Privacy
Updated: 11 August 2026
This page sets out what we do with your personal information when you buy from us, open an account, fill in a form, or just look round the site. We’ve written it in plain English rather than legal boilerplate, on the basis that a privacy policy nobody can read isn’t much use to anyone.
Who we are
W. R. Wright & Sons Limited is the data controller for the information described on this page. That means we decide what gets collected and what happens to it, and we’re responsible for looking after it.
- W. R. Wright & Sons Limited, registered in England and Wales, company number 01297995
- Registered office: 104 – 118 Cherry Lane, Liverpool, L4 8SF
- Email: info@wrwright.co.uk
- Phone: 0151 270 2904
- Registered with the Information Commissioner’s Office, reference ZB157400
Anything to do with your personal information — a question, a request, a complaint — goes to info@wrwright.co.uk and reaches the right person.
What we collect
When you place an order
Your name, billing address, delivery address, email address and phone number. Your company name if you’re buying as a business. What you ordered, what it cost, when it went out, and any delivery instructions you gave us.
Card details are handled by Stripe and go straight to them. They don’t pass through our website and we never see or store your full card number. What we get back is the last four digits, the card type, and whether the payment went through.
When you open an account
Your name, email address and a password. The password is stored scrambled, so nobody here can read it — if you forget it we can only reset it, not tell you what it was. Alongside that sits anything you save to the account: addresses, saved items and your order history.
A trade account also takes your company name and VAT number.
When you contact us
The contact form takes your name, company, email address, phone number and whatever you write in the message. It’s emailed to us and also stored in the website database.
When you sign up for the newsletter
Your name and email address, and the fact that you asked to receive it.
When you browse the site
Your IP address, the browser and device you’re using, the pages you looked at and where you arrived from. Some of this is unavoidable — a web server can’t send you a page without knowing where to send it. The rest comes from analytics cookies, which only run if you agree to them.
Why we use it, and what allows us to
| What we’re doing | What allows us to |
|---|---|
| Taking, packing and delivering your order, and dealing with returns | Performing our contract with you |
| Running your account and keeping your saved addresses and items | Performing our contract with you |
| Setting up and running a trade account, including checking the VAT number | Performing our contract with you |
| Order confirmations, dispatch notices, password resets and other service emails | Performing our contract with you |
| Keeping invoices and transaction records for HMRC and Companies House | A legal obligation we’re under |
| Answering enquiries sent through the contact form or by email | Our legitimate interest in responding to people who get in touch |
| Keeping the site secure and spotting fraudulent orders | Our legitimate interest in protecting the business and our customers |
| Understanding how the site is used so we can improve it | Your consent, given through the cookie banner |
| Sending the newsletter | Your consent, which you can withdraw whenever you like |
Where we rely on your consent, you can take it back at any time and we’ll stop. Where we rely on legitimate interests, you can object and we’ll look at it properly rather than reflexively.
Cookies
The site uses cookies that are strictly necessary to make it work — keeping you signed in, remembering what’s in your basket, processing a payment. Those don’t need your permission and can’t be turned off without breaking the site.
Anything beyond that, including Google Analytics, only runs if you agree to it through the banner you saw on your first visit. You can change your mind at any point. There’s more detail, including what each cookie does and how long it lasts, on our cookies page.
Who else sees it
We don’t sell your personal information, and we don’t pass it to anyone for their own marketing. It goes to the companies below because they do a specific job for us, and each of them is bound by a contract that limits them to that job.
| Who | What they do |
|---|---|
| 20i Limited | Hosts the website and the database your information sits in |
| Stripe | Takes card payments and handles refunds |
| Resend | Sends the emails the site generates, such as order confirmations |
| Analytics and tag management, only where you’ve consented | |
| CookieYes | Runs the cookie banner and keeps a record of what you agreed to |
| DPD | Delivers your order, using your name, address and phone number |
| Our accountants and, if needed, our professional advisers | Statutory accounts, tax and legal advice |
We’d also disclose information if the law required it — a court order, a legitimate request from a public authority, or to establish or defend a legal claim. If the business were ever sold or transferred, customer records would go with it, and we’d tell you before that happened.
Where your information is held
The website and its database are hosted in the United Kingdom.
Some of the companies above operate outside the UK, so a limited amount of information is processed elsewhere — principally the United States. Where that happens, the transfer is covered by the safeguards UK data protection law requires, either the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework. If you’d like the detail on a particular one, ask us.
How long we keep it
We don’t keep things indefinitely. Each category has a period attached to it, and when that period is up the information is deleted or anonymised.
| What | How long |
|---|---|
| Orders, invoices and transaction records | Six years after the end of the financial year they fall in, because HMRC requires it |
| Your account and anything saved to it | For as long as the account is open. If there’s been no order and no sign-in for three years we’ll email you before closing it |
| Trade account details, including the VAT number | The life of the account, then six years alongside the order records |
| Contact form messages and email enquiries | Two years from the last message, unless it turned into an order |
| Newsletter subscription | Until you unsubscribe. We then keep your email address on a suppression list so we don’t accidentally add you back |
| Google Analytics data | Fourteen months |
| Cookie consent records | Twelve months, then we ask again |
| Server and security logs | Held by our hosting provider for a short period as part of running and protecting the site, then overwritten |
If you close your account we’ll delete your personal details, but the order records have to stay for the six years above. That’s a legal requirement rather than a preference.
Keeping it secure
The site runs over an encrypted connection, passwords are stored scrambled rather than in readable form, and access to customer records is limited to the people here who need it to do their job. Card details never touch our systems.
No system is perfect, and anyone who tells you otherwise is overselling. If something did go wrong in a way that put you at risk, we’d tell you and we’d tell the Information Commissioner’s Office, within the timescales the law sets.
Your rights
Under UK data protection law you can:
- Ask for a copy of the personal information we hold about you
- Have anything inaccurate corrected
- Ask us to delete it, where we’re not required to keep it
- Ask us to restrict what we do with it while a query is sorted out
- Object to us using it where we’ve relied on legitimate interests
- Ask for it in a portable format, or sent to another supplier
- Withdraw consent at any time, for the newsletter or for analytics cookies
Email info@wrwright.co.uk and tell us what you want. It’s free, and we’ll come back to you within one month. If the request is a complicated one we can take longer, but we’ll tell you that inside the month rather than leave you waiting. We may need to check who you are first, which is a protection for you rather than an obstacle.
Children
This is a trade supplier’s site and it isn’t aimed at children. We don’t knowingly collect information about anyone under 16. If you think we have, tell us and we’ll remove it.
Changes to this policy
We’ll update this page when what we do changes. The date at the top tells you when it was last revised. If a change is a significant one, we’ll do more than quietly amend the page.
If you’re not happy
Come to us first — email info@wrwright.co.uk or call 0151 270 2904 and we’ll try to put it right.
If you’re still not satisfied, you have the right to complain to the Information Commissioner’s Office, who regulate this in the UK. They’re at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, on 0303 123 1113, and at ico.org.uk. Complaining to them doesn’t cost you anything and doesn’t affect any other rights you have.