Privacy Policy

Last updated: 5 November 2026

We collect only the personal data needed to verify trade customers, process orders and prevent fraud, and we delete application documents as soon as we have made our decision. This policy explains what we hold and why, under UK data protection law (UK GDPR and the Data Protection Act 2018).

1. Who we are

Rangewell is the data controller for the personal data described in this policy. Contact: support@rangewell.uk.

2. What we collect

Data	Examples	Why
Account details	Name, job title, business email, phone, company name and number, VAT number, addresses	To open and manage your trade account
Verification documents	Certificate of incorporation, VAT certificate, proof of address, director photo ID	To confirm your business is genuine and prevent fraud
Order details	Quote requests, products, delivery address, order history, invoices	To quote, supply goods and meet accounting law
Payment details	Payment status, and the name and bank account details processed by our payment provider, GoCardless.	To take payment and prevent fraud
Website data	IP address, device and browser information, cookies	To run and secure the website
Messages	Emails and enquiries you send us	To respond and keep a record

3. Our legal grounds

1. Contract: to open your account and supply orders.
2. Legal obligation: to keep tax, accounting and anti-fraud records.
3. Legitimate interests: to verify businesses, prevent fraud and misuse, secure our website and recover debts.
4. Consent: for non-essential cookies and any marketing emails. You can withdraw consent at any time.

4. Application documents

1. Documents you upload are stored in a private, access-restricted area of our website and are viewed only by authorised staff.
2. We delete them as soon as we have made our decision on your application, whether approved or not.
3. We keep a short record of the checks made (for example, the type of document seen and the result), not the documents themselves, for 6 years, for verification and fraud-prevention purposes, as permitted under UK law.

5. Who we share data with

We never sell your data. We share it only with providers that help us run the business, under contracts that protect it:

1. Website hosting and email providers.
2. Our payment provider, GoCardless, to process bank payments.
3. Couriers, to deliver your orders.
4. Professional advisers, such as accountants and lawyers.
5. The police, fraud-prevention agencies, regulators or courts, where the law requires it or to prevent fraud.

Some providers may process data outside the UK. Where they do, we make sure appropriate safeguards are in place, as UK law requires. The controller of your data is Genesis Black Limited, trading as Rangewell, registered in England and Wales (company number 17381514), registered office 43 Granville Street, Bristol, England, BS5 9SW.

6. How long we keep data

Data	Kept for
Application documents	Deleted once our decision is made
Verification record	6 years after the decision, for verification and fraud prevention
Orders, invoices and payment records	6 years after the end of the financial year, as UK tax law requires
Account details	While your account is open, then up to 6 years
Enquiries	Up to 2 years

7. Your rights

You may ask us to access, correct or delete your data, to restrict or object to its use, or to transfer it. Some requests may be limited where we must keep records by law. Email support@rangewell.uk. We reply within one month.

8. Cookies

We use essential cookies to run the website, your account and your cart. Other cookies are used only if you accept them through our cookie banner, and you can change your choice at any time.

9. Security

Our website uses an encrypted connection (HTTPS). Access to customer data and documents is restricted to authorised staff.

10. Complaints

If you are unhappy with how we handle your data, contact us first. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

11. Changes

We may update this policy. The latest version is always on our website.