Privacy Policy

Last updated: 9 September 2026

1. Who we are and how to contact us

Multiquip (UK) Limited is the controller for the personal information used for the multiquip.co.uk website, sales enquiries, online orders, customer accounts and related support. We are registered in England and Wales under company number 03544287. Our registered office and correspondence address is Unit 2, Northpoint Industrial Estate, Globe Lane, Dukinfield, Cheshire, SK16 4UJ, United Kingdom.

To contact us about privacy, email sales@multiquip.co.uk marked for the attention of the Privacy Lead, telephone 0161 339 2223, or write to the address above.

Multiquip Inc., based in the United States, is our parent company. It is not the controller of the customer records described in this notice. Any sharing within the group is explained in section 5.

This notice covers our website, sales, orders and customer support. Separate arrangements apply to recruitment, employment and any activity not carried out through this website.

2. The information we collect, and where it comes from

We collect only what the activity concerned requires. Depending on how you deal with us, this may include:

• Identity and contact details — your name, job title, employer, email address, telephone number, and billing and delivery addresses.
• Account information — your sign-in details, saved addresses, wishlist, order history and order-tracking records, if you register an account.
• Order and payment records — the products ordered, order value, delivery instructions, invoices, and the payment status, card type and last four digits returned to us by our payment provider. Card details are entered directly into our payment provider’s own secure fields; we do not receive or store full card numbers.
• Enquiry and support records — the contents of contact forms, emails and calls, and records of returns, warranty claims, faults, complaints and their outcome.
• Marketing preferences — your newsletter subscription, preferences, and our record of the permission or objection you have given.
• Technical information — your IP address, device and browser information, pages viewed, and security and error logs, together with the information described in our Cookie Policy.

We obtain this information directly from you when you browse, enquire, register, order or contact us. Where an organisation buys from us, that organisation may give us the details of its purchasing contact or the person receiving a delivery. Our payment provider returns payment status and information needed to investigate a payment or dispute. Our delivery partners return delivery and collection status. Some technical information is generated by your device when you use the site.

Please do not send us health information, or other special category information, unless we have asked for it. If an issue genuinely requires it, we will explain why and apply the additional legal condition that the law requires, rather than treating your use of this website as consent.

3. What we use information for, and our lawful basis

We rely on a specific lawful basis for each purpose. Accepting our website terms is not general consent to everything below.

Purpose	Information used	Lawful basis
Answering your enquiry and quoting for equipment	Identity, contact details, requested specification, correspondence	Steps taken at your request before entering a contract, where you would be the customer; otherwise our legitimate interest in responding to a business enquiry
Taking, supplying and supporting your order	Order, account, billing, delivery, payment and communication records	Performance of our contract with you; legal obligation where a statutory duty applies
Managing an organisation’s account and its business contacts	Staff names, roles, business contact details, order instructions, correspondence	Our legitimate interest in running the business relationship. The organisation’s contract with us is not a contract with each of its employees
Operating customer accounts, wishlists and order tracking	Account credentials, saved addresses, wishlist, order history	Performance of our contract with you where you have registered; otherwise our legitimate interest in providing the account feature you asked for
Taking payment and preventing payment fraud	Transaction records, payment status, fraud-screening results, device and security information	Performance of our contract with you; our legitimate interest, and that of our payment provider, in preventing fraud and securing the service
Keeping accounting and tax records	Invoices, payment and tax records	Compliance with our accounting and tax obligations
Handling returns, warranty claims, product safety matters and disputes	Purchase, product, fault, communication and remedy records	Performance of our contract or a legal obligation where one applies; otherwise our legitimate interest in investigating and resolving claims
Sending our newsletter and other marketing	Contact details, preferences, and our record of your permission	Your consent, or the customer soft opt-in where its conditions are met (see section 4)
Measuring and improving how the website is used	The optional technologies listed in our Cookie Policy	Your consent, given through our cookie banner
Protecting the website and our systems	IP address, security and access logs, spam and abuse prevention checks	Our legitimate interest in keeping the service secure and available

Where information is needed to fulfil an order or meet a legal duty, we will say so when we ask for it; without it we may not be able to supply the goods. Marketing and optional cookies are never a condition of buying from us.

4. Marketing

We separate marketing from the messages we must send you about an order, a delivery or a product safety matter, which are not marketing and cannot be opted out of while your order is live.

We send our email newsletter and similar marketing where you have subscribed or otherwise given permission. Where we rely on the customer soft opt-in, we use it only for our own similar products and services, only where we obtained your details in the course of a sale or negotiations for a sale, and only where you were given a clear chance to refuse at that point and in every message since.

Different rules apply to messages sent to corporate subscribers, but a named business contact still has data protection rights, and we do not assume that any business address can be marketed to without considering them.

You can unsubscribe using the link in any marketing message, or by contacting us. You can object to direct marketing, including any related profiling, at any time and we will stop. We keep the minimum information needed on a suppression list so that we can honour that objection rather than contact you again by mistake.

