Privacy notice
Last updated: 1 November 2026
This notice explains how Perimeter One collects and uses personal information. It covers our website, quote requests, orders, hire, trade accounts, training courses and our office. We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
1. Who we are
Perimeter One Site Supplies ("Perimeter One", "P1", "we", "us") is a trading name of Perimeter One Limited, a company registered in England and Wales with company number 17512474. Our registered office is 12 Wath Wood Drive, Swinton, Mexborough, England, S64 8UW.
We are the controller of the personal information described in this notice. We are registered with the Information Commissioner's Office (ICO) under registration number [ICO REGISTRATION NUMBER].
- Email: sales@perimeter-one.co.uk
- Phone: [PHONE]
- Post: Perimeter One Limited, 12 Wath Wood Drive, Swinton, Mexborough, England, S64 8UW
- Privacy contact: Laura Ibbotson, Director
Our office is in Rotherham, South Yorkshire.
2. What we collect
We only collect what we need to quote, supply, hire, deliver, train and run the business.
| Type of information | Examples | Where it comes from |
|---|---|---|
| Contact details | Name, company, job title, email, phone | You, through our forms, email or phone. Sometimes a colleague who orders on your behalf. |
| Job and site details | Site address and postcode, delivery date, access notes, site contact, job details | You or your organisation |
| Quote, order and hire records | Products, quantities, prices, quotes, orders, hire start and off-hire dates, off-hire numbers, delivery notes, signatures on delivery and collection, photos of equipment on delivery and collection | You and our own records |
| Payment and account details | Invoices, payment records, bank details for refunds, trade account application details | You, your organisation and our bank |
| Credit and identity checks | Company and director details, credit scores, trade references, proof of identity and address for some hires | You, credit reference agencies, public registers and referees |
| Training information | Delegate names, contact details, date of birth where an awarding body needs it, ID checks, attendance, assessment results, certificates. Health information only if you tell us about something that affects a practical course or needs an adjustment. | The delegate or the person who books the course |
| Personalisation details | Logos, names or artwork for printed or embroidered PPE and hoarding wraps | You |
| Messages | Emails, form messages, complaints, feedback, call notes | You |
| Website technical data | Basic server logs held by our host, such as IP address, browser type and pages requested. Your quote basket is held in your own browser (see our cookie policy). | Your device and our hosting provider |
| CCTV images | Images of visitors and vehicles at our premises [DELETE IF NO CCTV] | Our cameras |
If you give us details about someone else (for example a site contact or training delegate), please make sure they know you are doing so and point them to this notice.
3. Why we use it and our lawful basis
The law says we must have a lawful basis for each use of personal information. These are ours.
| Purpose | Lawful basis |
|---|---|
| Replying to quote requests and enquiries | Steps you ask for before entering a contract (if you are an individual). Legitimate interests in responding to business enquiries (if you contact us for an organisation). |
| Taking and fulfilling orders and hires, delivery, installation, collection and invoicing | Contract (where the contract is with you). Legitimate interests in dealing with our business customers' staff and contacts (where the contract is with your organisation). |
| Running and managing training courses, issuing certificates and passing results to awarding bodies | Contract and legitimate interests. Legal obligation where an awarding body or regulator requires records. |
| Health information given for a training course or adjustment | Your explicit consent, or where needed to meet health and safety obligations in employment and social protection law. You can withdraw consent at any time, but we may not then be able to let you take part in practical elements. |
| Trade account applications and credit checks | Legitimate interests in managing credit risk and preventing fraud. Contract once an account is open. |
| Chasing payment, recovering debts, and recovering lost or unreturned hire equipment | Contract and legitimate interests in protecting our property and income. |
| Keeping accounting, tax and VAT records | Legal obligation. |
| Health and safety, accident and incident records | Legal obligation and legitimate interests. |
| Handling complaints, claims and legal disputes | Legitimate interests and legal obligation. |
| Sending marketing emails or texts to individual people (including sole traders and partnerships) | Consent, or the "soft opt-in" (see section 4). |
| Sending marketing emails to staff at companies and other organisations | Legitimate interests. You can opt out at any time. |
| CCTV at our premises for security and crime prevention [DELETE IF NO CCTV] | Legitimate interests in protecting staff, property and stock. |
| Keeping the website working and secure | Legitimate interests. |
Where we rely on legitimate interests, we have weighed our interests against yours. You can ask us for details and you can object (see section 9).
If you do not give us information we need for a contract (such as a delivery address), we may not be able to supply or hire to you.
4. Marketing and the soft opt-in
We keep marketing light and relevant. We do not sell or rent your details to anyone.
- If you are an individual, sole trader or partnership, we will only email or text you marketing if you have agreed, or if you have bought from us or asked us for a quote and we are telling you about similar products or services. This is the "soft opt-in". We will give you a simple way to opt out when we first collect your details and in every message.
- If you work for a company, council or other organisation, we may send marketing to your work email about products and services relevant to your role. You can opt out at any time.
- To opt out, use the unsubscribe link or email sales@perimeter-one.co.uk. We will keep a note of your email address on a suppression list so we do not contact you again.
We do not use your details for marketing calls to numbers registered with the Telephone Preference Service or Corporate Telephone Preference Service unless you have told us we may.
