Privacy Policy

FAB Supplies Ltd collects personal data when you ask us for a quote, send us drawings, apply for a trade account, place an order or get in touch. This page explains what we collect, why we hold it, how long we keep it and what you can ask us to do about it.

We are the data controller for that information. In plain terms, we decide what is collected and what happens to it, and we are responsible for looking after it.

Who we are

FAB Supplies Ltd
Registered in England & Wales, company number 17216006
Registered office: Unit 6, Castle Park, 732 London Road, West Thurrock, Essex, RM20 3NL

For anything to do with your personal data — a question, a request, or a complaint — write to privacy@fabsupplies.co.uk, or to the registered office address above marked for the attention of the data protection contact. You can also call the West Thurrock branch on 01268 203365 or Rainham on 01268 203365, though we will usually ask you to put a formal request in writing so we have a record of it.

What we collect, and why

We only ask for what we need to price the job, supply the goods and deal with anything that happens afterwards. We do not buy in marketing lists and we do not collect special category data.

When you ask for a quote or send us a take-off

Your name, company name, email address, phone number, the site or project name, the delivery postcode and whatever you tell us about the job. If you upload drawings or photographs, we hold those too — they often include a site address and sometimes the name of the client or the main contractor.

We use this to work out what you need, price it, and reply. Our lawful basis is legitimate interests — you have asked us for a price and we cannot give you one without it — or, where the enquiry turns into an order, performance of a contract.

When you place an order

Your name, billing and delivery addresses, email address, phone number and the details of what you bought. Payments are handled by our payment provider; card numbers are entered on their systems, not ours, and we never see or store the full card number.

Our lawful basis is performance of a contract. Keeping the record afterwards is a legal obligation — HMRC requires us to retain transaction records.

When you apply for a trade account

Your company details, the names and contact details of the people who will place orders, and the information we need to consider credit terms, including trade references where you give them.

Our lawful basis is legitimate interests in assessing whether to offer an account, and performance of a contract once the account is open.

When you contact us

Your name, email address, phone number and whatever is in your message. We keep the correspondence so that whoever picks it up next can see what was already said.

When you use the website

Our website sets a small number of cookies. They are the ones needed to keep your basket and your ex-VAT / inc-VAT choice working — we do not run analytics, advertising or social media tracking on this site. What each cookie does is set out in our Cookie Policy. If we ever add anything beyond the strictly necessary, we will ask your permission before setting it.

Who we share it with

We do not sell personal data and we do not share it for anyone else’s marketing.

We do share it, in the ordinary course of getting your order to you, with:

• our website host, which stores the site and the enquiry records
• our email provider, which carries enquiry notifications and our replies
• our payment provider, which processes card payments
• hauliers and couriers, who need the delivery address and a contact number
• manufacturers and suppliers, where an item is made to order or delivered direct, who need the delivery details for that consignment
• our accountants and, where we have to, HMRC and other authorities

Each of these gets only what it needs for the job in hand. If you want to know the current list of providers by name, ask us and we will tell you.

We may also share information where we are required to by law, or where we need to establish, exercise or defend a legal claim.

Where your data is held

Our website and its database are hosted in the United Kingdom. Some of the providers above operate outside the UK. Where personal data is transferred outside the UK, it is protected by the safeguards UK data protection law requires — normally an adequacy decision covering the destination country, or the International Data Transfer Agreement or Addendum.

How long we keep it

What	How long
Enquiries and quote requests that do not become orders	24 months from the last contact
Drawings and files sent for a take-off	24 months from the last contact, unless the job goes ahead
Orders, invoices and transaction records	6 years from the end of the financial year they fall in, as tax law requires
Trade account records	6 years after the account is closed
General correspondence	24 months, unless it relates to an order or a claim
Website account details, if you create one	Until you ask us to close the account, then as above for any orders

When a retention period ends we delete the data or anonymise it so it can no longer be linked to you.

Your rights

Under UK data protection law you can ask us to:

• Give you a copy of the personal data we hold about you
• Correct it if it is wrong or incomplete
• Delete it, where we no longer have a good reason to keep it
• Restrict what we do with it while a question about it is sorted out
• Object to us using it, where we are relying on legitimate interests
• Transfer it to you or to someone else in a machine-readable format, where it was provided by you and we are relying on consent or a contract

Where we rely on your consent — cookies, or marketing email if you have opted in — you can withdraw that consent at any time. Withdrawing it does not affect anything we did with the data beforehand.

There is no charge for any of this. Write to privacy@fabsupplies.co.uk and we will reply within one month. If a request is unusually complex we may need longer, and we will tell you if that happens and why.

Some of these rights have limits. We cannot, for instance, delete an invoice we are legally required to keep. If we cannot do what you have asked, we will explain why.

Automated decisions

We do not make decisions about you by automated means and we do not profile you. Quotes, credit terms and trade account applications are all decided by a person.

Marketing

If you ask us to keep you posted, or you buy from us and we contact you about similar products, we may send you occasional emails. Every one of them carries an unsubscribe link, and you can also tell us to stop by replying or writing to the address above. We do not pass your details to anyone else to market to you.

Keeping it secure

The site runs over HTTPS. Access to enquiry and order records is limited to the people who need it. We take backups so that information is not lost. No system is perfect, but if something goes wrong that puts your data at risk we will act on it, and where the law requires it we will tell you and the Information Commissioner’s Office.

Children

This is a trade and retail builders’ merchant. The site is not aimed at children and we do not knowingly collect data about them.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first — most things are quicker to fix directly. If you are still not satisfied, you can complain to the UK regulator:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint

You can complain to the ICO without coming to us first.

Changes to this policy

If we change how we handle personal data we will update this page and change the date below. If the change is significant we will make it obvious rather than leaving you to spot it.

Last updated: 11 August 2026.