This privacy policy explains how Millstone Durbax Ltd collects, uses, shares, stores and protects personal information relating to website visitors, customers, prospective customers, suppliers, distributors, agents, professional contacts and other business partners. It also explains the rights available to individuals under UK data protection law.
This notice is intended to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use and Access) Act 2025 and the Privacy and Electronic Communications Regulations 2003 (PECR), in each case as amended.
Millstone Durbax Ltd is the controller responsible for the personal information described in this notice unless we tell you otherwise.
| Company | Millstone Durbax Ltd (company number 13379553) |
|---|---|
| Business address | The Heath Business & Technical Park, Runcorn, Cheshire, WA7 4QX, United Kingdom |
| Data protection contact | contact@millstonedurbax.com |
| Website | www.millstonedurbax.com |
| Role | Data controller |
This notice applies to personal information that we process in connection with:
It does not generally cover employee or job applicant information, which should be addressed through separate internal or recruitment privacy information where applicable.
Depending on how you interact with us, we may collect and use the following categories of personal information:
We do not normally seek to collect special category information or criminal-offence information through our website or ordinary commercial activities. Please do not provide this information unless it is necessary and we have specifically requested it or there is another clear lawful reason for us to receive it.
We collect personal information:
Where we obtain your personal information from another source, we will provide privacy information within the period required by law, usually no later than one month or when we first communicate with you, unless an exception applies.
We must have a lawful basis for each use of personal information. The lawful basis will depend on the circumstances. The principal purposes and lawful bases we rely on are set out below.
| Purpose | Examples of use | Likely lawful basis |
|---|---|---|
| Responding to enquiries and developing business relationships | Handling enquiries, arranging meetings, providing product or technical information, preparing quotations and taking steps before a contract. | Contract steps; legitimate interests |
| Providing and receiving products and services | Managing orders, deliveries, technical support, contracts, customer and supplier relationships, payments and account administration. | Contract; legal obligation; legitimate interests |
| Compliance and risk management | Identity and credit checks, sanctions and export-control checks, fraud prevention, audits, record keeping and responding to legal or regulatory requirements. | Legal obligation; legitimate interests |
| Improving our business and website | Website administration, security, analytics, service improvement, market analysis, business planning and quality management. | Legitimate interests; consent where required |
| Marketing and market research | Sending relevant business communications, invitations, product information, surveys and following up commercial opportunities. | Legitimate interests or consent, subject to PECR |
| Protecting legal rights and business continuity | Establishing, exercising or defending legal claims, managing disputes, maintaining backups and protecting systems, staff, customers and assets. | Legal obligation; legitimate interests |
Our legitimate interests include operating and developing our business, communicating with relevant business contacts, improving our products and services, protecting our systems and commercial interests, preventing fraud and maintaining appropriate records. Where we rely on legitimate interests, we consider whether those interests are necessary and balanced against your rights and reasonable expectations.
Where information is needed to enter into or perform a contract, meet a legal requirement or respond to an enquiry, failure to provide it may mean that we cannot supply products or services, purchase from you, process an order or otherwise progress the relationship.
We may use business contact information to send relevant information about our products, services, events and commercial developments. We will comply with the UK GDPR and PECR when doing so.
Our website currently only uses strictly necessary cookies and similar storage technologies — for example, to keep you signed in to the Client Portal and to operate the website securely. We do not currently use analytics, functionality or marketing/third-party cookies, and no non-essential technologies are set without your consent.
| Category | Purpose | Used on this website? |
|---|---|---|
| Strictly necessary | Security, network management, core functions such as keeping you signed in. | Yes — used without consent, as legally permitted. |
| Statistical / analytics | Understanding website use and improving performance and content. | Not currently used. |
| Functionality | Remembering choices and enabling optional features. | Not currently used. |
| Marketing / third party | Measuring campaigns, personalising content or enabling third-party services. | Not currently used. |
If this changes — for example, if we introduce analytics or marketing technologies in future — we will update this notice and put in place an appropriate way for you to give, manage and withdraw your consent before any non-essential technology is used. You can also control cookies and similar technologies through your browser settings at any time, although blocking strictly necessary technologies may affect website functionality such as staying signed in.
We may share personal information where necessary with:
We require service providers that process personal information for us to protect it and use it only in accordance with our instructions and applicable law. We do not sell personal information.
Because we work with international customers, suppliers, distributors, agents and service providers, personal information may be accessed from or transferred to countries outside the United Kingdom. Where the UK international-transfer rules apply, we will use an approved lawful mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or another permitted safeguard or exception. Where required, we will also assess the risks of the transfer.
You may contact us for further information about the safeguards relevant to your personal information.
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, regulatory, tax, accounting, insurance, quality-management and reporting requirements and to establish, exercise or defend legal claims.
When deciding how long to retain information, we consider:
In general, business relationship and transaction records are retained for the active relationship and for an appropriate period afterwards; enquiry and prospect information is retained while relevant for follow-up; marketing information is retained until you opt out or it is no longer relevant; and limited suppression information may be retained to ensure that an opt-out continues to be respected. See Section 7 above for how we handle cookies and similar technologies.
We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, staff awareness, system security, backups, supplier due diligence and incident-management procedures. No internet transmission or storage system can be guaranteed to be completely secure, but we review our measures in light of the nature of the information and the risks involved.
Depending on the circumstances and the lawful basis used, you may have the right to:
To exercise a right, contact contact@millstonedurbax.com. We may need information to confirm your identity and locate the relevant records. Rights are subject to legal conditions and exemptions. We normally respond without undue delay and within one month. Where permitted, this may be extended by up to two further months for complex or multiple requests, and we will tell you if an extension applies. There is normally no fee, although a reasonable fee may apply in limited circumstances permitted by law.
If you are concerned about how we have handled your personal information, please contact us at contact@millstonedurbax.com and explain the issue and the outcome you are seeking. We will:
You also have the right to complain to the Information Commissioner's Office (ICO):
| Address | Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF |
|---|---|
| Telephone | 0303 123 1113 |
| Website | www.ico.org.uk |
| Contact | Use the complaint and contact services available on the ICO website |
We do not currently use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals. If this changes, we will provide the information and safeguards required by law before carrying out that processing.
Our website and business services are intended for business and professional users and are not directed at children. We do not knowingly collect personal information from children through the website. If you believe that a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete it.
Our website may contain links to third-party websites or services. Those organisations are responsible for their own privacy practices. We encourage you to read their privacy information before providing personal information or using their services. We are not responsible for the content, security or privacy practices of third-party websites merely because our website links to them.
We may update this privacy policy to reflect changes in our activities, technology, legal requirements or guidance. The current version will be published on our website with its effective date. Where a change is significant, we will take reasonable steps to bring it to the attention of affected individuals before the new use of personal information begins, where required.
Questions, rights requests and data protection complaints should be sent to: contact@millstonedurbax.com.
Millstone Durbax Ltd | Version 2.2 | Effective 12 September 2026
