Effective date: 07/01/2026

Introduction

This Privacy Policy explains how we collect, use and protect personal data in
accordance with the UK GDPR, Data Protection Act 2018 and PECR.

Data controller

Lava Wholesale Limited is the data controller

Contact details:

Email: contact@lavawholesale.co.uk

Telephone: +44(0)1438587901

Personal data we collect

• Identity data (name, job title, business name)
• Contact data (email, phone, address)
• Account data (login details)
• Transaction data (orders, billing, delivery)
• Communications data
• Technical data (IP address, device, browser, usage)
  

How we collect data

Data is collected directly from you or automatically via cookies and similar
technologies.

How and why we use your personal data

We process personal data for the following purposes: - Account management &
orders – performance of a contract - Customer support & enquiries – legitimate
interests - Legal and tax obligations – legal obligation - Marketing
communications – consent or legitimate interests where permitted - Website
analytics & improvement – consent (where required)

Marketing

Sharing personal data

We may share data with trusted service providers such as hosting, IT, payment
and analytics providers. We do not sell personal data.

International transfers

Where data is transferred outside the UK, appropriate safeguards are used.

Data retention

We retain personal data only as long as necessary. For example: - Order and
invoice records: up to 6 years for tax purposes - Account data: for the duration of
the account - Marketing data: until consent is withdrawn.

Your rights

You have rights to access, rectify, erase, restrict, object and port your data, and to
withdraw consent.

Requests should be sent to: hello@lavawholesale.co.uk

Automated decision-making

We do not carry out automated decision-making or profiling.

Data security

Appropriate technical and organisational measures are in place to protect data.

Complaints

You may complain to the Information Commissioner’s Office (ICO).