Privacy Policy
Last updated: 31 July 2026
1. Data Controller
Eternox United Kingdom Ltd, with registered address at Action Can Building, Dixon Close, Old Boston Trading Estate, Haydock, Merseyside WA11 9SL, United Kingdom, is the data controller for personal data collected through this website, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data We Collect
We collect the following personal data when you interact with our site: (a) Contact details: name, email address, company, country, city and reason for enquiry when you complete our contact form; (b) Browsing data: IP address, browser type, pages visited, time spent and other technical data collected automatically through cookies and similar technologies; (c) Tool usage data: the selections you make in our product selectors (abrasives, welding) in order to provide personalised recommendations.
3. Purpose of Processing
We use your personal data to: (a) respond to your enquiries and quotation requests; (b) send you commercial information about our products and services, with your prior consent; (c) improve the browsing experience and site functionality; (d) analyse website usage for statistical purposes; (e) comply with legal and regulatory obligations.
4. Legal Basis
The processing of your data is based on: (a) your explicit consent when submitting forms or accepting cookies; (b) the performance of pre-contractual measures at your request; (c) our legitimate interest in improving our services and communicating with potential customers; (d) compliance with legal obligations. Under UK GDPR Article 6, we ensure a valid legal basis exists for each processing activity.
5. Data Sharing
We do not sell or rent your personal data to third parties. We may share your data with: (a) service providers who assist us in operating the site (hosting, email, analytics) under confidentiality agreements; (b) public authorities when required by law; (c) Eternox group companies for legitimate internal purposes. Where data is transferred outside the UK, we ensure appropriate safeguards are in place.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. Contact data is retained for a maximum of 3 years from the last interaction. Browsing data is retained for a maximum of 26 months.
7. Your Rights
Under UK GDPR, you have the right to: (a) access your personal data; (b) rectify inaccurate data; (c) request erasure of your data (right to be forgotten); (d) restrict or object to processing; (e) data portability; (f) withdraw consent at any time; (g) lodge a complaint with the Information Commissioner's Office (ICO). To exercise these rights, contact us at contact@eternox.co.uk.
8. Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or destruction. These measures include SSL/TLS encryption, restricted data access and regular security reviews.
9. International Transfers
Your personal data may be transferred to and processed on servers located outside the United Kingdom. In such cases, we ensure that adequate levels of protection are maintained through Standard Contractual Clauses (SCCs) or adequacy decisions, in compliance with UK GDPR requirements.
10. Contact
For privacy enquiries or to exercise your rights, contact us at contact@eternox.co.uk or through our contact form.