Lee Distribution Group Ltd

This Privacy Policy explains how Lee Distribution Group Ltd (“we”, “us”, “our”), who operate the Lee Distribution Group of companies, collects, uses, stores, and protects personal information when you interact with us, including through our websites, by telephone, email, or through our services.

​

We are committed to protecting your personal information and handling it responsibly in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

Data Controller

Lee Distribution Group Ltd is the data controller responsible for your personal information.  The Lee Distribution Group of companies may operate through various trading names and legal entities. Where a specific group company provides services to you, that entity may act as the relevant data controller for the personal information it processes.

​

If you have any questions regarding this Privacy Policy or how we handle your personal information, please contact Lee Distribution Group Ltd using the details provided at the end of this policy.

​

Information We Collect

We may collect and process the following types of personal information:

• Name and job title

• Company name and business address

• Contact information including telephone number and email address

• Billing and account information

• Information provided when making enquiries, requesting quotations, or using our services

• Records of correspondence and communications with us, including telephone calls where applicable

• Information relating to contracts, agreements, orders, invoices, and services provided

• Website usage information, including cookie and analytics data

• Any other information reasonably required to provide our services or manage our relationship with you

​​

How We Use Your Information

We require this information to understand your needs, provide our services, manage our business relationships, and ensure we can deliver an effective service.  We may use your information for the following purposes:

• Providing quotations and delivering services

• Managing customer and supplier relationships

• Processing orders, invoices, and payments

• Maintaining accurate business records

• Responding to enquiries and requests

• Improving our products and services

• Communicating important service updates

• Managing complaints, disputes, and enquiries

• Protecting our business, customers, and legal interests

• Meeting legal, regulatory, and contractual obligations

​​

Lawful Basis for Processing Personal Information

Under UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are required to have a lawful basis for collecting, storing, and processing your personal information.

​

The lawful bases we rely upon may include:

​

Contractual necessity

We may process your personal information where it is necessary to enter into, manage, or fulfil a contract with you. This includes providing quotations, delivering services, managing customer and supplier relationships, processing invoices and payments, and maintaining records relating to agreements and transactions.

Legitimate interests

We may process your personal information where it is necessary for our legitimate business interests. This may include managing our business operations, maintaining accurate records, improving our services, communicating with customers and suppliers, preventing fraud, resolving disputes, establishing, exercising, or defending legal claims, and protecting our business interests.

Legal obligations

We may process and retain personal information where required to comply with legal or regulatory obligations. This includes obligations relating to financial records, taxation, accounting requirements, and responding to lawful requests from courts, regulators, law enforcement agencies, or other authorised bodies.

Consent

Where required by law, we may rely on your consent to process certain personal information, such as specific marketing communications. Where processing is based on consent, you have the right to withdraw that consent at any time.

​

We only collect and process personal information that is necessary for the purposes explained in this Privacy Policy. We will not use your personal information for purposes that are incompatible with those stated without informing you and, where required, obtaining appropriate consent.

​

Marketing Communications

From time to time, we may contact you regarding our products, services, updates, or offers where we have a lawful basis to do so.

You can opt out of marketing communications at any time by contacting us or using any unsubscribe option provided.

​

Sharing Your Information

We do not sell, rent, or trade personal information.

​

We may share personal information where necessary with trusted third parties who support our business operations, including service providers, IT providers, payment providers, professional advisers, insurers, or legal representatives.

​

We may also disclose information where required by law, regulation, court order, or where necessary to protect our legal rights, prevent fraud, or defend against claims.

​

Any third party processing personal information on our behalf is expected to maintain appropriate security and confidentiality.

​

Security

We are committed to ensuring that your personal information is secure.

​

We have implemented appropriate technical and organisational measures to protect personal information from unauthorised access, accidental loss, misuse, alteration, or disclosure.

​

While we take reasonable steps to protect your information, no method of electronic transmission or storage can be guaranteed to be completely secure.

​

Data Retention

We retain personal information only for as long as necessary for the purposes it was collected, including meeting legal, accounting, contractual, and regulatory requirements.

​

Information is securely deleted or anonymised when it is no longer required.

​

Cookies

Our websites use cookies and similar technologies to improve user experience, analyse website performance, and understand how visitors use our websites.

​

Cookies are small text files stored on your device which help websites remember information about your visit.

​

Some cookies are necessary for website functionality, while others may be used for analytics or tracking purposes.

​

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.

​

External Links

Our websites may contain links to external websites.

​

Although we aim to link only to reputable websites, we are not responsible for the privacy practices, content, or security of third-party websites.

​

We recommend reviewing the privacy policies of any external websites before providing personal information.

​

Your Data Protection Rights

Under UK data protection law, you have rights including:

• The right to request access to your personal information

• The right to request correction of inaccurate information

• The right to request deletion of information where appropriate

• The right to restrict or object to certain processing

• The right to withdraw consent where processing is based on consent

​​

Subject Access Requests (SARs)

You have the right to request a copy of the personal information we hold about you. This is known as a Subject Access Request (SAR).

To submit a SAR, requests must be made in writing and include:

• Your full name and contact details

• Sufficient information to allow us to verify your identity

• Details of the information you are requesting

• Any relevant information that may assist us in locating the requested records

 

SAR requests should be sent by email or post using the contact details provided below.

​

Where a Subject Access Request is submitted by a third party on behalf of another individual, we require evidence that the requester has appropriate authority to act on that individual’s behalf.  As part of our verification process, we will normally issue an authorisation form to the individual whose personal information is being requested. This form must be completed, signed by the individual, and witnessed by an independent witness.  The witness must not be a family member, relative, partner, or any person living at the same address as the individual providing authorisation. The purpose of this requirement is to provide additional assurance that the authority has been freely provided by the individual concerned.  The signed and witnessed authority form must confirm the identity of the individual, the identity of the authorised representative, and confirm that the individual gives permission for us to communicate with that representative and/or disclose their personal information to them.  We may also require appropriate identification documents from both the individual whose information is requested and the authorised representative before any personal information is disclosed.  This process is in place to ensure that personal information is only released to the correct individual or an appropriately authorised representative, and to protect the confidentiality, security, and integrity of the information we hold.

​

Once we receive a valid SAR, we will respond without undue delay and normally within one month in accordance with UK GDPR requirements.

​

Where a request is complex, or multiple requests are made, we may extend the response period by up to two further months. If this applies, we will inform you within one month of receiving the request.

​

We do not normally charge a fee for responding to a SAR. However, we may charge a reasonable fee or refuse a request where permitted by data protection law, including where a request is manifestly unfounded or excessive.

​

Complaints

If you have concerns about how we handle your personal information, please contact us first so that we can investigate and attempt to resolve your concerns.  You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

​

Contact Details

Lee Distribution Group Ltd
317 Golden Hill Lane
Leyland
PR25 2YJ