1. Who we are
Pinpoint Badges & Promotions Limited (company number 01475486) is the controller of the personal information described in this notice. We trade as Pinpoint and operate this website.
Our registered office is Ground Floor, Kings House, 101–135 Kings Road, Brentwood, Essex CM14 4DR. Our trading and contact address is Winston House, Maltings Mews, Sidcup, Kent DA15 7DG.
Contact us at sales@pinpoint.promo or 020 8302 8008. Please mark data-protection correspondence for the Data Protection Lead.
2. Information we collect
Depending on how you deal with us, we may collect:
- Identity and contact details, including your name, job title, business, postal address, email address and telephone number.
- Enquiry and project details, including messages, product requirements, artwork, branding instructions, quantities, deadlines and sample or quotation requests.
- Account and transaction details, including login and account identifiers, quotations, orders, delivery details, invoices, payment status, proofs, approvals and correspondence. Stripe processes card details; we do not receive or store full card numbers.
- Technical and usage details, including IP address, browser/device information, security logs, pages and products viewed, searches, referral information and cookie or consent identifiers.
- Marketing preferences and interactions with communications we send.
- Information supplied by others, such as your employer or colleague, delivery and payment providers, publicly available business sources, or a customer giving us your details as a delivery contact.
Please do not send special-category information (such as health, ethnicity or religious information) unless genuinely necessary and we have agreed how it will be handled.
3. How and why we use it
| Purpose | Typical information | Lawful basis |
|---|---|---|
| Answer enquiries and prepare samples, quotations or proposals | Contact and project details | Steps requested before a contract; legitimate interests in responding to business enquiries |
| Administer accounts; fulfil orders; deliver products; provide proofs, invoices and support | Contact, account, project and transaction details | Contract; legitimate interests in performing business contracts |
| Take and reconcile payments and prevent fraud | Contact, transaction and technical details | Contract; legal obligations; legitimate interests in securing payment and preventing fraud |
| Operate, secure, troubleshoot and improve the website | Technical, usage and account details | Legitimate interests in running a secure, useful service; consent where required for cookies |
| Keep tax/accounting records and deal with disputes | Account, correspondence and transaction details | Legal obligations; legitimate interests in legal claims |
| Send relevant business marketing and measure it | Contact, preference and interaction details | Consent where required; otherwise legitimate interests, subject to your right to object |
Where information is necessary to enter into or perform a contract, we may be unable to provide a quotation, account, product or delivery without it. We do not use solely automated decision-making that produces legal or similarly significant effects.
4. Who we share information with
We share only what is reasonably necessary with:
- our staff, operations and sourcing office;
- manufacturers, decorators, suppliers, couriers and fulfilment partners;
- website hosting, IT, security, communications, analytics and support providers;
- Stripe and other payment, banking, accounting and fraud-prevention providers;
- professional advisers, insurers, auditors, regulators, law-enforcement bodies and courts where required; and
- parties and advisers involved in a genuine corporate transaction.
Our providers must protect information and may use it only for agreed purposes. We do not sell personal information.
5. International transfers
Our sourcing activities include an office and suppliers in China, and some technology providers operate internationally. This may involve information being accessed or processed outside the UK. Where UK adequacy regulations do not apply, we use an appropriate safeguard such as the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful mechanism, with supplementary safeguards where needed. Contact us for details relevant to a transfer.
6. How long we keep information
We keep information only as long as needed for the purpose collected, including legal, tax, accounting, warranty and dispute requirements. In general:
- enquiries that do not lead to business are normally reviewed for deletion after 24 months;
- customer, order, invoice and core contract records are normally kept for seven years after the relevant financial year or relationship;
- support and marketing records are kept while relevant, and suppression records may be retained to respect opt-outs;
- technical and security logs are kept for periods proportionate to security and diagnostic needs; and
- cookie lifetimes are described in our cookies policy.
We may retain information longer for a complaint, claim, investigation or legal hold, or anonymise it so it no longer identifies anyone.
7. Your rights
Depending on the circumstances, UK law gives you rights to be informed, access your information, correct it, have it erased, restrict or object to processing, and receive certain information in a portable format. You may withdraw consent at any time without affecting earlier lawful processing. You have an absolute right to object to direct marketing.
Contact us to exercise a right. We may need to verify your identity and may apply a lawful exemption. There is usually no fee.
8. Security, children and links
We use appropriate organisational and technical measures designed to protect personal information, restrict access and respond to suspected breaches. No internet service is completely secure. This business-to-business website is not intended for children, and we do not knowingly collect information from children.
Other websites and embedded services have their own privacy practices. Please read their notices when using them.
9. Contact, complaints and changes
Email sales@pinpoint.promo, call 020 8302 8008, or write to Data Protection Lead, Pinpoint, Winston House, Maltings Mews, Sidcup, Kent DA15 7DG.
Please contact us first so we can try to resolve your concern. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, call 0303 123 1113, or write to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
We may update this notice when our services, suppliers or the law change. Material changes will be highlighted where appropriate.