Privacy Policy

Effective Date: April 2025 | Version: 1.0

This Privacy Policy explains how Lift Line UK (“we”, “us”, or “our”) collects, uses, stores, and protects personal data when you visit and use our website at liftlineuk.co.uk (the “Website”). We are committed to handling your personal data responsibly and in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. By using our Website, you acknowledge you have read and understood this Privacy Policy.

1. Who We Are — Data Controller

Lift Line UK is the Data Controller responsible for your personal data. We provide industrial racking solutions, storage systems, and materials handling equipment services.

Contact us regarding data privacy:

Email: [email protected]
Website: liftlineuk.co.uk

2. Personal Data We Collect

2.1 Data You Provide Directly

When you contact us via enquiry forms, request a quote, or otherwise communicate with us, we may collect:

Full name
Email address
Telephone number
Company name and job title
Business address or site location
Details of your enquiry or project requirements
Any other information you voluntarily include in your message

2.2 Data Collected Automatically

When you visit our Website, certain technical data is collected automatically:

IP address
Browser type and version
Operating system
Pages visited and time spent on each page
Referring website (where you came from)
Date and time of your visit
Geographic location data (country/region level, derived from IP address)

2.3 Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies. These are described in detail in Section 6 of this policy.

3. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

Purpose	Details	Legal Basis (UK GDPR)
Responding to enquiries	To respond to contact form submissions, quote requests, or general enquiries about our services.	Legitimate Interests / Contract Performance
Providing services	To arrange site surveys, deliver proposals, process orders, and fulfil our contractual obligations.	Contract Performance
Website analytics	To understand how visitors use our Website and improve site performance.	Legitimate Interests
Security & fraud prevention	To monitor for suspicious activity and protect against unauthorised access.	Legitimate Interests
Legal obligations	To comply with applicable laws and respond to lawful requests from public authorities.	Legal Obligation
Marketing (where consented)	To send relevant product updates or promotions where you have explicitly opted in.	Consent

4. Legal Basis for Processing

Under the UK GDPR, we rely on one or more of the following legal bases for each processing activity:

Contract Performance (Article 6(1)(b)): Processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract.
Legitimate Interests (Article 6(1)(f)): Processing is necessary for our legitimate business interests, such as improving our Website and preventing fraud, provided these interests are not overridden by your rights and freedoms.
Legal Obligation (Article 6(1)(c)): Processing is required to comply with a legal obligation to which we are subject.
Consent (Article 6(1)(a)): Where we rely on your consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Storage, Security, and Retention

5.1 Where Your Data is Stored

Your personal data is stored on secure servers located within the United Kingdom and/or European Economic Area (EEA). Our website infrastructure is hosted on a Virtual Private Server (VPS) and website traffic is routed through Cloudflare’s network, which provides DDoS mitigation, content delivery, and security services.

5.2 Security Measures

We implement appropriate technical and organisational measures to protect your personal data, including:

Encryption of all data in transit via TLS/SSL (HTTPS)
Web Application Firewall (WAF) rules and geo-restriction on administrative access
Zero Trust Access controls protecting server administration
Intrusion prevention systems to block malicious access attempts
Regular automated backups to encrypted off-site cloud storage
Real-time server monitoring and alerting
Strict access controls on all systems holding personal data

5.3 Retention Periods

We retain personal data only for as long as necessary for the purpose it was collected, or as required by law:

Data Type	Retention Period
Enquiry & contact data	3 years from last contact, or duration of the business relationship
Client / contract records	7 years from end of contract (statutory accounting requirements)
Website analytics data	26 months
Server log data	90 days
Marketing consent records	Until consent is withdrawn, plus 3 years as proof of consent

6. Cookies

Our Website uses cookies — small text files placed on your device — to improve your experience and help us understand how the site is used.

Category	Cookie Name(s)	Purpose	Consent Required
Strictly Necessary	`__cf_bm`, `__cflb`, `cf_clearance`	Set by Cloudflare for bot protection and security. Essential for secure operation.	No
Functional	Session cookies	Maintain your session state as you navigate the Website.	No
Analytics	`_ga`, `_gid`, `_ga_*`	Collect anonymised information about how visitors use the Website to help us improve content.	Yes
Preference	`cookie_consent`	Stores your cookie consent preferences.	No

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the Website.

7.1 Third-Party Processors

We do not sell your personal data. We may share it with trusted third-party service providers acting as Data Processors on our behalf:

Processor	Purpose	Data Transferred
Cloudflare, Inc.	CDN, DDoS protection, DNS, WAF security filtering, and Zero Trust Access	IP addresses, request headers, page URLs, cookies
VPS Hosting Provider	Physical hosting of website files and database on secure infrastructure	All website data at rest
Cloud Backup Provider	Encrypted off-site backup storage for website and database files	Encrypted database and file backups
Email Service Provider	Transactional email delivery (form submissions and notifications)	Name, email address, message content
Google Ireland Limited	Google Analytics 4 (GA4) — collects anonymised data about how visitors interact with the Website, including pages visited, session duration, and traffic sources. Data is processed in accordance with Google’s data processing terms.	Anonymised/pseudonymised usage data, client ID, session data

7.2 Legal Disclosures

We may disclose your personal data to law enforcement agencies, regulators, courts, or other third parties where we believe disclosure is necessary to comply with a legal obligation, or to protect the rights, property, or safety of Lift Line UK, our customers, or others.

7.3 International Transfers

Some third-party service providers (including Cloudflare) operate internationally. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

As a data subject, you have the following rights regarding your personal data:

Right of Access: You can request a copy of all personal data we hold about you. We will respond within one calendar month.
Right to Rectification: You can ask us to correct inaccurate or incomplete personal data.
Right to Erasure: You can ask us to delete your personal data where there is no compelling reason for us to continue processing it.
Right to Restrict Processing: You can ask us to suspend processing of your personal data in certain circumstances.
Right to Data Portability: Where processing is based on consent or contract and carried out automatically, you can request your data in a structured, machine-readable format.
Right to Object: You can object to processing based on legitimate interests. We will stop processing unless we have compelling legitimate grounds.
Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time without affecting prior lawful processing.
Rights Regarding Automated Decisions: You have the right not to be subject to solely automated decisions that have significant legal or similar effects. We do not use such automated decision-making.

To exercise any of these rights, please contact us at [email protected] with the subject line “Data Privacy Enquiry” or “Subject Access Request”. We may need to verify your identity before processing your request and will respond within one calendar month.

9. Children’s Privacy

Our Website and services are intended for business use and are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make significant changes, we will update the effective date at the top of this document. Continued use of the Website after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: [email protected]
Website: liftlineuk.co.uk
Subject line: Please use “Data Privacy Enquiry” or “Subject Access Request”

We aim to respond to all data privacy enquiries within 5 business days.