Last updated: 10 July 2026
Thompsons Packaging Ltd respects your privacy and is committed to protecting your personal information. This notice explains what information we collect, why we use it, who we share it with, how long we keep it and the rights available to you.
This notice applies to customers, prospective customers, suppliers, website visitors, account contacts and other people who communicate or conduct business with us.
Thompsons Packaging Ltd is the controller responsible for the personal information described in this notice.
Thompsons Packaging LtdCompany registration number: 05696101
Telephone: 01257 262 469
Privacy email: [email protected]
In this notice, “we”, “us” and “our” mean Thompsons Packaging Ltd.
We may collect and use the following categories of personal information.
We do not normally receive or store complete payment-card details. Card payments are processed by our payment-service providers through their secure systems.
We record telephone calls for training, quality monitoring, dispute resolution, fraud prevention and security purposes. Callers will be informed that recording is taking place.
We operate CCTV at our premises for the prevention and detection of crime, the protection of staff, visitors, property and stock, health and safety, and the investigation of incidents. CCTV may capture images of visitors, contractors, vehicles and vehicle registration numbers.
We do not routinely seek special category personal information, such as health, biometric, racial or religious information, or criminal offence information. Where such information is provided or must be used, we will only process it where we have an additional lawful condition and appropriate safeguards.
We collect personal information:
We may use personal information to:
UK data protection law requires us to have a lawful basis for using personal information. Depending on the circumstances, we rely on one or more of the following bases.
We use information where it is necessary to enter into or perform a contract with you, including processing orders, taking payment, arranging delivery and responding to requests made before a contract is formed.
We use information where it is necessary for our legitimate business interests or those of another organisation, provided those interests are not overridden by your rights and interests. These interests may include:
We use information where necessary to comply with legal duties, including tax, accounting, product-safety, data-protection, fraud-prevention and law-enforcement requirements.
We rely on consent where the law requires it, including for certain marketing communications and non-essential cookies. You may withdraw consent at any time, although this will not affect processing carried out before withdrawal.
In limited circumstances, we may use information to establish, exercise or defend legal claims, or to protect someone’s vital interests.
We may use your business contact details to tell you about products, services and offers that may be relevant to your organisation.
Where required, we will obtain consent before sending electronic marketing. In some circumstances, the law permits us to market similar products and services to existing customers, provided we offered a clear opportunity to opt out when the details were collected and in every subsequent message.
You may stop marketing communications at any time by:
Opting out of marketing will not stop operational communications about quotations, orders, deliveries, payments, accounts or service matters.
We may retain a limited suppression record so that we can respect your request not to receive future marketing.
Our website may use cookies and similar technologies to:
Non-essential cookies, including analytics or advertising cookies, should not be placed unless you have given the required consent. You can accept, reject or manage non-essential cookies through our cookie controls.
For details of the cookies and third-party services actually used on our website, their purposes and duration, please read our Cookie Policy. The final URL should be inserted before publication.
Important: Our Cookie Policy and consent banner will identify the cookies and services actually used on the live website. We do not name individual analytics, advertising or embedded services in this notice until their use has been confirmed.
We do not sell personal information.
We may share information where necessary with:
Service providers acting on our behalf may only use information for the agreed purpose and must protect it appropriately.
Where a third party determines its own purposes for using information, it will be responsible for providing its own privacy information.
We do not currently transfer personal information outside the United Kingdom.
If this changes, we will update this notice and ensure that any international transfer is made lawfully and protected by an appropriate safeguard where required.
We keep personal information only for as long as reasonably necessary for the purposes described in this notice, including satisfying legal, accounting, tax, insurance and reporting requirements and resolving disputes.
The period will depend on the type of information, the relationship involved and any legal or contractual requirement.
Type of information |
Typical retention approach |
|---|---|
Orders, invoices, payments and accounting records |
Normally retained for at least six years after the end of the relevant financial period, or longer where legally required. |
Customer and supplier account records |
For the duration of the relationship and an appropriate period afterwards for legal, tax, warranty, debt-recovery and dispute purposes. |
Quotations and sales enquiries |
For a reasonable period based on the nature of the enquiry and likelihood of a continuing business relationship. |
Customer-service correspondence and complaints |
For as long as needed to resolve the matter and protect the parties’ legal interests. |
Marketing records |
Until you opt out or the information is no longer relevant, with a limited suppression record retained to respect your preference. |
Website security and technical logs |
For a limited period appropriate to security, diagnostics and fraud prevention. |
Call recordings |
Normally one month. Where a recording is preserved for an investigation, it may be retained until one year after the investigation has concluded. |
CCTV recordings |
Normally one month. Where footage is preserved for an investigation, it may be retained until one year after the investigation has concluded. |
We may retain information for longer where a complaint, legal claim, regulatory enquiry, fraud concern or outstanding debt exists.
When information is no longer required, we will delete it, anonymise it or securely destroy it.
We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, disclosure, access or destruction.
These measures may include access controls, authentication, staff training, secure systems, backups, malware protection, supplier due diligence and procedures for responding to security incidents.
Access is restricted to people who need the information for legitimate business purposes and who are subject to confidentiality obligations.
No internet transmission or storage system can be guaranteed to be completely secure. You should protect your account credentials and notify us promptly if you suspect unauthorised use.
Depending on the circumstances, you may have the right to:
These rights are not absolute. For example, we may need to retain invoices, transaction records or information needed to establish, exercise or defend legal claims.
You will not normally have to pay a fee to exercise your rights. We may charge a reasonable fee or refuse a request where permitted by law, including where a request is manifestly unfounded or excessive.
We may need to verify your identity before responding. We will normally respond within one month, although the law permits an extension for complex or multiple requests.
To exercise a right, email [email protected] or use the contact details below.
Please contact us first if you have concerns about how we use personal information. We will try to resolve the matter promptly.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: ico.org.uk/make-a-complaint
Our website may contain links to websites, services or applications operated by other organisations.
We do not control those organisations and are not responsible for their privacy practices. You should read their privacy notices before providing personal information.
We may update this notice to reflect changes in our business, website, service providers or legal obligations.
The latest version will be published on this page with its last-updated date. Where a change is significant, we may also bring it to your attention by email, account notification or a website notice where appropriate.
For questions about this notice or to exercise a data protection right, contact:
Privacy ContactEmail: [email protected]
Telephone: 01257 262 469
