This is our privacy and cookies policy.
This privacy policy explains how Solid Fluid (System Solutions) Limited (“we”, “us”, or “our”) collects, uses, stores, shares, and protects your personal data when you visit our website at https://www.solidfluid.co.uk (the “Website”) or otherwise interact with us.
This policy was last updated OCT/2026.
- Introduction and who we are
1.1 We are Solid Fluid (System Solutions) Limited, a company registered in England and Wales under company registration number 06996204 our full details are published at the following URL;
https://www.solidfluid.co.uk/wp/contact/
1.2 For the purposes of the UK General Data Protection Regulation (the “UK GDPR”) and the Data Protection Act 2018 (the “DPA 2018”), we are the data controller responsible for your personal data.
1.3 If you have any questions about this privacy policy, please contact us using the details set out in Section 13 below.
1.4 You can contact us at info@solidfluid.co.uk
- How we collect your personal data
2.1 Directly from you — when you fill in forms on our Website (including contact forms, registration forms, and order forms), correspond with us by email, telephone, or post, create an account, subscribe to our newsletter, or provide feedback.
2.2 From third parties or publicly available sources — we may receive personal data about you from analytics providers, advertising networks, payment and delivery service providers, social media platforms, publicly available sources such as Companies House, and credit reference agencies.
- Types of personal data we collect
3.1 We may collect, use, store, and transfer the following categories of personal data about you:
(a) Identity data — first name, last name, title, date of birth, gender, username or similar identifier.
(b) Contact data — email address, postal address, telephone numbers.
(c) Financial data — We do not store your full payment card details on our systems.
(d) Transaction data — details about payments to and from you, and details of products and services you have purchased from us.
(e) Technical data — internet protocol (IP) address, login data, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
(f) Profile data — your username and password, purchases or orders, feedback, and survey responses.
(g) Usage data — information about how you use our Website, including pages visited, time spent on pages, and page interaction information.
3.2 We do not knowingly collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). We also do not knowingly collect information about criminal convictions and offences.
- How and why we use your personal data
4.1 We will only use your personal data when the law allows us to. Under the UK GDPR, we must have a valid lawful basis for processing. The lawful bases we rely on are set out below.
4.2 Performance of a contract (Article 6(1)(b) UK GDPR) — we process your data where necessary for the performance of a contract with you, or to take steps at your request before entering into a contract. This includes processing orders, managing your account, providing requested products or services, managing payments, and communicating with you about your orders or enquiries.
4.3 Legitimate interests (Article 6(1)(f) UK GDPR) — we process your data where necessary for our legitimate interests (or those of a third party) and your rights do not override those interests. Our legitimate interests include:
(a) administering and improving our Website and services;
(b) analysing how our Website is used so we can improve it;
(c) detecting, preventing, and responding to fraud and security issues;
(d) managing our business operations, including accounting and auditing; and
4.4 Consent (Article 6(1)(a) UK GDPR) — we rely on your consent for:
(a) sending you marketing communications where you are not an existing customer;
(b) placing non-essential cookies on your device (see our cookies policy); and
(c) any other processing for which we have specifically obtained your consent.
4.5 You may withdraw consent at any time by contacting us using the details in Section 13, or by using the unsubscribe link in any marketing email. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
4.6 Legal obligation (Article 6(1)(c) UK GDPR) — we process your data where necessary for compliance with a legal obligation, including complying with HMRC and other regulatory requirements, responding to lawful requests from public authorities and courts, and maintaining legally required records.
4.7 We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for a compatible purpose. If we need to use it for an unrelated purpose, we will notify you and explain the legal basis.
- Marketing communications
5.1 We may send you marketing communications where you have purchased from us and have not opted out (the soft opt-in under PECR), or where you have given your consent.
5.2 We will not share your personal data with third parties for their direct marketing purposes.
5.3 You can opt out of marketing at any time by following the unsubscribe link in any marketing email, contacting us using the details in Section 13.
- Who we share your personal data with
6.1 We may share your personal data with the following categories of third parties:
(a) Service providers — companies that provide services to us, such as website hosting, payment processing, email delivery, analytics, and customer support. These providers process data on our instructions under a written data processing agreement. Our providers include; Zen Internet UK, WordPress, WooCommerce.
(b) Professional advisers — our lawyers, accountants, bankers, auditors, and insurers.
(c) Regulatory and government bodies — HM Revenue and Customs (HMRC), the Information Commissioner’s Office (ICO), and other regulators where required.
(d) Law enforcement agencies — where required by law or for the prevention or detection of crime.
(e) Business transfers — third parties to whom we may sell, transfer, or merge parts of our business. New owners may use your data as set out in this policy.
6.2 We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our service providers to use your data for their own purposes.
- International transfers of personal data
7.1 Some of our service providers may be based outside the United Kingdom. Where we transfer your personal data outside the UK, we ensure appropriate safeguards are in place, including:
(a) transferring to countries deemed to provide adequate protection by the UK Secretary of State (an adequacy regulation under Section 17A of the DPA 2018);
(b) using International Data Transfer Agreements or the UK Addendum to the EU Standard Contractual Clauses approved by the Secretary of State;
(c) relying on an applicable data privacy framework recognised by the UK government for US-based providers; or
(d) relying on binding corporate rules approved by the ICO.
