Last updated: September 2026
1. Who we are
This website (the Edge Flow Trading wholesale catalogue website) is operated by Edge Flow Group LTD, company number [Company No. — TBC], registered office 311 Shoreham Street, Sheffield, S2 4FA, United Kingdom (“we”, “us”). We are the controller of personal data processed through this website. For any privacy question contact [email protected].
2. Data we collect
- Enquiry data — name, company, job title, email, phone and the content of your message when you use a contact or quote form.
- Business relationship data — billing details, purchase and service history, correspondence with our account managers.
- Technical data — IP address, browser type, device information and pages visited, collected through server logs and, with consent, analytics cookies.
We do not knowingly collect special-category data and ask you not to send it through our forms.
3. Why we use it and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and preparing proposals or quotes | Steps prior to entering into a contract / legitimate interests |
| Delivering goods and related trade services and managing the account | Performance of a contract |
| Verifying counterparties (KYC), sanctions and export-control screening | Legal obligation / legitimate interests |
| Invoicing, accounting, tax records | Legal obligation |
| Website security and fraud prevention | Legitimate interests |
| Analytics and optional marketing emails | Consent (withdrawable at any time) |
4. Sharing
We share personal data only with processors that help us operate — hosting, email, CRM, accounting, logistics and payment providers — under written data-processing agreements, and with authorities where required by law. We never sell personal data.
5. International transfers
Where data is transferred outside the UK/EEA, we rely on adequacy decisions or Standard Contractual Clauses (including the UK Addendum) with appropriate supplementary measures.
6. Retention
- Enquiries that do not lead to a contract — up to 24 months.
- Customer and contract records — for the duration of the relationship plus the statutory period (typically 6 years).
- Server logs — up to 90 days.
7. Your rights
You may request access, rectification, erasure, restriction, portability, and object to processing, or withdraw consent at any time by writing to [email protected]. We respond within one month. You also have the right to complain to the competent supervisory authority (in the UK, the Information Commissioner’s Office).
8. Security
We apply technical and organisational measures appropriate to the risk, including encryption in transit, role-based access control, multi-factor authentication, logging and regular review of our suppliers.
9. Changes
We may update this policy. The version published on this page is the current one; the date of the last update is shown above.