Privacy and cookie policy.
How Lacquerite Ltd handles personal data from trade customers, enquiries and visitors to lacquerite.com. Last updated 15 October 2026.
We are a business-to-business supplier of professional coatings. Most of the information we hold is about businesses, but it often includes personal data such as the names, work email addresses and phone numbers of the people we deal with, and details of sole traders and directors on credit applications. This policy explains what we do with it under the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, the Irish Data Protection Acts 1988–2018, and the e-privacy rules on cookies in Ireland and the UK (S.I. 336/2011 and PECR).
1. Who we are
Lacquerite Ltd (company number 516806) is the controller of the personal data described in this policy.
- Address: Unit 12G, Axis Business Park, Tullamore, Co Offaly, R35 NN62, Ireland
- Email: info@lacquerite.com
- Phone: +353 (0)57 936 1062
We are not required to appoint a Data Protection Officer. Send any privacy question or request to the email address above, marked “Data protection”.
2. What we collect and why
Enquiries through the contact form
Your name, company, email address, phone number and message. We use them to answer your enquiry and keep a record of the conversation. The form is protected by Google reCAPTCHA (see cookies), and a copy of each enquiry is delivered by email to our sales team and to our website support provider so that missed or failed messages can be followed up.
Quote requests
The quote builder runs in your browser. Nothing you enter is sent to us until you choose to email the specification from your own email program, or call us. Once we receive it, we use the details to prepare and follow up your quotation.
Trade credit applications
Business details, names and contact details of the proprietor, directors, main and accounts contacts, trade references, requested credit limit, and the record of your acceptance of our terms (typed name, position, date and time, browser details and a reference hash). The application is assembled in your browser and sent to us by email. We use it to assess whether to open a credit account, which may involve contacting the trade referees you name and checking public company records, and then to run the account.
Customers and orders
Contact, delivery and invoicing details, order history, payments and correspondence. We use them to supply goods, deliver, invoice, collect payment, handle returns and claims, provide technical support, and meet our tax, accounting and product-safety obligations.
Trade document areas
The mix-ratio page asks for a company name, email address and confirmation that you are a trade user. This is checked in your browser only and is not sent to us. The safety data sheet area asks for a trade password; we set a cookie to remember that you have signed in. We do not record who downloads which sheet.
Phone, email and the trade counter
When you call, email or visit, we keep the details you give us so we can deal with your request, process orders and keep accurate customer records.
Website visits
Our hosting provider processes technical data such as IP address, browser type, the pages requested and the time of the request, to deliver the site and protect it against abuse. If you accept analytics cookies, Google Analytics also collects information about how you use the site (see cookies). We do not use advertising or tracking cookies for marketing.
Marketing
We do not currently send marketing emails. If we start, we will only contact you where the law allows, and every message will include a simple way to opt out.
3. Our lawful bases
- Contract: to take steps you ask for before an order or credit account, and to perform our contract with you.
- Legal obligation: tax, accounting, company law and product-safety duties, including supplying safety data sheets for regulated products.
- Legitimate interests: answering enquiries from businesses, assessing credit risk, protecting the site and our forms from spam and abuse, keeping business records, and defending legal claims. We weigh these against your rights, and you can object at any time.
- Consent: for analytics cookies, and for loading the Google map on the contact page. You can withdraw consent at any time using Cookie settings.
4. Who we share data with
We do not sell personal data. We share it only where needed, with:
- Service providers who act on our instructions: website hosting and security (Cloudflare), email delivery for the contact form (Mailgun), spam protection and analytics (Google), our website support provider (Yellowcom Ltd), our email and IT providers, and our accountants.
- Couriers and hauliers, to deliver your order.
- Trade referees and credit-information services, when you apply for a credit account.
- Banks, payment providers and debt-recovery agents, to take payment and recover unpaid debts.
- Manufacturers and suppliers such as Novalk and Sirca, where needed to resolve a product or technical query you have raised.
