexed by search engines
- May be used by others for various purposes
- We are not responsible for how others use this information
15. Complaints & Dispute Resolution
15.1 How to Complain
If you believe we have violated your privacy rights:
Step 1: Contact Us
- Email: info@onestoprender.co.uk
- Phone: +44 7955 544999
- Mail: One Stop Render Supplies Ltd (company number 16922752), Unit 4 Slough Business Centre, Bristol Way, Stoke Gardens, Slough, SL1 3TD
- Timeline: We will respond within 30 days
Step 2: Appeal Our Response
- If unsatisfied with our response, you can request an appeal
- Provide additional information or concerns
- We will reconsider within 30 days
Step 3: Data Protection Authority
- If still unsatisfied, you have the right to lodge a complaint with:
- UK: Information Commissioner's Office (ICO) - www.ico.org.uk
- EEA: Your national data protection authority
15.2 Dispute Resolution
For disputes we cannot resolve:
- We will cooperate with regulatory authorities
- We comply with their rulings and recommendations
- You have the right to pursue legal remedies
16. Relationship with Shopify
16.1 Shopify Processing
Our Website is powered by Shopify, which processes personal information on our behalf:
- Shopify provides platform hosting and services
- Your data is transmitted to and stored with Shopify
- Shopify may share data with sub-processors (payment providers, analytics, etc.)
- Shopify implements security and privacy measures
16.2 Shopify's Role
We are the data controller – we determine how data is used
Shopify is the data processor – they process data on our instructions
Shared responsibility for some features (e.g., Shopify analytics for business optimization)
16.3 Your Rights with Shopify
Shopify's privacy policy: https://www.shopify.com/legal/privacy
You can exercise rights related to Shopify processing through:
- Our contact information (we will forward to Shopify)
- Shopify Privacy Portal: https://privacy.shopify.com/en
- Shopify's privacy requests process
17. California Privacy Rights (CCPA/CPRA)
Only applicable if you are a California resident
17.1 Rights Under CCPA/CPRA
California residents have the right to:
Right to Know (Access)
- Know what personal information is collected, used, and shared
- Receive a copy of your personal information
- Know the purposes for collection
Right to Delete
- Request deletion of personal information we collected
- Exceptions: Where we have legal obligations or legitimate business reasons
Right to Correct
- Request correction of inaccurate information
- Receive confirmation of correction
Right to Opt-Out
- Opt out of "sale" or "sharing" of personal information
- "Sale" means exchange for valuable consideration
- "Sharing" means disclosure for cross-context behavioral advertising
Right to Limit Use
- Limit use of personal information to providing requested services
- Limit use of sensitive personal information
Right to Non-Discrimination
- Not be denied services or charged more for exercising rights
17.2 How to Submit Requests
- Email: info@onestoprender.co.uk
- Phone: +44 7955 544999
- Response: Within 45 days (up to 90 days for complex requests)
17.3 Sensitive Personal Information (CPRA)
We do not knowingly collect sensitive personal information such as:
- Social Security numbers
- Financial account information with access credentials
- Precise geolocation
- Racial or ethnic origin
- Religious or philosophical beliefs
- Union membership
- Genetic information
- Biometric information
18. Updates to This Privacy Policy
18.1 Changes & Modifications
We may update this Privacy Policy:
- To reflect changes in our practices
- To comply with legal requirements
- For operational or technical reasons
- To improve clarity and user protection
18.2 Notification of Changes
When we make material changes:
- We will update the "Last Updated" date at the top
- We will post the revised policy on this page
- For major changes, we will provide additional notice (email, banner, etc.)
- Your continued use constitutes acceptance of changes
18.3 Reviewing Updates
We recommend reviewing this Privacy Policy periodically to stay informed of how we protect your information.
19. Additional Information
19.1 Lawful Basis for Processing (GDPR)
We process your personal information based on:
Contract
- Fulfilling a purchase or service request
- Creating and managing your account
Legitimate Interests
- Improving our Website and services
- Marketing and advertising (balanced against your rights)
- Fraud prevention and security
- Business operations and administration
Consent
- Marketing communications (if you opt in)
- Non-essential cookies
- Some analytics and tracking
Legal Obligation
- Tax and regulatory compliance
- Responding to law enforcement
- Protecting legal rights
Vital Interests
- Protecting health, safety, or security (rare circumstances)
19.2 Data Protection Impact Assessment
We conduct Data Protection Impact Assessments (DPIA) for:
- New processing activities
- High-risk data processing
- Changes to our practices
- Third-party integrations
19.3 Automated Decision-Making
We do not use your personal information for automated decision-making with legal effects, such as:
- Automated credit decisions
- Automated employment decisions
- Automated loan approvals
- Other legally binding automated decisions
20. Contact Information
20.1 Data Controller Contact
One Stop Render Supplies Ltd
📧 Email:
info@onestoprender.co.uk
📞 Phone:
+44 7955 544999
📬 Mailing Address:
One Stop Render Supplies Ltd (company number 16922752)
Unit 4 Slough Business Centre
Bristol Way, Stoke Gardens
Slough, SL1 3TD
United Kingdom
🌐 Website:
www.onestoprender.co.uk
20.2 Response Times
We aim to respond to all inquiries within:
- 24 business hours for general questions
- 30 days for data subject access requests
- 30 days for other rights requests
20.3 Privacy Officer
We have appointed a Data Protection Officer to oversee our privacy compliance:
Contact DPO:
privacy@onestoprender.co.uk
21. Regulatory Information
21.1 Legal Compliance
This Privacy Policy complies with:
- ✅ GDPR (General Data Protection Regulation - EU)
- ✅ UK GDPR (United Kingdom)
- ✅ Data Protection Act 2018 (UK)
- ✅ PECR (Privacy and Electronic Communications Regulations)
- ✅ CCPA/CPRA (California Privacy Rights Act)
- ✅ Consumer Rights Act 2015 (UK)
- ✅ ePrivacy Regulations (UK & EU)
21.2 Supervisory Authorities
UK:
Information Commissioner's Office (ICO)
www.ico.org.uk
EU:
European Data Protection Board (EDPB)
https://edpb.europa.eu
22. Cookie Consent Banner
Our Website displays a cookie consent banner on first visit. You can:
- Accept All: Consent to all cookies
- Reject All: Decline non-essential cookies
- Preferences: Customize cookie settings
- Learn More: Read this Privacy Policy
You can change cookie preferences anytime in your browser settings or by contacting us.
23. Final Notes
23.1 Acknowledgment
By using our Website and services, you acknowledge that:
- You have read and understood this Privacy Policy
- You consent to our collection and use of personal information as described
- You accept our practices regarding cookies and tracking
23.2 Questions?
If you have any questions about this Privacy Policy or our privacy practices:
- Contact us using the information in Section 20
- We're committed to being responsive and helpful
- Your privacy is our priority
Last Updated: August 24, 2026
Version: 2.0
Effective Date: August 24, 2026
This Privacy Policy is reviewed and updated annually, or more frequently if required by law.
Thank you for trusting One Stop Render Supplies Ltd with your personal information.
- Choosing a selection results in a full page refresh.
- Opens in a new window.