Privacy Notice
(Effective date: 14 May 2025)
Tag Insulation Limited (“Tag Insulation”, “we”, “us”, “our”) is committed to safeguarding the personal data of everyone who visits www.taginsulation.co.uk or otherwise interacts with us. This Privacy Notice explains what information we collect, why we collect it, how we use it, and the rights you have. We process personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and any other applicable data‑protection laws.
1. Who we are (Data Controller)
Tag Insulation Limited
Registered in England & Wales | Company No. 12728152
Registered office: CWG House, Gallamore Lane Industrial Estate, Market Rasen, Lincolnshire LN8 3HA
Email: info@taginsulation.co.uk | Tel: 0800 448 0457
2. Personal data we collect
| Category | Examples |
| Identity & Contact | Name, postal address, email address, telephone number. |
| Transactional | Purchase details, payment card token (we do not store full card numbers), delivery records. |
| Technical & Usage | IP address, device identifiers, browser type, time‑zone setting, pages viewed, cookie IDs, interaction logs, and other analytics data. |
| Marketing Preferences | Consent status, subscription choices, communication history. |
| Correspondence | Emails, webform submissions, live‑chat transcripts, and call notes. |
3. Purposes & lawful bases for processing
| Purpose | Lawful basis (UK GDPR art. 6) |
| Process and deliver orders, provide after‑sales support | Contract (art. 6 (1)(b)) |
| Respond to enquiries and customer service requests | Contract; Legitimate interests (art. 6 (1)(f)) |
| Operate, secure, and improve our website (analytics, troubleshooting, testing) | Legitimate interests |
| Send you product updates, offers, or newsletters | Consent (art. 6 (1)(a)) |
| Maintain financial and tax records | Legal obligation (art. 6 (1)(c)) |
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
4. Data sharing & international transfers
We do not sell your personal data. We disclose it only:
- to trusted service providers acting as processors (e.g., website hosting, payment gateways, email‑delivery, analytics) under written contracts that require them to protect your data and use it solely on our instructions.
- to professional advisers (lawyers, accountants, auditors) who are bound by confidentiality obligations.
- where required by law, regulation, or court order.
Some processors operate outside the UK/EEA. Where this results in an international transfer, we protect it by using UK‑approved Standard Contractual Clauses (SCCs) or ensuring the destination country benefits from an adequacy decision.
5. Data security
We implement appropriate technical and organisational measures, including (but not limited to):
- encryption in transit (TLS) and at rest for sensitive data.
- role‑based access controls and multi‑factor authentication for staff.
- regular penetration testing and vulnerability scanning.
- documented incident‑response procedures and staff training.
6. Data retention
We retain personal data only for as long as necessary to fulfil the purposes described above or to comply with legal, accounting, or reporting requirements. Typical retention periods are:
| Data type | Retention period / criteria |
| Order and invoice records | 6 years from the end of the financial year (statutory obligation) |
| Enquiries with no subsequent purchase | 12 months from last contact |
| Marketing data | Until you withdraw consent or opt out |
| Website logs | 14 months (analytics) |
7. Your rights
You have the following rights, subject to certain conditions:
- Access – obtain a copy of the personal data we hold about you.
- Rectification – correct inaccurate or incomplete data.
- Erasure – request deletion where there is no lawful reason for us to continue processing.
- Restriction – limit the way we process your data.
- Portability – receive your data in a structured, machine‑readable format or ask us to transmit it to another controller.
- Objection – object to processing based on legitimate interests or direct marketing.
- Withdraw consent – at any time, where processing is based on consent.
To exercise any of these rights, email info@taginsulation.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (www.ico.org.uk).
8. Cookies & similar technologies
Our site uses essential cookies to function and optional cookies for analytics and marketing. Non‑essential cookies are deployed only with your consent via our cookie banner. For full details, see our separate Cookie Policy.
9. Changes to this notice
We may update this Privacy Notice periodically to reflect operational or legal changes. Any material changes will be posted on this page with a revised “Effective date”. Where appropriate, we will notify you by email or via a site banner.
If you have any questions about this Privacy Notice or our data‑handling practices, please contact us using the details in section 1.