Privacy Notice

Drabest UK Ltd – Privacy Notice

1. Who We Are

Drabest UK Ltd (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy.

  • Company Registration No: 09691129
  • VAT Registration No: 218919775
  • Address: 3-4 Railway Street, Great Bridge, Tipton, DY4 7AD, United Kingdom
  • Responsible Person: Director – Radosław Chwast
  • Contact: rchwast@drabest.pl

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

  • Website data: IP addresses, cookies, browsing activity (via Google Analytics).
  • Marketing data: email address, name, engagement statistics (via Mailchimp).
  • Customer data: name, delivery/billing address, phone number, email, order details.
  • Supplier/partner data: contact details, business correspondence.
  • Email data: content and metadata of emails exchanged with us, stored securely by our hosting provider.

3. Lawful Basis for Processing

We only process your data when there is a lawful basis under UK GDPR:

  • Contract: to process and deliver your orders.
  • Legal obligation: to retain invoices and records for tax/accounting purposes.
  • Legitimate interest: maintain business relationships, prevent fraud, improve services.
  • Consent: to send marketing communications (you can withdraw at any time).

4. How We Use Your Data

We use your personal data for:

  • Fulfilling and delivering customer orders.
  • Managing accounts and payments.
  • Sending marketing newsletters (with your consent).
  • Improving our website and services.
  • Meeting legal and regulatory obligations.
  • Ensuring secure communication via email.

5. Sharing Your Data

We only share your personal data where necessary:

  • Carriers / delivery providers (to deliver goods).
  • Mailchimp (for newsletters and marketing emails).
  • Datacenta (secure hosting and backup of company emails, encrypted and Cyber Essentials Plus certified – see Datacenta Privacy Policy).
  • IT and hosting providers (for secure website and system support). We do not sell your personal data to third parties.

6. International Data Transfers

Some of our service providers (e.g. Mailchimp, Google Analytics) store and process data outside the UK/EEA. In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the UK ICO.

7. Data Retention

We will keep your personal data only for as long as necessary for the purposes it was collected:

  • Orders and invoices: 7 years (legal requirement).
  • Marketing data: until you unsubscribe or withdraw consent.
  • Website analytics: in line with Google’s retention settings.
  • Emails: stored securely and retained in accordance with business and legal requirements.

8. Your Rights

Under UK GDPR you have the right to:

  • Access your personal data.
  • Rectify inaccurate or incomplete data.
  • Request erasure (“right to be forgotten”).
  • Restrict or object to processing.
  • Request data portability.
  • Withdraw consent at any time (for marketing).
  • Lodge a complaint with the ICO: https://ico.org.uk/

To exercise any of these rights, contact: rchwast@drabest.pl.

9. Cookies

Our website uses cookies for analytics and performance improvement. You can control cookies via your browser settings.

10. Changes to This Notice

We may update this Privacy Notice from time to time to reflect legal or business changes. Please check this page periodically for updates.