Privacy policy

1. Who we are

Vamsi Limited is the controller responsible for the personal data described in this notice. Vamsi Limited is a private limited company registered in England and Wales under company number 16369829. Its registered office is 12 Heaton Way, Kirkham, Preston, England, PR4 3FS.

For privacy questions or to exercise a data-protection right, write to “Data Protection, Vamsi Limited” at the registered office above. You may also use our contact page once its production enquiry service is enabled.

2. Scope

This notice applies to personal data processed through this website and in connection with wholesale, private-label, supplier and other business enquiries. It is intended to meet the transparency requirements of the UK GDPR, the Data Protection Act 2018 and, where applicable, the EU GDPR.

The website is intended for business users and is not directed to children. Please do not submit special-category data, payment-card data, identity documents or confidential production information through a general enquiry form.

3. Data we may collect

• Identity and business details: name, company, role and buyer type.
• Contact details: business email, telephone number, country, website and correspondence address.
• Enquiry and project details: requested services, product categories, estimated quantities, project descriptions and communications.
• Relationship and transaction details: quotations, samples, contracts, orders, delivery coordination, invoices and payment status if a business relationship proceeds.
• Technical and security data: IP address, request time, browser/device information and security logs that may be generated by the hosting or network provider.
• Public or professional information: business contact information obtained from your organisation, trade events, referrals or public professional sources.

4. Why we use data and our lawful bases

Where we rely on legitimate interests, we consider whether the processing is necessary and balance those interests against your rights. You may request information about that assessment.

5. Sharing personal data

We may share data only where necessary with hosting, IT, communications and business-software providers; professional advisers; payment, logistics and delivery providers; manufacturing partners and artisans involved in an agreed project; and regulators, courts, law-enforcement bodies or other parties where required by law. Each recipient receives only what is necessary for its role.

We do not sell personal data. We do not use it for third-party behavioural advertising.

6. International transfers

Some service providers or project partners may process data outside the United Kingdom or European Economic Area. Before such a transfer, Vamsi Limited must use a lawful transfer mechanism where required, such as an adequacy regulation/decision, the UK International Data Transfer Agreement or UK Addendum, or European Commission Standard Contractual Clauses, together with supplementary safeguards where appropriate. You may request information about the applicable safeguard.

7. Retention

We keep data only for as long as necessary for the relevant purpose, including legal, accounting and reporting requirements. Ordinarily:

• enquiries that do not become a business relationship are reviewed for deletion after 24 months from the last meaningful contact;
• customer, supplier, contract, order and accounting records are generally retained for up to six years after the relevant relationship or transaction, unless a longer period is required for tax, regulatory, dispute or legal-claim purposes;
• marketing data is kept until you opt out or it is no longer accurate or useful, with minimal suppression data retained to honour an opt-out;
• technical/security logs are retained according to a documented security need and the configured retention of the production hosting provider.

These periods must be reflected in Vamsi Limited’s internal retention process and reviewed when production systems or providers change.

8. Security

We use proportionate technical and organisational measures designed to protect personal data, including access controls, secure transport, provider due diligence, data minimisation and deletion procedures. No internet service is completely secure, and we cannot promise absolute security.

9. Your rights

Depending on the circumstances and applicable law, you may have rights to be informed; access your data; correct inaccurate data; request erasure or restriction; receive certain data in a portable format; object to processing; withdraw consent without affecting earlier lawful processing; and not be subject to a solely automated decision with legal or similarly significant effects.

Vamsi Limited does not currently use solely automated decision-making or profiling that produces legal or similarly significant effects. We may ask for information needed to verify identity. We normally respond within one month, subject to lawful extensions and exemptions.

10. Complaints

Please contact us first so we can try to resolve the concern. You may also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. If EU GDPR applies, you may complain to the supervisory authority in the EU/EEA country of your habitual residence, place of work or the alleged infringement.

11. Changes to this notice

We will review this notice when our processing, providers or legal obligations change. Material changes will be brought to users’ attention before the new processing begins where required.