Draft for GPC to approve This Privacy Policy has not yet been approved by GPC.

Legal

Privacy Policy

Last updated:

This policy explains how Global Physical Commodities Ltd, trading as GPC, collects and uses personal data when you visit this website or send us an enquiry through it, and the rights you have under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Global Physical Commodities Ltd, trading as GPC (“GPC”, “we”, “us” or “our”), is the controller of the personal data described in this policy. We are a company registered in England and Wales under company number 17105947, with our registered office at Fenney Spring Windmill, Charley Road, Shepshed, Leicestershire, LE12 9EW, United Kingdom.

If you have any questions about this policy or how we use your personal data, please contact us at andrew@maximcorporate.co.uk or write to us at our registered office.

2. The personal data we collect

When you send us an enquiry

If you use the enquiry form on this website, we collect:

  • your name and the organisation you represent;
  • your email address and, if you choose to give it, your telephone number;
  • the nature of your enquiry and the contents of your message; and
  • any further information you choose to give us in later correspondence.

When you visit this website

Like all websites, this website is delivered by a hosting provider (Netlify) whose servers automatically process technical information about each request, such as your IP address, browser type and the date, time and address of the page requested. This is needed to deliver the website to you and to protect it against misuse. We do not use this information to identify you.

This website does not use cookies, analytics, advertising or any other tracking technologies, and it does not load content from third-party websites.

3. How we use your personal data and our lawful basis

We use the personal data you submit through the enquiry form to read and respond to your enquiry, to continue any correspondence that follows from it, and to keep a record of that correspondence.

Our lawful basis for this is our legitimate interests (Article 6(1)(f) UK GDPR) in responding to enquiries about GPC from investors, partners, prospective clients and others, and in managing the relationships that result. We consider this use to be proportionate and what you would reasonably expect when you contact us, and you can object to it at any time (see section 8).

We process technical information about website visits on the basis of our legitimate interests in operating a secure and reliable website.

We use the details you give us in an enquiry only to respond to that enquiry. We will never use them for marketing, we do not sell them, and we do not make decisions about you based solely on automated processing.

4. How your enquiry is handled

Enquiries submitted through this website are delivered by email to GPC’s chairman, who receives and handles them using a Maxim Corporate email address. Your enquiry is held in that email account, and may be shared within GPC, and with our professional advisers, where this is needed to respond to it.

5. Who we share your personal data with

We use Netlify, Inc. (United States) as our processor for website hosting and for processing the contact form: Netlify hosts this website, receives and stores enquiry form submissions, screens them for spam and delivers enquiries to us by email. Netlify handles personal data only on our instructions and under data processing terms that require it to keep the data secure. Its spam screening may involve its own sub-processors.

We may also disclose personal data to our professional advisers, where required by law or by a regulator, court or other authority, or to a buyer or successor if all or part of our business is sold or reorganised. We do not share your personal data with anyone else.

6. International transfers

Netlify is based in the United States, so personal data processed by Netlify may be transferred to and stored in the United States. Where personal data is transferred outside the UK, it is protected by appropriate safeguards under UK data protection law, as provided for in Netlify’s data processing terms. You can ask us for more information about these safeguards using the contact details in section 1.

7. How long we keep your personal data

We keep enquiry data, including any related correspondence, for up to 12 months from our last contact with you, unless an ongoing business relationship requires us to keep it for longer. This applies both to the enquiries we receive by email and to the copies of form submissions stored by Netlify.

8. Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you and receive a copy of it (access);
  • ask us to correct personal data that is inaccurate or incomplete (rectification);
  • ask us to delete your personal data (erasure);
  • ask us to limit how we use your personal data (restriction);
  • object to our use of your personal data based on our legitimate interests (objection); and
  • in certain circumstances, receive your personal data in a portable format (data portability).

Some of these rights apply only in certain circumstances. To exercise any of them, email us at andrew@maximcorporate.co.uk or write to us at our registered office (section 1). There is normally no charge, and we will respond within one month. We may need to confirm your identity before we act on your request.

9. Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. This website is served only over an encrypted (HTTPS) connection, and access to enquiries is limited to the people who need it to respond to you.

10. Complaints

If you are concerned about how we have used your personal data, please contact us first at andrew@maximcorporate.co.uk so that we can try to resolve the matter.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or by telephone on 0303 123 1113.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated shown at the top.