Privacy Policy

Last updated: 1^st September 2026

1. Who we are

UI Equipment Limited (trading as ‘Unic International’) (‘we’, ‘us’, ‘our’) is the data controller responsible for your personal data. We take the protection of your personal data seriously and are committed to processing it in line with the UK General Data Protection Regulation (‘UK GDPR’) and the Data Protection Act 2018.

Registered office: Unic Building, Colwick Road, Nottingham, England, NG2 4BG

Company registration number: 09691860

Data protection contact: [named contact or DPO, if appointed] — [email address][ER1]

2. What this policy covers

This policy explains:

What personal data we collect, and why.
The legal basis we rely on for each type of processing.
Who we share your data with, and any transfers outside the UK.
How long we keep your data.
Your rights, and how to exercise them.
How to complain if you are unhappy with how we handle your data.

A separate Cookie Policy ([link to cookie policy]) [ER2] covers cookies and similar technologies used on our website.

3. What information we collect

We collect personal data that you provide directly (by phone, email, post or via our website), and data generated through your use of our products, services and website. This includes:

Your name, home or work address, email address and telephone number.
Your job title, where contact relates to your employer.
Payment or refund amounts — card payments are processed and encrypted by our POS payment provider; we do not store full card details.
Delivery and/or billing address.
Details of your purchases or equipment, to support future orders, servicing and warranty/recall obligations.
Technical data about the browser or device you use to contact us or visit our website, and how you use our website.
Feedback or reviews you choose to give us.
Information you provide when entering a promotion or competition.
Information collected during recruitment (see our separate Recruitment Privacy Notice).

We do not collect any category of information we are not legally permitted to collect, and we do not knowingly collect data relating to children.

4. How we use your information, and our legal basis

UK GDPR requires us to have a valid legal basis for every use of your personal data. The table below sets out our main purposes and the basis we rely on for each.

Purpose	Example activity	Legal basis (UK GDPR Art. 6)
Fulfilling contracts	Processing orders, repairs, servicing, deliveries	Performance of a contract (Art. 6(1)(b))
Payment processing	Taking payment via our POS providers	Performance of a contract; legal obligation (Art. 6(1)(b) and (c))
Legal and regulatory compliance	Tax, accounting, product safety and recall records	Legal obligation (Art. 6(1)(c))
Customer service and complaints	Responding to enquiries, investigating complaints	Legitimate interests (Art. 6(1)(f))
Business improvement	Website analytics, service improvement, fraud prevention	Legitimate interests (Art. 6(1)(f))
Direct marketing (email/SMS)	Sending offers, new product ranges, event invitations	Consent (Art. 6(1)(a)), withdrawable at any time
Recruitment	Job applications	See separate Recruitment Privacy Notice

Where we rely on ‘legitimate interests’, this means a genuine business need that we have assessed does not override your rights and interests. Our legitimate interests include providing the products and services you expect from us; keeping accurate records; developing our product range and pricing; keeping in touch about new ranges, offers and events; meeting legal and contractual obligations; investigating fraud; and improving how we operate. You can ask us for details of the relevant assessment at any time using the contact details in Section 1.

5. Who we share your personal data with

We share personal data only where necessary, and only the minimum required for the purpose. Recipients may include:

Our courier and delivery partners, for order delivery, collection or site visits.
Our marketing and communications agencies (in-house or third party).
Suppliers, business partners and sub-contractors, including website hosting, IT maintenance and security providers.
Our POS and payment processing providers, for handling and validating payments.
Our professional advisers — for example health & safety consultants, auditors, and legal or financial advisers.
Search engine and website analytics providers.
Regulatory authorities or law enforcement, where required by law or for the prevention or investigation of crime.

We do not sell your personal data, and we will not share it for any purpose beyond those set out in this policy without your consent, unless required by law.

6. International transfers

Your data is primarily stored and processed within the UK. Where a supplier or service provider is based outside the UK, we only transfer personal data where the transfer is protected by one of the following safeguards:

A UK adequacy regulation confirming the destination country provides an adequate level of protection (for example, transfers to the European Economic Area, which currently benefit from UK adequacy regulations);
The International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses; or
Another safeguard recognised under UK GDPR Chapter V.

You can request details of the specific safeguard used for any transfer using the contact details in Section 1.

7. How long we keep your data

We do not keep personal data for longer than necessary. Generally, we retain data for the duration of any contract or agreement, plus a further 12 months, unless a longer period is agreed with you or required to:

Meet warranty or product recall obligations notified by our suppliers;
Comply with legal, tax or regulatory requirements;
Investigate and resolve complaints or suspected fraud; or
Establish, exercise or defend legal claims.

Card and payment details are handled only at the point of transaction by our POS payment system and are not retrievable by our staff once the transaction is complete.

Note: if you ask us to delete your data and a supplier product recall is later issued, we will not be able to contact you about it.

8. Where we store data

Personal data is stored electronically and is accessible only to employees, contractors and sub-contractors who need it to perform their role, in line with our internal policies and procedures. Only the minimum information necessary (for example, contact name and delivery or site address) is shared outside Unic International for delivery, installation or servicing purposes. Card and account details, once entered our payment system, cannot be retrieved by our staff. See Section 6 for details of safeguards applied to any transfers outside the UK.

9. Is giving us your data mandatory?

Providing certain personal data (for example, your name, address and payment details) is necessary for us to enter and perform a contract with you, such as processing an order or arranging a repair. If you do not provide this information, we may be unable to fulfil your order or provide the service requested. Other information, such as marketing preferences or survey responses, is entirely optional.

10. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right	What it means
Right to be informed	To know how and why we use your personal data — this policy is how we meet that.
Right of access	To ask us for a copy of the personal data we hold about you.
Right to rectification	To ask us to correct inaccurate or incomplete data.
Right to erasure	To ask us to delete your data, in certain circumstances.
Right to restrict processing	To ask us to limit how we use your data while a query is resolved.
Right to data portability	To ask us for your data in a portable, machine-readable format, where processing is based on consent or contract and carried out by automated means.
Right to object	To object to processing based on legitimate interests, or to direct marketing at any time.
Rights related to automated decision-making	To ask about, and where relevant object to, any decisions made about you using automated means, including profiling.
Right to withdraw consent	Where we rely on your consent, to withdraw it at any time without affecting processing already carried out.

To exercise any of these rights, contact us using the details in Section 1. We will normally respond within one month. Withdrawing consent or exercising erasure rights will not affect the lawfulness of any processing carried out before that point, but may mean, for example, that we cannot notify you of supplier product recalls, special offers, or delivery updates that rely on your contact details.

11. Cookies

Our website uses cookies and similar technologies, including for analytics. Full details, including how to manage your preferences, are set out in our separate Cookie Policy at [link].[ER3]

12. Keeping this policy up to date

We review this policy regularly to reflect changes in our practices and in data protection law. Any updates will be published on our website with a revised ‘last updated’ date at the top of this policy.

13. Complaints

If you have a question or complaint about how we handle your personal data, please contact us using the details in Section 1 and we will do our best to resolve it. If you remain unhappy with our response, you have the right to complain to the UK supervisory authority:

Information Commissioner’s Office (ICO)

Website: https://ico.org.uk

Helpline: 0303 123 1113

[ER1]Find out

[ER2]TBC

[ER3]TBC