7.2 We will not transfer your data outside the UK, but we cannot reasonably know if our service providers do.
7.3 Contact us using the details in Section 13 for further information about our international transfer safeguards.
- Data retention
8.1 We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including to satisfy legal, regulatory, tax, accounting, or reporting requirements.
8.2 We apply the following general retention periods:
(a) Customer account data — retained for the duration of your account.
(b) Transaction and purchase records — retained for [6] years from the transaction date, in line with HMRC requirements and the Limitation Act 1980.
(c) Marketing data — we do not presently collect marketing data.
(d) Website analytics data — we do not presently collect analytics data.
(e) Contact form enquiries — retained for 6 years from the date of your enquiry maximum.
(f) Contractual records — retained for 6 years after the contract ends, in line with the Limitation Act 1980.
8.3 In some circumstances, we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
8.4 Notwithstanding the above, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or to protect your vital interests or those of another person.
- Data security
9.1 We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed in an unauthorised way. These measures include:
(a) encryption of personal data in transit and at rest where appropriate;
(b) access controls to limit access to personal data to those employees, agents, contractors, and third parties who have a business need to know;
(c) regular testing, assessment, and evaluation of the effectiveness of our security measures;
(d) procedures for dealing with any suspected personal data breach; and
9.2 We have procedures in place to deal with any suspected personal data breach and will notify you and the ICO where we are legally required to do so, in accordance with Articles 33 and 34 of the UK GDPR.
9.3 While we take all reasonable precautions, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your personal data.
- Your rights under data protection law
10.1 Under the UK GDPR and the DPA 2018, you have the following rights (subject to certain exemptions):
10.2 Right of access — you may request a copy of the personal data we hold about you (a “subject access request”). We will respond within one month, extendable by a further two months for complex requests.
10.3 Right to rectification — you may request correction of inaccurate or incomplete personal data.
10.4 Right to erasure — you may request deletion of your personal data where there is no compelling reason for continued processing, though we may decline where retention is necessary for legal compliance or the defence of legal claims.
10.5 Right to object — you may object to processing based on legitimate interests where your particular situation warrants it. You have an absolute right to object to direct marketing at any time.
10.6 Right to restriction — you may request that we suspend processing in certain circumstances, such as where you contest the data’s accuracy or where processing is unlawful but you oppose erasure.
10.7 Right to data portability — where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
10.8 Right to withdraw consent — where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
10.9 Rights regarding automated decision-making — you have the right not to be subject to decisions based solely on automated processing (including profiling) that produce legal or similarly significant effects, unless the decision is necessary for a contract, authorised by law, or based on your explicit consent. We do not carry out automated decision-making.
10.10 To exercise any of these rights, contact us using the details in Section 13. We may request information to verify your identity before processing your request. There is generally no fee, but we may charge a reasonable fee for manifestly unfounded or excessive requests.
- Cookies
11.1 Our Website uses cookies and similar technologies. We only use cookies for strictly necessary purposes, which is why we do not offer the option to reject cookies. There are no cookies placed on your browser that are not mandatory for managing purchase orders, your account details, feedback and comments. We do not track our customers, use third party analytics or marketing tools.
11.2 In accordance with the Privacy and Electronic Communications Regulations 2003 (PECR), we will ask for your consent before placing any non-essential cookies on your device.
- Children’s privacy
12.1 Our Website is not intended for children under the age of 13, and we do not knowingly collect personal data from children under that age. Under UK data protection law, specifically the Data Protection Act 2018, the age at which a child can give their own consent to the processing of their personal data in relation to information society services is 13.
12.2 If we learn that we have collected personal data from a child without appropriate consent, we will delete that information as quickly as possible. If you are a parent or guardian and believe your child has provided us with personal data, please contact us using the details in Section 13.
12.3 Where services are offered to children, we will seek parental consent where required and provide safeguards in accordance with the UK GDPR, the DPA 2018, and the ICO’s Age Appropriate Design Code (Children’s Code).
- How to contact us
13.1 If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us by any means listed at the following URL;
https://www.solidfluid.co.uk/wp/contact/
13.2 The data controller is Solid Fluid (System Solutions) Limited, registered in England and Wales under company number 06996204, at the registered office listed above.
- How to complain
14.1 If you have concerns about how we handle your personal data, please contact us first using the details in Section 13. We will investigate and respond as soon as possible.
14.2 You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection. You can contact the ICO as follows:
(a) Website: www.ico.org.uk
(b) Telephone: 0303 123 1113
(c) Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
14.3 We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.
- Changes to this privacy policy
15.1 We may update this privacy policy from time to time to reflect changes in our practices, services, or applicable legislation.
15.2 Changes will be posted on this page and, where appropriate, notified to you by email [or through a notice on our Website]. The updated policy takes effect from the date it is posted.
15.3 This privacy policy was last updated on OCT/2026.
- Third-party links
16.1 Our Website may include links to third-party websites, plug-ins, and applications. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.
This document was created using a template from website-contracts.co.uk.