Privacy Policy

The data controller is Riley (Lifting Equipment) Limited, Hope Building, Dockray Street, Colne, Lancashire, BB8 9HT, United Kingdom. Company Registration No. 1526219. You can contact us regarding data matters by email at [email protected] or by writing to the address above.

We only collect personal data that is necessary for the purpose for which it is gathered. This may include:

• Your name, email address, telephone number and company name when you submit an enquiry or contact us.
• Order and delivery information when you place an order with us.
• Technical data such as your IP address and browser type, collected automatically via server logs and cookies (see our Cookies Policy).

We do not collect special category data (such as health or financial information) through this website.

We use the information we collect to:

• Respond to your enquiries and process your orders.
• Maintain records required for legal, accounting or regulatory purposes.
• Improve the performance and usability of this website.

We will not sell, rent, or share your personal data with third parties for marketing purposes. Data is only shared with trusted service providers where strictly necessary to fulfil your request (for example, a delivery carrier), and only under appropriate data processing agreements.

We process your personal data on the following legal bases under UK GDPR:

• Contract: where processing is necessary to fulfil an order or respond to a contractual enquiry.
• Legitimate interests: for general website enquiries and improving our service, where these interests are not overridden by your rights.
• Legal obligation: where we are required to retain records by law.

We retain personal data only for as long as necessary for the purpose it was collected, or as required by law. Enquiry records are generally held for up to two years. Order and invoice records may be retained for up to seven years to comply with HMRC requirements.

We are committed to ensuring your information is secure. We have implemented appropriate technical and organisational measures including access controls, secure server infrastructure, and staff awareness to protect your personal data against unauthorised access, loss or disclosure.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify any inaccurate or incomplete data.
• Erase your data where there is no longer a lawful basis for us to hold it.
• Restrict or object to certain processing activities.
• Data portability receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please write to us at the address above or email [email protected]. We will respond within one calendar month. If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

This website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their own privacy policies before submitting any personal data.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to check this page periodically.