Privacy Policy

Who we are

BAY CATERING EQUIPMENT SOLUTIONS LTD (company number 12803862) operates bayequipmentequip.com. Our address is 12 Pencarrow Road, Paignton, Devon, United Kingdom, TQ3 3FS. You can reach us at info@bayequipmentequip.com or +441803900069.

This policy explains what personal data we may process when you visit our website, use our contact forms, place an order, or correspond with us. It also explains your rights under UK data protection law.

We are the data controller for personal data described here. Nothing in this policy constitutes legal advice about your specific situation.

What data we may collect

We may process identification and contact details (name, email address, telephone number, business or property references you choose to supply).

For purchases we may process billing and delivery information, transaction references, and communications relating to orders. We do not ask you to submit full payment card numbers through the site order-request form.

Technical data may include IP address, browser type, device identifiers, approximate location derived from IP, pages viewed, and time on page. This helps security and service improvement.

If you email or call us, we retain correspondence strictly necessary to respond and administer our relationship with you.

• Contact and identity information
• Order, contract, and billing metadata
• Technical and usage data
• Communications you initiate with us

Purposes and lawful bases

We use your data to perform contracts with you, to take steps before a contract (for example answering a request), to comply with legal obligations, and for legitimate interests where those interests are not overridden by your rights.

Legitimate interests include operating and securing our website, fraud prevention, improving our services, and internal analytics with appropriate safeguards.

Where we rely on consent (for example non-essential marketing cookies), you may withdraw consent without affecting the lawfulness of processing before withdrawal.

Cookies and similar technologies

We may use cookies and similar technologies as described in our Cookie Policy. Essential cookies may be strictly necessary for the site to function.

You can manage cookie preferences through your browser. Blocking some cookies may affect site functionality.

Retention

We keep personal data only as long as needed for the purposes described, and to meet legal, accounting, or reporting requirements.

Order and transaction records may be retained for periods required for tax, commercial, or regulatory compliance.

After retention periods end, we delete or anonymise data where feasible.

Sharing and processors

We may share data with hosting providers, email delivery services, payment processors, analytics providers, and professional advisers who are bound by appropriate confidentiality and processing terms.

We do not sell your personal data. We may disclose information if required by law, court order, or to protect rights, safety, and security.

International transfers

If we transfer personal data outside the UK, we ensure appropriate safeguards exist as required by applicable law (for example adequacy regulations or standard contractual clauses).

Further details may be provided on request if transfers affect you.

Your rights

Subject to limitations in law, you may have the right to access, rectify, erase, restrict processing, object, port data, and withdraw consent where processing is consent-based.

You may lodge a complaint with the Information Commissioner’s Office (ico.org.uk). We encourage you to contact us first so we can try to resolve your concern.

Security

We implement organisational and technical measures appropriate to the risks of processing, including access controls and secure transmission where implemented by our suppliers.

No internet transmission is completely secure; you should use reputable devices and connections when sending sensitive information.

Children

Our services are not directed to children. If you believe a child has provided us personal data, please contact us and we will take appropriate steps.

Changes

We may update this policy to reflect business, legal, or regulatory changes. The date shown on the website or this page may be revised accordingly.

Continued use of bayequipmentequip.com after changes constitutes acceptance unless applicable law requires a different standard.

Automated processing and profiling

We do not rely on solely automated decision-making that produces legal or similarly significant effects concerning you unless we have informed you, provided a meaningful opportunity for human review where required, and have a lawful basis.

Analytics may aggregate behavioural data without identifying you as an individual where feasible.

Exercising your rights in practice

To exercise rights, email info@bayequipmentequip.com with the subject line Data Protection Request and sufficient detail for us to verify your identity.

We may ask for proof of identity before disclosing personal data. We respond without undue delay and within statutory time limits where applicable.

Personal data breach handling

We maintain procedures to detect, report, and investigate suspected personal data breaches in line with ICO expectations.

Where we are controller and a breach is likely to affect your rights, we will notify the ICO and you without undue delay where legally required.

You should inform us promptly if you suspect unauthorised access to information we hold about you.

Marketing and similar communications

We send marketing only where permitted by law — for example after valid consent or under the soft opt-in for similar products where applicable.

Every marketing email includes an unsubscribe or preference mechanism. Transactional messages about orders are not marketing.

Third-party websites and embedded content

Our website bayequipmentequip.com may link to external sites for convenience. We are not responsible for their privacy practices or content.

Review third-party policies before submitting personal data on those sites.

Records of processing and DPIA-style assessment

We maintain internal records of processing activities proportionate to our size and risk profile.

Where processing is likely to result in high risk to individuals, we assess whether a Data Protection Impact Assessment or consultation with the ICO is needed.

Contacting the ICO

The Information Commissioner’s Office is the UK supervisory authority for data protection (ico.org.uk). You may contact them without prejudice to any other administrative or judicial remedy.

We prefer you contact us first at info@bayequipmentequip.com or +441803900069 so we can address concerns quickly.

Mediation or other ADR routes may be available depending on the nature of the dispute and applicable consumer regulations.

Processor and sub-processor governance

Where we appoint processors, Article 28-style terms (or UK equivalent concepts) address confidentiality, security assistance, deletion/return, and audit cooperation within reason.

Sub-processors are permitted only on documented terms requiring equivalent protection; we notify material changes where contractually required.

Special category and criminal offence data

We do not intentionally solicit special category or criminal offence data through this storefront. If you voluntarily supply such data in a free-text field, we will restrict processing to what is necessary and lawful.

Employment and HR data (if relevant interactions occur)

CVs or recruitment emails are processed under employment-law frameworks distinct from e-commerce checkout. Retention for unsuccessful applicants follows a documented policy available on request.

Logging, monitoring, and lawful intercept resistance

Security logs may include IP addresses, user-agent strings, coarse timestamps, and correlation IDs. Logs are rotated and access-controlled.

We do not build covert behavioural graphs from checkout data for unrelated profiling.