UK GDPR Policy
This UK GDPR Policy sets out how Radius Tools Limited approaches accountability, transparency, lawful processing and individual rights under the UK General Data Protection Regulation and the Data Protection Act 2018.
1. Data controller
Radius Tools Limited, company number 16810167, 12 Bergen Way, North Lynn Industrial Estate, King's Lynn, PE30 2JG, is the controller for business contact, enquiry, website and administration data processed in connection with this website and associated trade communications.
2. Data protection principles
We aim to process personal data lawfully, fairly and transparently; collect data for specified and legitimate purposes; keep data adequate and limited; maintain accuracy; retain data only as long as necessary; protect data through appropriate security; and maintain accountability for processing decisions.
3. Categories of data subjects
Data subjects may include customer contacts, supplier contacts, prospective trade buyers, professional advisers, website users, contractors, delivery contacts, representatives of corporate entities and individuals who communicate with us in a business capacity.
4. Categories of personal data
- Business identity and contact details.
- Enquiry and quotation records.
- Order, invoice, delivery and account information.
- Technical website data, cookies and security logs.
- Correspondence, call notes and complaint or dispute information.
5. Lawful basis register
| Processing activity | Typical lawful basis | Purpose |
|---|---|---|
| Responding to trade enquiries | Legitimate interests / contract steps | To provide relevant commercial information and quotation support. |
| Order and account administration | Contract / legal obligation | To fulfil orders, issue documents and maintain records. |
| Website security logging | Legitimate interests | To protect systems, prevent misuse and investigate incidents. |
| Tax and accounting records | Legal obligation | To comply with HMRC and statutory requirements. |
| Optional marketing | Consent or legitimate interests where lawful | To provide relevant B2B updates with opt-out options. |
6. Individual rights process
Requests for access, rectification, erasure, restriction, objection, portability or consent withdrawal should be sent to hamze@radiustools.co.uk. We may request information to verify identity and authority. We aim to respond within one month unless the request is complex or multiple requests are made, in which case the permitted extension may be used.
7. Right of access
Individuals may request confirmation of whether we process their personal data and receive a copy of relevant personal data, subject to exemptions, third-party confidentiality, legal privilege and disproportionate effort considerations.
8. Right to rectification
Where personal data is inaccurate or incomplete, individuals may request correction. We may take reasonable steps to verify proposed corrections before altering business records.
9. Right to erasure
Erasure requests will be assessed against legal retention requirements, accounting duties, contractual necessity, dispute protection, legitimate business records and other lawful reasons for continued retention. Where full deletion is not possible, data may be restricted or archived where appropriate.
10. Data portability
Where portability applies, data provided by the individual and processed by automated means under consent or contract may be supplied in a structured, commonly used and machine-readable format where technically feasible.
11. Processor management
Where third-party processors are used for hosting, email, analytics, backups, security, accounting or IT support, we expect appropriate contractual obligations, confidentiality, security and lawful processing standards.
12. Data breaches
Suspected personal data breaches should be investigated promptly. Where a breach creates a risk to individuals, notification to the Information Commissioner's Office should be considered within the required timeframe. Where the risk is high, affected individuals may also need to be informed.
13. Complaints
Individuals can contact us first so we can address the issue. They also have the right to complain to the Information Commissioner's Office.