Privacy notice

Southeast Fuels is the data controller for the personal information described here. Our office is at Office 5B, 28 Townsend Street, Belfast, BT13 2ES, Northern Ireland. You can reach us on 028 9002 2088.

We sell into two jurisdictions, so two data protection regimes apply to us. Customers in Northern Ireland and Great Britain are covered by the UK GDPR and the Data Protection Act 2018. Customers in the Republic of Ireland are covered by the EU GDPR and the Data Protection Act 2018 (Ireland). The rights described below are substantially the same under both, and we apply the stronger interpretation where they differ.

Very little, and at the moment none of it identifies you. This site has no accounts, no contact form and no newsletter sign-up. It runs no analytics, no advertising tags and no third-party trackers, and it sets no cookies. Our cookie policy explains that in full.

When you switch between the sterling and euro price lists, that choice is carried in the web address itself rather than stored about you.

Our hosting provider records standard server logs, including IP address, timestamp, requested page and browser type. These are used to keep the site available and secure and to investigate faults or abuse, and are not used to build any profile of you.

When you call us, place an order or make an enquiry, we collect:

• your name and the phone number or email address you contact us on
• your delivery address, and your billing address where it differs
• details of what you ordered, what you paid and when it was delivered
• anything you tell us about access to your property, so the driver can complete the delivery
• a record of our correspondence with you, including complaints

We do not ask for and do not want any special category data. Please do not send us health information, and never send card details by email or text.

When online payment opens, card details will be captured by a regulated payment provider on their systems. Full card numbers will never reach ours.

• To take and deliver your order, and to handle returns, refunds and complaints. Lawful basis: performance of a contract with you.
• To answer an enquiry before there is any order. Lawful basis: our legitimate interest in responding to people who contact us.
• To keep accounting, VAT and other tax records. Lawful basis: compliance with a legal obligation.
• To keep our site and our business secure, and to establish or defend a legal claim. Lawful basis: our legitimate interests.

We do not use your information for automated decision making or profiling, and we do not sell it to anyone. We will only send you marketing if you ask us to, and any marketing message will carry a way to stop it.

We share what is necessary, and no more, with:

• the haulier or pallet network delivering your order, which needs your name, address, phone number and access notes
• our payment provider, once online payment opens, to take and refund payments
• our website host and IT suppliers, who process data on our instructions
• our accountants, and HMRC or Revenue, for tax and VAT records
• professional advisers, insurers, or a regulator or court where we are required to

Our suppliers act on our written instructions and cannot use your information for their own purposes.

Your data is held on servers in the United Kingdom or the European Economic Area wherever possible. Where a supplier processes data outside the UK or the EEA, we rely on an adequacy decision or on standard contractual clauses with the UK addendum, so that the protection travels with the data.

• Order, invoice and payment records: six years after the end of the tax year they relate to, which is the retention period tax law requires of us in both jurisdictions.
• Enquiries that do not become orders: up to 12 months, then deleted.
• Complaints and anything relating to a claim: six years from resolution.
• Server logs: a short rolling window kept by our host for security and fault diagnosis.

This site is served over HTTPS. Access to order records is limited to people who need it to do their job. We keep our systems patched and review who has access. No system is perfectly secure, but we take these obligations seriously and will tell you and the relevant regulator about a breach where the law requires it.

Under both regimes you have the right to:

• ask for a copy of the personal data we hold about you
• have inaccurate data corrected
• ask us to delete data we no longer have a reason to keep
• ask us to restrict how we use your data, or object to us using it on the basis of legitimate interests
• receive data you gave us in a portable format
• withdraw consent at any time, where we relied on consent

To exercise any of these, call the office on 028 9002 2088 or write to us at the address above. We will respond within one month. There is no charge unless a request is clearly unfounded or excessive.

Please raise it with us first so we can put it right. You also have the right to complain to a supervisory authority.

If you are in Northern Ireland or Great Britain, that is the Information Commissioner (ico.org.uk). If you are in the Republic of Ireland, it is the Data Protection Commission (dataprotection.ie). Complaining to us first does not affect that right.

We update this notice when what we do with personal data changes. The date at the top shows when the wording last changed. Any material change will be reflected here before it takes effect, and a consent banner will be added before this site ever loads an analytics or advertising tag.