Privacy, GDPR & Cookie Policy
Your data. Your rights. Our responsibility.
Effective Date: August 2026 | Data Controller: Webcom Limited (Company No: 17356286)
Webcom Limited (we, our, us) is committed to protecting your personal data in strict compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and EU GDPR requirements for international buyers.
Information We Collect
| Data Type | Examples |
|---|---|
| Identity Data | Name, business title, company name (B2B procurement and manufacturer enquiries) |
| Contact Data | Billing address, shipping address, email address, telephone number |
| Transaction Data | Products ordered, payment status, delivery records, manufacturer origin records |
| Technical Data | IP address, browser type, time zone, operating system, platform |
| Verification Data | Order and origin details submitted to cs@sheffieldsteel.com for provenance audits |
Legal Basis for Processing Your Data
| Processing Purpose | Legal Basis under UK GDPR |
|---|---|
| Order Processing and Delivery | Performance of a Contract (Art. 6(1)(b)) |
| Origin and Provenance Verification | Legitimate Interests (Art. 6(1)(f)) |
| Manufacturer Enquiry Processing | Pre-contractual Steps (Art. 6(1)(b)) |
| Fraud Prevention and Identity Checks | Legal Obligation (Art. 6(1)(c)) |
| Marketing Communications | Consent (Art. 6(1)(a)) |
Data Sharing and Third-Party Processors
We do not sell, rent, or trade personal data. Data is shared strictly on a need-to-know basis with trusted processors under data protection agreements:
- Payment Gateways: Encrypted processing via PCI-DSS compliant providers (Stripe, PayPal, banking partners).
- Logistics and Carriers: Name, shipping address, and phone shared with couriers and verified Sheffield workshops for Manufacturer-Direct Dispatch.
- IT and Hosting Infrastructure: Cloud server providers, PrestaShop hosting, and security systems.
- Statutory Authorities: HMRC, law enforcement, or legal advisers where required by law.
International Data Transfers
Where data is transferred outside the United Kingdom or European Economic Area, we implement appropriate safeguards in accordance with UK GDPR Chapter V, including Standard Contractual Clauses and International Data Transfer Agreements with international logistics partners.
Data Retention Periods
| Data Category | Retention Period |
|---|---|
| Transaction and Accounting Data | 6 years plus current financial year (HMRC statutory obligation) |
| Provenance Verification Data | Intended operational lifetime of the product (to support origin listing verification) |
| Marketing Data | Until consent is withdrawn or user unsubscribes |
Your Legal Data Rights
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of incomplete or inaccurate data.
- Right to Erasure: Request deletion of data where no overriding legal requirement for retention exists.
- Right to Restrict Processing: Request suspension of data processing in specific scenarios.
- Right to Data Portability: Request transfer of your data in a structured, machine-readable format.
- Right to Object (Article 21 UK GDPR): Object to processing carried out on legitimate interests grounds, including origin verification processing. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Withdraw consent for marketing communications at any time via the Unsubscribe link or by contacting cs@sheffieldsteel.com.
To exercise any of these rights, contact our Data Protection Lead at cs@sheffieldsteel.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies and Tracking Technologies
In compliance with the Privacy and Electronic Communications Regulations 2003 (PECR) and UK GDPR, SheffieldSteel.com uses cookies to support core storefront functionality, process orders, and analyse site performance. Upon your first visit, a cookie consent banner allows you to accept or decline non-essential cookies.
| Cookie Category | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session management, shopping cart retention, secure checkout processing. | No (Exempt) |
| Functional and Preference | Currency preferences, region detection, verified login state. | Yes (Opt-in) |
| Analytical and Performance | Anonymised traffic measurements, page speeds, user journey monitoring. | Yes (Opt-in) |
You may adjust your browser settings at any time to block or delete cookies. Disabling Strictly Necessary cookies will prevent checkout completion and shopping cart updates.
SheffieldSteel.com is a trading style of Webcom Limited.
Registered in England and Wales | Company No: 17356286
Registered Office: 2A Royal Street, Barnsley, South Yorkshire, S70 2ED
Phone: +44 (0)1226 596112