Privacy policy

This notice explains how ERCS Ltd ("we") handle personal data when you use this site, hire equipment from us, or buy from our shop.

Who we are

ERCS Ltd, registered at Strathleven House, Dumbarton G82 3PD. Contact: ercsltd@yahoo.com.

What we collect

• Account & sign-in: email address, name, IP at sign-in, magic-link access logs.
• Hire & purchase: contact and delivery details, agreement records, order history, invoices.
• Payment: processed by Stripe; we receive a transaction reference and the last four digits of the card only, never the full card number.
• Technical: server logs and basic cookies strictly necessary to keep you signed in.

Why we use it (legal basis)

• To provide goods and services you've asked for (contract).
• To keep records for tax, accounting and warranty purposes (legal obligation).
• To contact you about your hire, order or enquiry (legitimate interests).

We do not sell your data or use it for profiling. We do not use marketing analytics or advertising cookies.

Who we share it with

• Stripe for card payments.
• Couriers we use to ship your orders.
• Our email relay provider that delivers our transactional emails.
• HMRC and other authorities where required by law.

How long we keep it

• Sales and hire records: 6 years after the end of the financial year (UK company law).
• Enquiry records: up to 24 months.
• Server logs: up to 90 days.

Your rights

You have the right to access, correct, or ask us to delete your personal data, subject to our legal retention obligations. Email ercsltd@yahoo.com and we will respond within one month.

You can complain to the Information Commissioner's Office if you think we've got it wrong: ico.org.uk.

This is a starter document — please review with your solicitor or DPO before publishing.