IronmongeryDirect is committed to providing the safest and most secure shopping experience available, and we take the security of your personal details very seriously.

This policy explains when and why we collect personal information about people who visit our website, how we use it, the conditions under which we may disclose it to others and how we keep it secure.

We may change this policy from time to time so please check this page occasionally to ensure that you’re happy with any changes. By using our website, you’re agreeing to be bound by this policy.

Any questions regarding this policy and our privacy practices should be sent by email to privacy@ironmongerydirect.com

Ironmongery Direct Ltd are part of the Manutan Group (France). Company no. 3121306 whose registered office is at Ironmongery Direct, Scimitar Park, Basildon, Essex, SS13 1ND. VAT No. 668 0422 30

We obtain information about you when you use our website, for example, when you contact us about products and/or services, when you purchase our products, or if you register to receive one of our newsletters or catalogues.

We collect information about you for 2 reasons: firstly, to process your order and secondly, to provide you with the best possible service.

The personal information we collect might include your name, address, email address, IP address, and information regarding what pages are accessed and when. If you purchase a product from us, we will also have your invoice and delivery details.

For each visitor to our web site, we aggregate information on what pages consumers’ access or visit, information volunteered by the consumer, such as survey information and/or site registrations.

The information we collect is used to notify consumers about our products and services or updates to our web site, not shared with other organizations for commercial purposes.

We will never collect sensitive information about you without your explicit consent. The information we hold will be accurate and up to date. You can check the information that we hold about you by emailing us at privacy@ironmongerydirect.com. If you find any inaccuracies we will delete or correct it promptly.

We may use your information to:

• Process orders that you have submitted
• To carry out our obligations arising from any contracts entered into by you and us
• Deal with entries into a promotion or competition
• Seek your views or comments on the services we provide
• Notify you of changes to our services
• Send you communications which you have requested and that may be of interest to you. These may include information about new products, promotions, or delivery tracking information
• Processing of a job application

We require any such third parties to treat your personal information as fully confidential and to fully comply with all applicable data protection legislation.

We may analyse your personal information to create a profile of your preferences so that we can contact you with information relevant to you. We may make use of additional information about you when it is available from external sources to help us do this effectively. We may also use your personal information to detect and reduce fraud and credit risk.

We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations (for example the avoidance of money laundering). We will hold your personal information on our systems for as long as is necessary for the relevant activity, or for as long as is set out in any relevant contract you hold with us.

The retention periods for your data vary depending on the type of data collected and the purposes for which we use it. The starting point of the retention period depends on the specific circumstances: where you expressly request the deletion of your data, the retention period begins at the time of your request; otherwise, the retention period begins at the end of the commercial relationship between us.

Where data is processed to comply with our contractual obligations, we are required to retain it for the duration of the applicable statutory limitation period, in order to be able to demonstrate the proper performance of our contractual obligations.

Where data is not required for the performance of contractual obligations, it is deleted once the commercial relationship between us has ended.

We will not sell or rent your information to third parties.

We will not share your information with third parties for marketing purposes without your explicit permission.

Third-Party Service Providers working on our behalf: We may pass your information to our third-party service providers, agents, subcontractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf (for example delivering goods to you, satisfaction surveys or collection of payment).

However, when we use third-party service providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes. Unless you have requested us to do so, or we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime we will not release your information to third parties outside the Manutan Group for them to use for their own direct marketing purposes.

As part of the Manutan Group, whose main entity is headquartered in France, some of your personal data may be transferred to France where necessary, knowing that the adequacy decision between UK and EU GDPR ensure an appropriate level of protection.

In addition, certain of our service providers that we rely on to ensure the proper performance of our contractual obligations may be located in the United States. In such cases, we ensure that they provide an adequate level of protection equivalent, at a minimum, to the standards required under the UK GDPR, in particular by verifying their adherence to the Data Privacy Framework, UK extensions and safeguards.

Business transfers: We may transfer your personal data to a third party in the event that we sell, transfer, or merge parts of our business or assets, or seek to acquire other businesses or merge with them. Any such transfer will be subject to appropriate confidentiality arrangements, and we will only share the personal data necessary for the purpose of the transaction. If a change happens to our business, the new owners may use your personal data in the same way as set out in this privacy policy.

