Privacy Policy

Last updated on 12/09/2026

This privacy policy for McPennin Trading Ltd outlines how personal data collected via supplier enquiry forms, cookies, and analytics is handled in compliance with UK GDPR.

1. Who We Are

McPennin Trading Ltd is a UK e-commerce retailer and trade partner.

Company name: McPennin Trading Ltd
Company number: 17353607
Location: Birmingham, United Kingdom
Website: mcpennintrading.co.uk
Supplier enquiries: purchasing@mcpennintrading.co.uk

For the purposes of UK data protection law, McPennin Trading Ltd is the data controller of personal information collected through this website.

2. Personal Information We Collect

We may collect personal information that you provide directly to us, including:

your name;
company or business name;
email address;
telephone number;
product or brand category;
information contained in messages or supplier enquiries;
details about products, pricing, minimum order quantities, availability, delivery terms or commercial proposals that you choose to send to us; and
any other information you voluntarily provide when communicating with us.

When you visit our website, we may also collect technical information such as:

IP address;
browser type and version;
device type;
operating system;
pages visited;
referring website or source;
date and time of visits; and
information collected through cookies and similar technologies.

3. How We Collect Personal Information

We collect personal information:

when you complete our Supplier Partnership or contact forms;
when you contact us by email;
when you communicate with us regarding products, supply arrangements or commercial opportunities;
automatically through cookies, analytics tools and similar technologies when you use our website; and
where appropriate, from publicly available business sources or information provided to us by commercial contacts.

4. How We Use Your Personal Information

We may use your personal information to:

respond to supplier, trade and general business enquiries;
assess potential supplier or commercial relationships;
communicate with manufacturers, brand owners, authorised distributors, wholesalers and other supply partners;
request or review product information, pricing, stock availability, minimum order quantities and delivery terms;
verify or assess product authenticity, provenance and commercial documentation;
administer and improve our website;
monitor website performance and usage;
maintain website security;
send transactional or administrative communications;
maintain business records;
comply with legal, regulatory, accounting and tax obligations; and
establish, exercise or defend legal claims where necessary.

5. Lawful Bases for Processing

Under the UK GDPR, we must have a lawful basis for processing personal data.

Depending on the circumstances, we may rely on:

Legitimate interests

We may process personal information where necessary for our legitimate business interests, including:

responding to business and supplier enquiries;
developing and managing commercial relationships;
sourcing products;
communicating with suppliers and trade partners;
maintaining and improving our website;
protecting our business and systems from misuse or fraud; and
keeping appropriate commercial records.

Where we rely on legitimate interests, we consider whether our interests are balanced against your rights and freedoms.

Contract

We may process personal information where necessary to take steps at your request before entering into a contract or to perform a contract with you or your organisation.

Legal obligation

We may process information where necessary to comply with legal, tax, accounting, regulatory or other statutory obligations.

Consent

Where required, we rely on your consent, particularly for certain non-essential cookies or analytics technologies. You may withdraw consent at any time.

If we rely on legitimate interests, we are required to explain those interests in our privacy information.

6. Supplier Enquiries and Business Communications

When you submit a supplier enquiry through our website, we may collect information including your name, company, email address, telephone number, product or brand category and message.

We use this information to:

review your enquiry;
assess whether your products or services may be relevant to McPennin Trading Ltd;
contact you regarding potential trading opportunities;
request further commercial information where necessary; and
maintain appropriate records of supplier discussions and decisions.

Providing information through the supplier enquiry form does not create a contractual relationship with McPennin Trading Ltd.

7. Website Forms and Email Delivery

Our website uses WordPress-based form and email delivery services to process and deliver website enquiries.

These may include services such as:

WPForms;
WP Mail SMTP; and
Brevo.

Information submitted through website forms may therefore be processed by these service providers where necessary to transmit, deliver or manage website communications.

We only use service providers where we consider it appropriate for our business purposes and data protection obligations.

8. Website Analytics

We may use analytics tools to understand how visitors use our website, including which pages are viewed, how visitors reach our website and how the site performs.

Analytics information may include technical and usage data such as IP address, browser information, device information, page visits and interaction data.

