Privacy Policy

Who we are

This website is run by TUQCO NATURAL STONE & TILE LTD (trading as Tuqco), a company registered in England and Wales under number 15325561, at Unit 22, Station Road Industrial Estate, Hailsham, East Sussex, BN27 2EY, United Kingdom. We supply natural stone mosaics and tiles to trade customers. For the purposes of UK data protection law we are the controller of the personal data described in this policy.

Questions about this policy or your data can be sent to info@tuqco.co.uk.

What we collect

Trade account

When you register we collect your name, email address, company name, a short description of your business, country, phone number, address and website, plus the password you choose (stored only in hashed form by our authentication provider). Once your account is approved we give it a customer number.

Samples, quotes and orders

When you request samples or place an order we collect delivery and contact details for you or the recipient you name, the products and quantities, and any notes you add. We create quotes, invoices and delivery notes from this information.

Enquiries

We receive enquiries through our contact form, by email, and through lead forms on Facebook and Instagram. These usually include your name, email address, phone number, and details of your project or the products you are interested in.

Newsletter

If you subscribe to our newsletter we collect your email address.

Website use

Like most websites, our servers and security services process technical data such as your IP address and browser type. We also use Google Analytics to see how the site is used — which pages are visited, which products are viewed, searches and filters, and which forms are completed. We do not send your name, email address or account details to Google Analytics.

How we use it, and our lawful basis

• To provide our services — reviewing and approving trade accounts, showing trade prices, sending samples, preparing quotes, processing orders and arranging delivery. Basis: contract, or steps you asked us to take before entering one.
• To reply to enquiries and follow up on them, including reminding you to finish setting up an account you started. Basis: legitimate interests in responding to and developing trade business.
• To keep business records such as invoices and VAT records. Basis: legal obligation.
• To send our newsletter. Basis: consent, which you can withdraw at any time using the unsubscribe link in every email.
• To keep the website secure and understand how it is used, so that we can improve it. Basis: legitimate interests.

Trade accounts are approved by a member of our team, not automatically. We use an AI service to summarise project enquiries for our team; it does not make decisions about you.

Who we share it with

We do not sell personal data. We use the following service providers, who process it on our behalf and only for the purposes below:

• Supabase — database and account login.
• Cloudflare — website hosting, security and spam protection (Turnstile).
• Brevo — account and order emails, and our newsletter.
• Google — website analytics (Google Analytics and Tag Manager).
• Shopify — order processing.
• Web3Forms — delivering contact form messages to our inbox.
• OpenAI — summarising project enquiries for our team. We ask OpenAI not to store this content.
• GitHub — storage for our private database backups.

If you contact us through a Facebook or Instagram lead form, Meta passes your answers to us; Meta's own privacy policy covers its handling of that data. We also share delivery details with couriers when we send samples or orders, and may disclose data where the law requires it.

International transfers

Some of these providers process data outside the UK, including in the European Union and the United States. Where that happens we rely on UK adequacy regulations or on the safeguards in the provider's data protection terms, such as the UK International Data Transfer Addendum.

How long we keep it

• Trade account data: while your account is open. If you ask us to close it, we delete it except where we must keep records.
• Invoices, orders and related records: six years, as required for tax purposes.
• Enquiries that do not lead to an account or order: up to 24 months after our last contact.
• Newsletter: until you unsubscribe.
• Account approval links expire after 30 days. Database backups are deleted after 90 days.

Cookies and similar technologies

We use a small number of cookies and browser storage:

• Login cookies keep you signed in to your trade account.
• Cloudflare Turnstile checks that forms are submitted by a person, not a bot.
• Browser storage remembers your sample and order baskets and your preferred product view on this device.
• Google Analytics cookies (_ga and _ga_*) count visits and show how the site is used.

You can block or delete cookies in your browser settings, and Google offers a browser add-on to opt out of Google Analytics. Blocking login cookies will stop the trade account from working.

Your rights

You have the right to ask for a copy of your personal data, and to ask us to correct it, delete it, restrict how we use it, or transfer it to you or another organisation. You can object to processing based on legitimate interests, and withdraw consent at any time. To make a request, email info@tuqco.co.uk. We will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to resolve it with you first.

Security

Data is sent over encrypted connections, access to it is limited to the people and providers who need it, and our database applies access rules so that each customer can see only their own records. No system is completely secure, but we take reasonable steps to protect your data.

Changes to this policy

We may update this policy when our services or the law change. The date at the top of this page shows when it was last revised.