5. Who we share it with
We share personal information only where needed. Our service providers act on our instructions under written contracts.
- Website hosting: Netlify, Inc. hosts our website and handles form submissions before they reach us.
- Email: [EMAIL PROVIDER] provides our email service. Website form submissions are delivered to us by email.
- IT and software: [IT SUPPORT / ACCOUNTS SOFTWARE / CRM PROVIDERS].
- Couriers and hauliers: [COURIER / HAULIER NAMES], where we do not deliver with our own vehicles. They get the name, phone number and site address needed to deliver or collect.
- Manufacturers and print or embroidery suppliers: where we need them to fulfil an order or warranty claim.
- Training awarding and accrediting bodies: [AWARDING BODY NAMES], to register delegates and issue certificates.
- Credit reference agencies: [CREDIT REFERENCE AGENCY NAME], for trade account checks. See section 6.
- Our bank and payment providers: [BANK / PAYMENT PROVIDER].
- Accountants, auditors, insurers, lawyers and debt collection agencies: [NAMES IF KNOWN].
- Police, HMRC, the Health and Safety Executive, courts and other authorities: where the law requires or allows it, for example to report theft of hire equipment.
- A buyer of our business: if we sell or restructure the business, under confidentiality terms.
Messaging us on WhatsApp
If you message us on WhatsApp, we receive your name, phone number and anything you send, such as product lists, photos of your site or your location. We use this to reply and to prepare your quote, on the same lawful bases as an email enquiry. WhatsApp is run by WhatsApp Ireland Limited (part of Meta), which processes your messages under its own terms and privacy policy. Messages are end-to-end encrypted. Please do not send payment card details by WhatsApp. Our website only links to WhatsApp: it does not load any WhatsApp or Meta code, and it sets no WhatsApp cookies.
6. Credit checks for trade accounts
When you apply for a trade account, we may search the records of a credit reference agency about your business and, for sole traders, partnerships and directors giving a guarantee, about you as an individual. The agency will keep a record of the search. Other lenders may see it. We may also share information about how the account is run. The credit reference agency's own privacy notice is here: [CREDIT REFERENCE AGENCY PRIVACY NOTICE LINK].
7. International transfers
Some of our providers are based outside the UK or store data outside the UK. Our website host, Netlify, is a US company. Where personal information leaves the UK, we make sure it is protected by one of these:
- the UK-US Data Bridge, where the US recipient is certified under it;
- UK adequacy regulations for the destination country; or
- the ICO's International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
Our email provider, [EMAIL PROVIDER], stores data in [LOCATION]. You can ask us for more detail about these safeguards.
8. How long we keep it
| Record | How long |
|---|---|
| Quote requests that do not lead to an order | [24 months] from our last contact |
| Orders, hire contracts, delivery and collection records, invoices | 6 years after the end of the financial year they relate to (tax, VAT and legal claims) |
| Trade account and credit check records | 6 years after the account closes |
| Training bookings, attendance and results | [6 years] after the course, or longer if an awarding body requires it |
| Health information for training | Destroyed after the course unless needed for an incident record |
| Accident and incident records | At least 3 years, or longer where a claim is possible or the law requires it |
| Complaints and correspondence | 6 years after the matter closes |
| Marketing list | Until you opt out, or [24 months] with no contact from you |
| Marketing suppression list | As long as we send marketing (so we respect your opt-out) |
| CCTV footage [DELETE IF NO CCTV] | [30 days], unless needed to investigate an incident |
| Website server logs | As set by our hosting provider, typically [30 days] |
After this we delete or anonymise the information securely.
9. Your rights
You have the right to:
- ask for a copy of your personal information;
- ask us to correct information that is wrong or incomplete;
- ask us to delete information, where there is no good reason to keep it;
- ask us to limit how we use it;
- object to us using it on the basis of legitimate interests, and object to direct marketing at any time;
- ask us to move information you gave us to another organisation, where we rely on consent or contract and use automated means;
- withdraw consent at any time, where we rely on consent.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. A credit reference agency score may inform a trade account decision, but a person makes the decision.
To use your rights, email sales@perimeter-one.co.uk or write to us. We may ask for proof of identity. We will reply within one month. If your request is complex we may extend this by up to two more months and will tell you why.
10. Complaints
If you are unhappy with how we have used your information, please tell us first at sales@perimeter-one.co.uk. We will acknowledge your complaint within 30 days and tell you what we will do.
You can also complain to the Information Commissioner's Office:
- Website: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
11. CCTV at our premises
[DELETE THIS SECTION IF NO CCTV] We use CCTV at our Rotherham office to protect staff, visitors, vehicles and stock and to help prevent and detect crime. Signs show where cameras operate. Cameras do not cover toilets or private areas, and do not record audio. Footage is kept for [30 days] unless needed for an investigation, and may be shared with the police or our insurers.
12. Children
Our website and services are for businesses and adults. We do not knowingly collect information from children under 16. Training delegates must meet the minimum age shown for each course. If you think a child has given us their details, contact us and we will delete them.
13. Security
We use reasonable technical and organisational measures to protect personal information, including access controls, encrypted connections to our website and secure email. Only staff who need information can access it. No system is completely secure, so please do not send card details by email.
14. Changes to this notice
We will update this notice when our practices change, for example if we add online payment or website analytics. The date at the top shows when it last changed.