Privacy Notice

Welcome to the Paul David Enterprises t/a Boards Direct Privacy Notice.

Boards Direct respects your privacy and is committed to protecting your personal data. This privacy notice informs you on how we collect, process, and store your personal data when you visit our website and use our services. It also outlines your rights regarding your data and how the law protects you.

1. Important Information and Who We Are

Purpose of this Privacy Notice

This privacy notice aims to give you information on how Boards Direct collects and processes your personal data through your use of this website, including any data you provide when you create an account, sign in, or make a purchase.

This website is not intended for children, and we do not knowingly collect data from children.

It’s important that you read this privacy notice along with any other notices provided when collecting personal data, so you are fully aware of how and why we use your data. This notice supplements other notices and is not intended to override them.

Controller

Paul David Enterprises t/a Boards Direct is the controller and responsible for your personal data (referred to as "we," "us," or "our" in this privacy notice).

If you have any questions or would like to exercise your rights, please contact our Data Privacy Manager using the details below.

Contact Details:

• Name: Robin Smith (Managing Director)
• Postal Address: Unit 4 Poplars Court, Nottingham NG7 2RR, United Kingdom
• Telephone: 0800 612 5432
• Email: sales@boardsdirect.co.uk

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). However, we encourage you to contact us first so we can address your concerns directly.

Date Last Amended: 22nd July 2025

2. Data We Collect About You

Personal Data means any information about an individual from which they can be identified. We may collect, use, store, and transfer different kinds of personal data about you, which are grouped as follows:

• Identity Data: Includes first name, last name, username, title, date of birth, and gender.
• Contact Data: Includes billing address, delivery address, email address, and telephone numbers.
• Financial Data: Includes bank account and payment card details.
• Transaction Data: Includes details about payments to and from you, and details of products and services purchased.
• Technical Data: Includes IP address, browser type and version, operating system, and device information used to access the website.
• Profile Data: Includes your username, purchases, interests, preferences, feedback, and survey responses.
• Usage Data: Includes information on how you use our website and services.
• Marketing and Communications Data: Includes your preferences for receiving marketing from us and your communication preferences.
• Aggregated Data: Includes statistical or demographic data derived from personal data but which does not directly identify you.

We do not collect any Special Categories of Personal Data (such as data on race, religion, or health) or criminal convictions.

3. How We Collect Your Data

We collect data from you through:

• Direct Interactions: When you fill in forms, correspond with us by email or post, or create an account.
• Automated Interactions: As you interact with our website, we collect technical data such as cookies or server logs.
• Third Parties: We may receive data about you from third-party providers, including payment services and analytics providers.

4. How We Use Your Data

We will only use your personal data when the law allows us to. The most common purposes for processing your data include:

• Contractual Necessity: To process your orders and payments, manage your account, and provide customer support.
• Legitimate Interests: To manage our business, improve our services, and communicate with you.
• Legal Obligation: To comply with legal and regulatory requirements.

Specific Purposes Include:

• Registering you as a customer
• Processing and delivering your orders
• Managing payments and recovery of outstanding payments
• Managing our relationship with you, including notifications and surveys
• Conducting marketing and advertising
• Handling customer service and product inquiries

We do not rely on consent as the primary basis for processing data, except for marketing communications.

5. Data Sharing

We may share your personal data with:

Internal Third Parties and External Third Parties who help us carry out our business functions, such as payment processors, marketing agencies, and customer service platforms. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

External Third Parties

Name	Type of Service	Data Processed
Tawk.to	Live chat service	Internal messaging that might include customer name and email details for the purpose of support.
Sage	Accountancy software	Customer details including customer name, address and email address.
Google	Cloud-based storage	Occasional instances of customer name and email address on internally-shared documents.
Payvector	Payment processor	Customer name, address, and card information for the purpose of payment processing.
PayPal	Payment processor	Customer name, address, and card information for the purpose of payment processing.
Braintree	Payment processor	Customer name, address, and card information for the purpose of payment processing.
Zoho Desk	Customer service management	Customer name, address, and ticket details for managing support and service requests.
Trustpilot	Review gathering	Customer name, email address for the purpose of review gathering.

6. International Transfers

We may transfer your personal data outside the European Economic Area (EEA). We ensure that data transfers are protected in compliance with EU data protection standards by using mechanisms such as standard contractual clauses or Privacy Shield for US-based service providers.

7. Data Security

We have implemented appropriate measures to safeguard your personal data from accidental loss, unauthorized access, or disclosure. We limit access to your personal data to those who need it for business purposes, and they are required to treat the data confidentially.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. By law, we must keep basic customer information for a minimum of six years after our business relationship ends.

9. Your Legal Rights

You have several rights concerning your personal data, including:

• Access: You can request a copy of your personal data.
• Correction: You can correct any inaccurate or incomplete data.
• Erasure: You can ask us to delete your data under certain conditions.
• Object: You can object to processing for direct marketing purposes.
• Restriction: You can request the restriction of processing under certain circumstances.
• Portability: You can request the transfer of your personal data to you or a third party.
• Withdraw Consent: You can withdraw your consent to data processing at any time.

10. Cookies

Our website uses cookies to improve your experience. For more information, please see our Cookie Policy.

11. Contact Us

If you have any questions or would like to exercise your rights, please contact:

• Email: sales@boardsdirect.co.uk
• Phone: 0800 612 5432

This privacy notice is effective as of 22nd July 2025.