skip to main content

Privacy Policy

Last updated: 13 June 2026

This Privacy Policy explains how Screwpoint ("we", "us" or "our") collects, uses, stores and protects personal information when you use our website screwpoint.co.uk (the "Site"), place an order, contact us, or otherwise interact with our business.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Screwpoint is the data controller responsible for your personal information.

  • Company: Screwpoint, registered in England (Company No. 14725383)
  • VAT No.: 441649391
  • Registered address: Unit 12, Eastern Avenue Industrial Estate, Luton, Bedfordshire LU5 4JY
  • Email: info@screwpoint.co.uk
  • Phone: 01582 451 658

Information we collect

We may collect and process the following categories of personal information:

  • Contact details — name, email address, telephone number, postcode and any other information you provide via our contact form or by email.
  • Account details — if you register an account with us, we store your name, email address, password (hashed) and order history.
  • Order & transaction data — items purchased, delivery address, billing address, order value and order status. Payment card details are entered directly into our payment processor (Stripe) and are never stored on our servers.
  • Communications — copies of correspondence (including any files you attach to the contact form) when you contact us.
  • Site usage data — IP address, browser type and version, pages visited, search terms entered on our Site and the time/date of your visit. This information is used to operate the Site, prevent abuse and improve our service.
  • Cookies & similar technologies — see our Cookie Policy for full details.

How we use your information

We use your personal information for the following purposes:

  • To process and fulfil your orders, including arranging delivery and collecting payment.
  • To respond to your enquiries and provide customer support.
  • To create and manage your account.
  • To send transactional communications (such as order confirmations and delivery updates).
  • To operate, maintain and improve our Site and services.
  • To prevent fraud, secure our Site and comply with our legal obligations.
  • To keep accounting and tax records as required by HMRC.

Legal bases for processing

Under UK GDPR we rely on the following legal bases:

  • Performance of a contract — to process your orders and provide our services.
  • Legitimate interests — to operate our business, secure our Site, prevent fraud and improve our products.
  • Legal obligation — to keep accounting records and respond to lawful requests from authorities.
  • Consent — for any non-essential cookies or marketing communications, where required.

Sharing your information

We do not sell your personal information. We share it only with trusted third parties who help us operate our business:

  • Stripe — to process card payments securely. See Stripe's Privacy Policy.
  • Couriers and delivery partners — to fulfil your orders.
  • Hosting and IT providers — who store our website and business data on our behalf.
  • Eposnow — our point-of-sale and stock management provider. See Eposnow's Privacy Policy.
  • Professional advisers — such as our accountants, where necessary.
  • Authorities — where we are legally required to disclose information (e.g. HMRC, law enforcement).

How long we keep your information

We retain personal information only for as long as necessary for the purposes we collected it. Order and accounting records are kept for at least 6 years to meet HMRC requirements. Contact-form enquiries are typically retained for 24 months. Account data is retained while your account is active and for a reasonable period afterwards.

Your rights

Under UK GDPR you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your personal information ("right to be forgotten"), subject to our legal retention obligations.
  • Restrict or object to our processing of your information.
  • Request a portable copy of your information.
  • Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us at info@screwpoint.co.uk. We will respond within one month.

If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Security

We use appropriate technical and organisational measures to protect your personal information, including encrypted connections (HTTPS), access controls and secure password storage. However, no method of transmission over the Internet is 100% secure.

International transfers

Your information is primarily stored within the United Kingdom. Some of our service providers (such as Stripe) may process data outside the UK; where this happens, we ensure appropriate safeguards are in place as required by UK GDPR.

Children

Our Site and services are intended for trade and adult retail customers. We do not knowingly collect information from children under 16. If you believe a child has provided us with personal information, please contact us so we can remove it.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page shows when it was last revised. Please check back periodically.

Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us: