Privacy Policy

1. Who we are

Tri Star UK Ltd (“we”, “our”, “us”) is a company registered in England and Wales. We supply tarpaulins, dust sheets, sacks, bags, and decorating materials to trade and retail customers throughout the UK. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website or purchase from us.

2. Data we collect

We may collect the following personal data:

• Identity data: first name, last name, company name
• Contact data: email address, telephone number, delivery address
• Transaction data: details of products purchased, payment method, order history
• Technical data: IP address, browser type, pages visited, time spent on site
• Marketing data: your preferences for receiving marketing from us

We do not collect special category data (e.g. health, racial origin, political opinions).

3. How we use your data

We use your personal data to:

• Process and fulfil your orders (contractual necessity)
• Manage your account and trade account application
• Send order confirmation and shipping notifications
• Respond to enquiries and provide customer support
• Send marketing emails where you have opted in (you can unsubscribe at any time)
• Improve our website and services (legitimate interests)
• Comply with legal obligations (e.g. tax records)

4. Legal basis for processing

We process your data under the following lawful bases as defined by UK GDPR:

• Contract: to fulfil orders you place with us
• Legal obligation: to comply with tax and accounting law
• Legitimate interests: to operate and improve our business
• Consent: for marketing emails — you can withdraw consent at any time

5. Data sharing

We do not sell your personal data. We may share data with trusted third parties only where necessary:

• Payment processors (to handle card payments securely)
• Delivery carriers (to ship your orders)
• IT service providers (website hosting, email delivery)
• HM Revenue & Customs or other authorities where legally required

6. Data retention

We retain personal data for as long as necessary for the purpose it was collected:

• Customer account data: for the duration of your account plus 2 years after closure
• Order records: 7 years (legal requirement for tax purposes)
• Marketing preferences: until you unsubscribe or withdraw consent
• Website analytics: 26 months

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data (“right to be forgotten”) in certain circumstances
• Restrict processing of your data
• Port your data to another provider
• Object to processing based on legitimate interests
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

8. Cookies

We use cookies to make our website work and to improve your experience. See our Cookie Policy for full details.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Passwords are hashed and never stored in plain text. Connections to our website use HTTPS encryption.

10. Contact us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to complain to the Information Commissioner's Office (ICO) if you believe we are not handling your data correctly.