Last Updated: January 2026
1. Data Controller
AFR Tech Limited ("the Company", "we", "us", "our") is the data controller responsible for your personal data.
- Company Name: AFR Tech Limited
- Company Number: 10870962
- Registered Address: 42-44 High Street, Regal Court, Slough SL1 1EL
- Data Protection Contact: dataprotection@afrtech.co.uk
2. Information We Collect
We may collect and process the following categories of personal data:
2.1 Business Contact Information
- Name and job title
- Company name and registration details
- Business email address and phone number
- Business address
2.2 Transaction Data
- Order history and purchase records
- Payment information (processed securely via third-party providers)
- Delivery addresses
- Communication records
2.3 Technical Data
- IP address and browser type
- Device information
- Website usage data via cookies
3. How We Use Your Data
| Purpose |
Legal Basis |
| Processing orders and fulfilling contracts |
Contract performance |
| Account management and credit checks |
Legitimate interest / Contract |
| Sending service communications |
Legitimate interest |
| Marketing communications (with consent) |
Consent |
| Legal compliance and fraud prevention |
Legal obligation |
| Website analytics and improvement |
Legitimate interest |
4. Data Sharing
We may share your data with:
- Service Providers: Payment processors, logistics partners, IT services
- Professional Advisers: Lawyers, accountants, auditors
- Regulatory Bodies: HMRC, ICO, or other authorities as required by law
- Business Partners: Manufacturers or distributors for order fulfilment
We do not sell your personal data to third parties.
5. International Transfers
As a global business, we may transfer data to countries outside the UK/EEA. When we do, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the ICO
- Transfers to countries with adequacy decisions
- Binding Corporate Rules where applicable
6. Data Retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected:
- Business records: 7 years (legal/tax requirements)
- Marketing preferences: Until consent is withdrawn
- Website analytics: 26 months
- Enquiry records: 3 years
7. Your Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data (where applicable)
- Restriction: Limit how we process your data
- Portability: Receive your data in a structured format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Where processing is based on consent
To exercise these rights, contact us at dataprotection@afrtech.co.uk.
8. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
- SSL/TLS encryption for data in transit
- Secure data storage with access controls
- Regular security assessments
- Staff training on data protection
9. Cookies
We use cookies on our website. For detailed information, please see our Cookie Policy.
10. Complaints
If you have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
11. Changes to This Policy
We may update this policy periodically. We will notify you of significant changes via email or website notice.