Where analytics technologies use non-essential cookies or similar storage technologies, we will seek consent where required.

The ICO states that analytics cookies are not treated as strictly necessary under PECR and generally require consent.

9. Cookies

Our website may use cookies and similar technologies for purposes including:

essential website functionality;
security;
remembering user preferences;
analytics and performance measurement; and
improving the website experience.

Strictly necessary cookies may be used without consent where permitted by law.

Non-essential cookies, including analytics cookies, should only be used where appropriate consent has been obtained.

You can manage your cookie choices through the cookie consent controls available on our website.

Further information is available in our Cookie Policy.

10. Who We Share Personal Information With

We may share personal information with trusted third parties where necessary for legitimate business purposes, including:

website hosting providers;
website service and maintenance providers;
form-processing providers;
email delivery providers;
analytics providers;
IT and security providers;
professional advisers such as accountants, legal advisers or consultants;
regulatory, tax or law-enforcement authorities where required by law; and
other service providers acting on our behalf.

We do not sell personal information to third parties.

Where third parties process personal data on our behalf, we expect them to handle the data appropriately and in accordance with applicable data protection requirements.

11. International Data Transfers

Some of the service providers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we seek to ensure that appropriate safeguards are in place as required by UK data protection law.

These safeguards may include:

transfer to a country covered by UK adequacy regulations;
use of approved contractual safeguards; or
another legally permitted transfer mechanism.

You may contact us if you would like further information about safeguards used for international transfers.

The ICO expects organisations to tell individuals about relevant international transfers and the safeguards used where applicable.

12. How Long We Keep Personal Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting, tax, commercial and regulatory requirements.

Retention periods may vary depending on the type of information and the nature of the business relationship.

For example, we may retain:

supplier enquiry information for as long as necessary to assess or maintain a potential commercial relationship;
business correspondence for an appropriate period for operational and record-keeping purposes;
transaction and accounting records for periods required by applicable law; and
technical and analytics information according to the retention settings of the relevant service.

Where there is no fixed retention period, we consider the nature of the information, why it was collected, whether it remains necessary and any applicable legal obligations.

13. How We Protect Your Information

We take reasonable technical and organisational measures designed to protect personal information against:

unauthorised access;
accidental loss;
misuse;
alteration;
disclosure; and
destruction.

However, no internet-based system can be guaranteed to be completely secure.

14. Your Data Protection Rights

Depending on the circumstances, you may have rights under UK data protection law, including the right to:

request access to personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of personal information in certain circumstances;
request restriction of processing;
object to certain processing;
request transfer of personal information in certain circumstances;
withdraw consent where processing is based on consent; and
complain to the Information Commissioner’s Office.

Your rights may depend on the lawful basis we rely on and may not apply in every circumstance.

The ICO requires privacy information to explain the rights available to individuals and, where applicable, the right to withdraw consent.

15. Your Right to Object

Where we rely on legitimate interests as the lawful basis for processing your personal information, you may have the right to object to that processing.

If you wish to object, contact us at:

purchasing@mcpennintrading.co.uk

We will consider your request in accordance with applicable data protection law.

16. Complaints

If you have concerns about how we handle your personal information, please contact us first so that we can try to resolve the issue.

You also have the right to make a complaint to the UK supervisory authority:

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

You can find further information about data protection complaints on the ICO website. UK organisations are expected to inform individuals of their right to complain to the ICO.

17. Automated Decision-Making

We do not currently use personal information collected through this website to make solely automated decisions that produce legal or similarly significant effects on individuals.

18. Third-Party Websites

Our website may contain links to third-party websites or online platforms.

We are not responsible for the privacy practices, content or security of third-party websites. You should review the privacy policies of those websites before providing personal information.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

our website;
our business activities;
the services we use;
legal or regulatory requirements; or
our data protection practices.

The latest version will be published on this page with an updated revision date.

20. Contact Us

If you have any questions about this Privacy Policy, how we use personal information, or your data protection rights, please contact:

McPennin Trading Ltd
Birmingham, United Kingdom
Company No. 17353607
Email: purchasing@mcpennintrading.co.uk