- Professional advisers, insurers, regulators and authorities such as Revenue, HMRC or the courts, where the law requires it or to establish or defend legal claims.
- A buyer or successor if our business, or part of it, is sold or restructured.
5. Transfers outside the UK and EEA
Some providers, including Google, Mailgun and Cloudflare, may process data in the United States or elsewhere. Where they do, we rely on an adequacy decision (such as the EU–US Data Privacy Framework and its UK extension) or on the European Commission’s standard contractual clauses and the UK International Data Transfer Addendum, with additional safeguards where needed. Data moves freely between the EEA and the UK under adequacy decisions. Ask us for more detail on any transfer.
6. How long we keep data
| Data | Kept for |
|---|---|
| Enquiries and quotes that do not lead to an order | 2 years from last contact |
| Customer accounts, orders, invoices and payments | 6 years after the end of the financial year of the last transaction, to meet tax and company-law rules |
| Credit applications and terms acceptance records | For the life of the account plus 6 years; declined applications 12 months |
| Product, complaint and safety records | Up to 6 years, or longer if a claim is ongoing |
| Hosting and security logs | Typically up to 30 days, as set by our hosting provider |
| Google Analytics data | 14 months |
7. Your rights
Under the EU GDPR and UK GDPR you can ask us to:
- give you a copy of your personal data (access);
- correct inaccurate or incomplete data (rectification);
- delete your data, where we no longer have a reason to keep it (erasure);
- limit how we use your data (restriction);
- give you data you provided in a reusable format (portability);
- stop using your data where we rely on legitimate interests, and stop any direct marketing at any time (objection);
- withdraw consent, without affecting what was done before.
Email info@lacquerite.com. We may need to confirm your identity. We reply within one month, which can be extended by two further months for complex requests, and there is normally no charge. We do not make decisions about you based solely on automated processing.
8. Cookies and similar technologies
Cookies are small files stored by your browser. We use essential cookies and storage that the site needs to work. We only use analytics cookies, and only load the Google map, if you agree. You can change your choice at any time with Cookie settings, which also appears in the footer of every page. Rejecting analytics removes the Google Analytics cookies we can reach.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| lq_cookie_consent | Lacquerite | Remembers your cookie choice (browser storage) | Essential | 12 months |
| lacquerite_sds | Lacquerite | Keeps you signed in to the trade safety data sheet area | Essential | 24 hours |
| lacquerite-sds, lacquerite-trade-print | Lacquerite | Remembers that the SDS and mix-ratio areas are unlocked in this tab (browser session storage) | Essential | Until the tab closes |
| _GRECAPTCHA | Google reCAPTCHA | Tells people apart from spam bots on our forms | Essential (security) | 6 months |
| _ga, _ga_* | Google Analytics | Counts visits and shows which pages are used, so we can improve the site | Analytics (consent) | Up to 2 years |
| Google Maps cookies | Set only if you choose “Show map” on the contact page | Third party (your choice) | Set by Google |
The site also loads fonts from Google Fonts, which means your browser sends your IP address to Google to download them. Google reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service. You can also block or delete cookies in your browser settings, but some parts of the site may then stop working.
9. Security
We use HTTPS across the site, restrict access to personal data to staff and providers who need it, and choose providers with appropriate security measures. No system is completely secure, so please do not send card details or passwords by email.
10. Other points
- Our products and website are for trade and professional users and are not directed at anyone under 18.
- Links to other websites, including Facebook, LinkedIn and manufacturer sites, are covered by those sites’ own privacy policies.
- If you give us details of other people, such as colleagues or trade referees, please make sure they know you are doing so.
11. Complaints
Please contact us first so we can try to put things right. You also have the right to complain to a data protection regulator:
- In Ireland and the EU: the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28. You can also complain to the regulator in the EU country where you live or work.
- In Northern Ireland and the rest of the UK: the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
12. Changes to this policy
We update this policy when our services or the law change. The date at the top shows the latest version. Significant changes will be highlighted on the site.