Commercial Privacy Summary
Wallcano Tiles Ltd operates as a dedicated Business-to-Business (B2B) distributor of porcelain floor and wall tiles. We only collect details necessary to administer trade accounts, dispatch architectural sample packs, arrange pallet and container logistics, and issue commercial invoices. We never sell, rent, trade, or monetize client data with external marketers.
01. Scope & Identity of the Data Controller
This Privacy Policy applies to all personal data and commercial information processed by Wallcano Tiles Ltd (referred to herein as "Wallcano", "we", "us", or "our"), a private limited company registered in England and Wales, operating its central distribution hub at:
Companies House Registration • Contact: sales@wallcanotiles.co.uk • +44 7886 812956
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Wallcano Tiles Ltd is the Data Controller responsible for your personal information.
02. Personal & Commercial Data We Collect
Depending on how you interact with our website, trade services, and logistics team, we may collect and process the following categories of information:
- Commercial Identification Data: Company name, trading style, registered office address, Companies House registration number, VAT number, and business classification (e.g. Tile Retailer, Architecture Practice, Interior Design Studio, Developer, Tiling Contractor).
- Representative Contact Details: Contact person name, professional email address, direct telephone and mobile numbers, and job role/title.
- Delivery & Logistics Data: Commercial delivery site address, project postcode, site contact person, access constraints (e.g. tail-lift requirement, forklift availability, pedestrian zone restrictions), and pallet dispatch notes.
- Sample Requests: Specific porcelain collections, tile format preferences (e.g. 600×1200mm, 20mm outdoor pavers, high-gloss slabs), sample format (cut swatch, handboard, binder), and project timelines.
- Financial & Invoicing Data: Invoicing address, accounts payable contact, bank details for wire transfers, and credit history records (applicable only where an application for 30-day net commercial credit is submitted).
- Technical & Analytical Data: IP address, browser type and version, device identifier, time zone, referral URLs, and pages visited, gathered securely through Google Analytics 4 (GA4).
03. Lawful Basis for Processing Under UK GDPR
Under Article 6 of the UK GDPR, Wallcano Tiles Ltd only processes personal and trade data where a clear lawful basis exists:
Processing necessary to fulfill commercial purchase contracts, process sample box dispatches, verify trading credentials, and coordinate pallet deliveries to your premises or sites.
Managing ongoing B2B customer relationships, updating registered stockists on batch availability and new arrivals, preventing fraud, and optimizing warehouse inventory.
Complying with statutory accounting rules, HMRC tax filings, VAT reporting, commercial liability standards, and UK health and safety freight rules.
Where you explicitly subscribe to digital product launch bulletins or opt-in to tailored promotional updates. Consent may be withdrawn at any time.
04. How We Use Your Information
Your details are used exclusively for legitimate commercial purposes, including:
- Validating trade account applications and issuing bespoke wholesale pricing terms.
- Fulfilling complimentary architectural sample orders dispatched via tracked 24-hour parcel couriers.
- Generating and sending project quotations, digital takeoffs, and proforma invoices.
- Coordinating pallet transport with dedicated tail-lift haulage partners across England, Scotland, Wales, and Northern Ireland.
- Reserving factory lots and monocalibre production batches to protect shade consistency across phased developments.
- Providing customer service, handling technical specification queries, and resolving product claims.
05. Logistics & Third-Party Disclosures
Wallcano Tiles Ltd does not sell, barter, or transfer commercial contact lists. We only disclose essential details to vetted operational third parties:
- Freight & Courier Partners: National pallet distribution networks (tail-lift hauliers) and parcel couriers (e.g. DPD, FedEx) solely to complete deliveries. Details shared are restricted to recipient name, delivery site address, telephone number, and delivery notes.
- Financial & Accounting Software: Secure HMRC-compliant accounting systems to record commercial orders, VAT receipts, and tax records.
- IT & Hosting Infrastructure: Cloud hosting and transactional email services operating under strict Data Processing Agreements (DPAs) in compliance with UK data sovereignty requirements.
- Statutory Authorities: UK regulatory or law enforcement bodies where strictly mandated by applicable law or judicial court order.
06. Data Security & Storage Protocols
We implement comprehensive organizational and technological safeguards to prevent unauthorized access, alteration, disclosure, or accidental destruction of data:
- 256-bit SSL/TLS encryption for all website communications and API form transmissions.
- Honeypot anti-spam defenses and CSRF session verification on all interactive forms.
- Restricted role-based access control to commercial account records and trade leads.
- Continuous server monitoring and secure daily data backups within the United Kingdom.
07. Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes for which it was gathered:
- Commercial Sales & Invoicing: Kept for 6 years following the end of the relevant financial year, in accordance with UK HMRC statutory accounting rules.
- Active Trade Accounts: Retained for the duration of the commercial trading relationship plus 2 years of inactivity.
- Sample Requests & General Enquiries: Retained for up to 18 months to assist with subsequent project ordering or specification matching.
08. Your Statutory Rights Under UK GDPR
As a data subject, you hold clear statutory rights under UK data protection law:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete contact or company information.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where no overriding legal or accounting obligation requires retention.
- Right to Restrict Processing: Request suspension of processing in specified circumstances.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Right to Data Portability: Obtain and reuse your personal data in a machine-readable format.
To exercise any of these rights, email our commercial data desk at sales@wallcanotiles.co.uk. We respond to all verified requests within 30 days without charge.
You also have the right to lodge a formal complaint with the UK supervisory authority: Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF (ico.org.uk).
10. Data Protection Officer & Contact Information
For any questions, data subject access requests, or privacy concerns, please contact our team: