Privacy Policy

1. Who We Are

Bleyer Bullion Ltd is the data controller for personal data collected through this website and in the course of our business. We are registered under the UK Data Protection Act 2018 and comply with UK GDPR.

If you have any questions about how we handle your data, contact us at sales@bleyer.co.uk.

2. Data We Collect

When you register or place an order

• Name, email address, telephone number
• Billing and delivery address
• Order and transaction history
• Payment confirmation references (we do not store card details)

When you contact us

• Name, email address, phone number, and the content of your message

When you use our website

• IP address, browser type and version, pages visited, referring URL
• Session data (e.g. basket contents) stored in server-side sessions

When you subscribe to our newsletter

• Email address and IP address at time of sign-up

For AML/KYC compliance

• Proof of identity (e.g. passport, driving licence) and proof of address where required

3. How We Use Your Data

• Processing and fulfilling your orders
• Managing your account and communicating with you about orders
• Sending transactional emails (order confirmations, shipping notifications)
• Sending marketing emails, if you have opted in
• Complying with our legal and regulatory obligations (AML, tax, accounting)
• Preventing fraud and maintaining the security of our service
• Improving our website and customer experience

4. Legal Bases for Processing

• Contract: Processing your orders, managing your account.
• Legal obligation: AML/KYC verification, tax record-keeping.
• Legitimate interests: Website security, fraud prevention, improving our services.
• Consent: Marketing emails (newsletter). You may withdraw consent at any time.

5. Who We Share Data With

We do not sell your personal data. We may share data with trusted third parties where necessary:

• Payment processors: Global Payments (Realex) to process card payments securely.
• Courier/logistics providers: To deliver your order.
• Email service providers: To send transactional and marketing emails.
• Legal/regulatory authorities: Where required by law, including the National Crime Agency (AML obligations).

All third-party processors are contractually obligated to handle your data securely and only for the purposes we specify.

6. How Long We Keep Data

• Order and transaction data: 7 years (HMRC tax record-keeping requirement)
• AML/KYC records: 5 years from the end of the business relationship
• Account data: Until you request deletion, plus any mandatory retention period
• Newsletter subscribers: Until you unsubscribe
• Enquiry and contact data: 3 years from last contact

7. Your Rights

Under UK GDPR you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate data.
• Erasure: Ask us to delete your data (subject to legal retention obligations).
• Restriction: Ask us to limit how we use your data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: Where processing is based on consent (e.g. newsletter), you may withdraw at any time by unsubscribing or contacting us.

To exercise any of these rights, contact us at sales@bleyer.co.uk. We will respond within one month.

8. Cookies

We use strictly necessary cookies to maintain your session (basket contents, login state). We do not use third-party tracking or advertising cookies.

Strictly necessary cookies cannot be disabled as they are required for the website to function. No consent banner is required for strictly necessary cookies under UK GDPR/PECR.

9. Security

We use industry-standard measures to protect your data, including:

• HTTPS encryption for all data in transit
• Bcrypt-hashed passwords — plaintext passwords are never stored
• Access controls limiting staff access to personal data
• Payment data handled entirely by our PCI-DSS compliant payment provider — we do not see or store card numbers

10. Contact & Complaints

If you have any concerns about how we use your data, please contact us first:

• Email: sales@bleyer.co.uk
• Phone: 01769 618 618

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's data protection authority — at ico.org.uk or by calling 0303 123 1113.