The personal information that we hold will be held securely in accordance with our internal security policy and the law.

We use industry leading secure server technology that implements Secure Socket Layering (SSL) to protect your details and assist your shopping experience. SSL is the industry standard for encryption and enables millions of secure online transactions on a daily basis.

You have a choice about whether or not you wish to receive information from us. If you do not want to receive direct marketing communications from us, then please call our call centre or unsubscribe from direct communications such as emails.

The accuracy of your information is important to us. We are continually working on ways to make it easier for you to review and correct the information that we hold about you. In the meantime, if you change email address, or any of the other information we hold is inaccurate or out of date, or you wish us to delete or ‘forget’ your information, please email us at privacy@ironmongerydirect.com

Under the UK GDPR, you have the following rights in relation to your personal data:

- The right to access the personal data we hold about you;

- The right to request the correction of inaccurate or incomplete data;

- The right to request the erasure of your personal data (“right to be forgotten”);

- The right to request the restriction of processing of your personal data;

- The right to object to the processing of your personal data, in particular where processing is based on our legitimate interests;

- The right to data portability, allowing you to obtain and reuse your personal data across different services;

- Where processing is based on your consent, the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. Further information is available at www.ico.org.uk.

Cookies are small text files that are stored on your computer when you visit some websites. Some cookies are strictly necessary for the functioning of the website, while others require your consent.

We use cookies to help identify your computer so we can tailor your user experience, track shopping basket contents and remember where you are in the order process.

You can disable any cookies already stored on your computer, but these may stop our website from functioning properly.

We use the following categories of cookies:

- Strictly necessary cookies: these are essential for the operation of our website and do not require your consent;

- Performance and analytics cookies: these allow us to recognise and count the number of visitors and to see how visitors move around our website;

- Functional cookies: these are used to recognise you when you return to our website and to personalise content;

- Targeting and advertising cookies: these may be set through our site by our advertising partners to build a profile of your interests and show you relevant advertisements.

The following functionality requires cookies to be enabled on our website:

• Remember what is in your shopping basket
• Remember where you are in the order process
• Remember that you are logged in and that your session is secure. You need to be logged in to complete an order.

The following are not Strictly Necessary, but are required to provide you with the best user experience and also to tell us which pages you find most interesting (anonymously):

• Track the pages you visits via Google Analytics
• Targeting Cookies

Please note that these cookies do not contain or pass any personal, confidential or financial information or any other information that could be used to identify individual visitors or customers purchasing from our web site.

- Strictly necessary cookies: these are essential for the operation of our website and do not require your consent;

- Performance and analytics cookies: these allow us to recognise and count the number of visitors and to see how visitors move around our website;

- Functional cookies: these are used to recognise you when you return to our website and to personalise content;

- Targeting and advertising cookies: these may be set through our site by our advertising partners to build a profile of your interests and show you relevant advertisements.

Where required by law, we will request your consent before placing non-essential cookies on your device. You can manage or withdraw your consent at any time through our cookie management tool or via your browser settings.

For further information about the cookies we use and how to manage your preferences, please refer to our preference center.

To ensure compliance with the UK GDPR, Ironmongery Direct Ltd uses two legal bases for processing your personal data:

• Consent - where you have given clear consent for us to process your personal data for a specific purpose (marketing cookies, newsletters,…).
• Legitimate interests - where it is in yours and our legitimate business interests that we process your data, we’re using that data in ways you would reasonably expect and that have a minimal privacy impact. An example of this would be where we send you information about our products that may be relevant to your work (website analytics, customer service,…).
• Legal obligation - to comply with legal and regulatory requirements (fraud prevention, AML,…)

We keep this policy under regular review. This policy was last updated in May 2026.

We will give you the chance to refuse any marketing email from us.

If you no longer wish to receive marketing information from IronmongeryDirect then please use the link named “Unsubscribe” located at the bottom of all of our marketing emails. Alternatively you may unsubscribe via speaking to one of our contact centre agents.

Contact us via the enquiry form on the IronmongeryDirect website.

Call us on 03003 038 821.

Email us at privacy@ironmongerydirect.com

Or write to us at:

IronmongeryDirect Limited

Scimitar Park

Courtauld Road

Basildon

SS13 1ND