Privacy Policy

HexFlo Flexible Packaging supplies custom printed flexible packaging to trade customers. This policy explains what personal information we collect through this website and in the course of dealing with you, how we use it, and what rights you have over it.

For the purposes of UK data protection law we are the data controller for the information described here. Our registered company details and the contact point for data protection queries are set out at the end of this policy.

We collect the following categories of information:

• —Enquiry and quotation details — your name, business email address, telephone number, company name, company website, business address, industry, expected order quantity, buying history and the project description you submit through our quote form.
• —Correspondence — emails, call notes and messages exchanged with our sales and production teams.
• —Order and account records — specifications, artwork files, proofs, delivery addresses, invoices and payment records.
• —Technical information — IP address, browser type, device type, referring page and pages visited, collected automatically when you browse this site.

We do not intentionally collect special category data, and we ask that you do not include sensitive personal information in the free-text fields of our forms.

• —To prepare and send quotations and to answer your enquiries — on the basis of our legitimate interest in responding to a business approach, or to take steps toward a contract at your request.
• —To produce, deliver and invoice your order — because it is necessary for the performance of our contract with you.
• —To keep accounting, tax and order records — because we are under a legal obligation to do so.
• —To send occasional updates about our products and services to existing and prospective trade customers — on the basis of our legitimate interest in business-to-business marketing, or your consent where required. Every message includes an unsubscribe option.
• —To keep this website secure, prevent abuse and understand how it is used — on the basis of our legitimate interest in operating a reliable, safe website.

This site is a static website and does not set advertising or tracking cookies of its own. Some third-party resources used to display the site, such as web fonts and our styling library, are requested from external content delivery networks, and those providers may log your IP address and browser details as part of serving the request.

Our hosting provider records standard server and request logs to deliver the site, protect it from abuse and produce aggregate traffic statistics.

If we introduce analytics or marketing cookies in future, we will present a cookie banner and update this section before doing so.

We do not sell your personal information. We share it only where necessary, with:

• —our website host and form-handling provider, which processes and stores quote form submissions on our behalf;
• —our email, file storage and customer record providers;
• —our print and material suppliers, and our couriers, to the extent needed to manufacture and deliver your order;
• —our accountants, payment providers and, where relevant, credit reference agencies when credit terms are requested;
• —professional advisers, insurers, and public authorities where we are required to disclose information by law.

All our suppliers act under contract and are permitted to use your information only as instructed by us.

Some of the providers we use operate outside the United Kingdom. Where personal information is transferred outside the UK, we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, so that your information continues to receive an equivalent level of protection.

• —Enquiries that do not lead to an order: up to 24 months from our last contact.
• —Customer order and account records: 7 years from the end of the relevant financial year, to meet accounting and tax requirements.
• —Artwork and production files: for the life of the account and up to 3 years afterwards, so that repeat orders can be reproduced.
• —Marketing contact records: until you unsubscribe or ask us to delete them.
• —Server and request logs: a short rolling period set by our hosting provider.

Under UK data protection law you have the right to ask us for a copy of the personal information we hold about you, to have inaccurate information corrected, to have information erased where we no longer need it, to restrict or object to our processing (including objecting to direct marketing at any time), and to receive certain information in a portable format.

Where we rely on your consent, you may withdraw it at any time. Withdrawing consent does not affect processing already carried out.

To exercise any of these rights, contact us using the details below. We will respond within one month, and we will not charge you for a routine request.

We use access controls, encrypted connections, reputable hosted services and staff access limited to those who need it, in order to protect your information against loss, misuse and unauthorised access. No transmission over the internet can be guaranteed completely secure, so please do not send confidential material to us through unsecured channels.

If a breach occurs that is likely to result in a risk to your rights, we will notify the Information Commissioner’s Office and, where required, you.

This website and our services are intended for businesses. We do not knowingly collect personal information about children, and our services are not directed at them.

We may update this policy to reflect changes in how we operate or in the law. The current version is always published on this page, with the date it was last updated shown at the top. Material changes affecting existing customers will be notified directly.

For any question about this policy, or to make a data protection request, email sales@hexfloflexibles.com or call 077777777. A dedicated data protection contact address will be listed here before publication.

If you are unhappy with our response, you can complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk. We would appreciate the chance to address your concern first.