5. Who we share information with

We share information only where it is needed for the purposes above, under appropriate contracts and safeguards. We do not sell personal information, and we do not share it with third parties for their own marketing.

Recipient	What they do and what they receive	Role
Stripe	Processes card payments, returns payment status and dispute information, and screens transactions for fraud. Receives your payment details, order value, contact details and device and transaction information	Independent controller for its own payment and fraud purposes, and our processor for the payment we ask it to take
Seek Marketing Partners	Designs, develops, hosts and supports the website and the shop platform behind it. Has administrative access to website, order and account data in the course of that support	Our processor
Netlify	Hosts and delivers the public website. Receives request and technical information such as IP address and browser information	Our processor
Google (Google Tag Manager and reCAPTCHA)	Manages the tags on our site, and protects our contact form from automated abuse. Receives technical, device and interaction information	Our processor for tag management; independent controller for its own reCAPTCHA security purposes
Delivery and freight partners: DHL, FedEx, DPD and Palletways	Deliver or collect goods. Receive the name, company, delivery address, telephone number, email address and delivery instructions needed to complete the delivery	Independent controllers for their own carriage obligations
Multiquip Inc. and other group companies	Group IT, product, warranty and administrative support. Access is limited to what a specific support task requires and is not routine access to UK customer records	Our processor when acting on our instructions
Professional advisers, insurers and auditors	Legal, accounting, insurance and audit services, where a matter requires it	Independent controllers
Public authorities and law enforcement	Where disclosure is required by law or necessary to establish, exercise or defend legal claims	Independent controllers

 

6. Where information is processed

Most information is held in the United Kingdom and the European Economic Area. Some of the providers above are based outside the UK, or use support and infrastructure outside it, so information may be accessed or stored in the United States and in other countries where they or their sub-processors operate.

Where we make a restricted transfer, we use a lawful transfer mechanism: UK adequacy regulations where they apply; the UK Extension to the EU–US Data Privacy Framework where the recipient is certified under it; or the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment. You can ask us for information about the safeguard that applies to a particular transfer using the contact details in section 1.

7. How long we keep information

We keep personal information only for as long as we need it for the purpose it was collected for, for a record-keeping obligation, or for the establishment or defence of legal claims. We then delete or anonymise it, unless a documented legal hold applies.

Record	How long we keep it
Orders, invoices and accounting and tax records	7 years from the end of the financial year they relate to
Enquiries and quotes that do not lead to an order	24 months from our last meaningful contact with you
Customer accounts and business contact records	For as long as the account is in use, and for 24 months after it becomes inactive, after which we close and delete it. Invoices are kept separately for the period above
Returns, warranty, product safety and dispute records	6 years from supply, or from the end of the warranty period if later, to match the period in which a claim can be brought
Marketing permissions and objections	Evidence of permission for 24 months after your last engagement with us. Suppression records are kept indefinitely, as the minimum needed to honour an objection
Website security and server logs	12 months
Optional analytics information	As set out in our Cookie Policy for each technology

 

8. Security

We use technical and organisational measures appropriate to the risk. The website is served over HTTPS; access to order, account and customer records is limited to staff and suppliers who need it for their role; our suppliers are engaged under written terms that require appropriate security; and card payments are handled by a PCI DSS compliant payment provider so that card numbers are not held on our systems. No online service can be guaranteed completely secure, but that does not reduce our duty to take appropriate care and to deal with any breach as the law requires.

9. Your rights

Depending on the circumstances, you have the right to ask us for a copy of your personal information, to have it corrected or erased, to restrict how we use it, to receive it in a portable form, and to object to certain uses. You can object to direct marketing at any time. Where we rely on your consent, you can withdraw it at any time, which does not affect the lawfulness of what we did before you withdrew it.

These rights are not all absolute. If one does not apply to a particular request we will explain why, rather than simply refuse. We may ask for proportionate information to confirm your identity or to clarify what you want. We will respond without undue delay and within one calendar month, and will tell you if the law allows us to extend that period for a complex or numerous request. There is no charge for making a request; we can only charge a fee, or refuse, in the limited circumstances the law allows.

To exercise a right, use the contact details in section 1. You do not need an account, or a particular form, for a request to count.

10. Automated decision-making

We do not make decisions about you that produce a legal or similarly significant effect using automated processing alone. Our payment provider screens transactions automatically for fraud and may decline a payment as a result. If that happens, you can contact us using the details in section 1 and we will arrange another way to complete your order where we can. We do not use profiling to set prices.

11. Complaints

If you are unhappy with how we have handled your personal information, please contact us first using the details in section 1. We will acknowledge a data protection complaint within 30 days, investigate without undue delay, keep you informed and explain the outcome.

You can also complain to the Information Commissioner’s Office at any time, and you do not need our permission first. ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone 0303 123 1113. Website: ico.org.uk

12. Changes to this notice

We will update this notice when our practices change and will show the date it was last updated. Where a change is material we will bring it to your attention. Updating this notice does not by itself authorise a new and incompatible use of information already collected, and where the law requires fresh consent we will ask for it.