Privacy & Cookie Policy
Last updated 22 October 2026
This policy explains how ROK Plumbing Supplies Ltd (“ROK”, “we”, “us”) uses personal information when you visit this website, contact us or apply for a trade account.
Who we are
ROK Plumbing Supplies Ltd is the controller of the personal information described in this policy. We are a private limited company registered in England and Wales (company number 10571610). Our registered office is Unit 24 Midbrook Way, Middlewich, Cheshire, CW10 0GR.
For any question about this policy or your information, email [email protected], call 01606 212232 or write to us at our registered office.
Information we collect
When you use our contact or trade account forms
- Contact form: your name, company name (optional), email address, phone number, the type of enquiry and your message.
- Trade account application: your business name, address and contact details, and your name, position, phone number and email address.
- Credit account application (in addition): your company details and registration or VAT number, premises, the credit you need, payment and invoice addresses, two trade references, your business bank's name and address, sort code and account number, the names, home addresses and dates of birth of directors or partners, your own date of birth, and the declarations you agree to, with your typed signature, the date and time, and your IP address.
Credit applications are sent securely to our account system, where bank details and dates of birth are stored encrypted and can only be seen by our managers. They are not sent by email. Answers you type are saved in your own browser until you send them, so nothing is lost if you close the form; bank details and dates of birth are never saved there.
Please do not include sensitive information (for example about health) in your message. We do not need it to deal with your enquiry.
When you email or call us
Your contact details and whatever you tell us, so that we can deal with your request.
When you browse the website
- Technical information: like any website, our server receives your IP address, browser type and the pages you request. Our host keeps this in server logs for security and troubleshooting.
- Visitor statistics: we use a privacy-focused, cookieless analytics service (Plausible, provided by Apexia Group) to count page visits. It does not use cookies, does not store your IP address and does not identify you or follow you across other websites.
- Spam protection: when our forms are protected by Cloudflare Turnstile, Cloudflare processes technical information about your browser and device to check that the submission comes from a person rather than an automated bot.
How we use your information and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Responding to your enquiry, quote request or showroom consultation request | Steps you ask us to take before entering into a contract, or our legitimate interests in responding to people who contact us |
| Assessing and setting up a trade account | Steps you ask us to take before entering into a contract |
| Assessing a credit account application: a bank reference, credit and ID checks with a credit reference agency (including on directors), and contacting your trade references | Steps you ask us to take before entering into a contract, and our legitimate interests in lending responsibly and preventing fraud |
| Protecting our forms and website from spam, abuse and security threats | Our legitimate interests in keeping our website secure |
| Understanding how many people visit the site and which pages are useful (no personal identifiers) | Our legitimate interests in running and improving our website |
| Keeping records we are legally required to keep, and dealing with legal claims | Legal obligation, or our legitimate interests in establishing and defending legal claims |
Where we rely on legitimate interests, we have considered that our use of your information is proportionate and that it does not override your rights. You can ask us for more detail.
Marketing
Contacting us through this website does not sign you up to marketing. We will only send you marketing emails or texts if you have separately agreed to receive them, or where the law otherwise allows it, and every message will include a simple way to unsubscribe.
Who we share your information with
We do not sell your information. We share it only with service providers who help us run our business and who act on our instructions:
- Email provider (Amazon Web Services (Amazon SES), which sends our emails, and our own email inbox provider): form submissions are delivered to our sales inbox by email.
- Website hosting (Apexia Group Limited): hosts this website and its server logs.
- Apexia Group Limited: builds and maintains this website and provides our cookieless visitor statistics.
- Cloudflare, Inc.: provides Turnstile spam protection on our forms, and delivers some website code libraries.
- jsDelivr and Google Fonts: deliver code libraries and fonts used to display the website. Like any website your browser connects to, they receive your IP address to send you these files.
- Google: only if you choose to load the map on our contact page (see Cookies).
If you apply for a credit account, we also share the details needed with your bank (for a bank reference, with your authority), a credit reference agency (which records that a check was made), and the trade references you give us.
We may also share information with professional advisers, or where we are required to by law, for example with the police or a regulator.
International transfers
Some of our providers (including Cloudflare and Google) may process information outside the UK, for example in the United States. Where this happens we rely on UK adequacy regulations (such as the UK Extension to the EU-US Data Privacy Framework, where the provider is certified) or on the UK International Data Transfer Agreement or Addendum, together with appropriate safeguards. Contact us if you would like more information.
How long we keep your information
We keep enquiries and trade account enquiries for 2 years after our last contact, unless the enquiry leads to an order or trade account, in which case we keep the information for as long as needed to manage that relationship and to meet our legal and accounting obligations. We then delete or anonymise it.
Security
This website uses an encrypted (HTTPS) connection. Form submissions are sent directly to our business email account and are not stored in a website database. Access to enquiries is limited to staff who need it to deal with your request.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use your information;
- object to our use of your information where we rely on legitimate interests, and object at any time to direct marketing;
- ask us to transfer information you gave us to another organisation, where this applies.
To make a request, contact us using the details in Who we are. We will respond within one month, and there is usually no charge. We may need to confirm your identity first.
If you are unhappy with how we have handled your information, please contact us first so that we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.
Cookies and similar technologies
This website does not set any cookies of its own, and we do not use advertising or tracking cookies. The table below lists the third-party technologies that may run when you use the site.
| Technology | Provider | Purpose | When it runs |
|---|---|---|---|
| Plausible Analytics | Apexia Group | Counts page visits without cookies or personal identifiers. | On every page. Nothing is stored on your device. |
| Cloudflare Turnstile | Cloudflare, Inc. | Protects our forms from spam and bots. It is strictly necessary for the security of the forms you ask to use. | On the contact and trade pages, when spam protection is enabled. |
| Google Maps | Shows an interactive map of our showroom. Google may set cookies (for example NID) to remember preferences and for its own purposes, as described in Google’s cookie policy. | Only after you click “Show Google Map” on the contact page. |
Because the Google map only loads when you choose to load it, you can avoid Google’s cookies by not loading it, or by using the “Open in Google Maps” link instead. You can also block or delete cookies in your browser settings at any time.
Changes to this policy
We will update this policy when our website or the way we use information changes. The date at the top shows when it was last updated.