Privacy policy

Made in Ply Limited Privacy Notice

Last updated: 18 May 2026

Made in Ply Limited (“we”, “us”, “our”) is committed to protecting your privacy and handling personal data transparently and securely in accordance with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

1. Who we are

Made in Ply Limited is the Data Controller for personal data processed in connection with our website and business activities.

Registered address:
Unit 2–4 Summer’s Yard
Farm Road
Caddsdown Industrial Estate
Bideford
EX39 3GE
United Kingdom

Email: admin@madeinply.co.uk
Privacy Contact: Daniel Lobato

2. What this notice covers

This notice explains how we collect, use, store and protect personal data when you:

Visit or use our website
Contact us or request information
Place an order for products
Subscribe to marketing communications

3. Personal data we collect

We collect personal data you provide directly and certain technical information automatically when you use our website.

This may include:

Identity and contact data

Name
Email address
Telephone number
Billing and delivery address

Transaction data

Order details
Purchase history
Payment confirmations

Payment card details are processed securely by our payment provider and are not stored by us.

Technical data

IP address
Browser type
Device information
Operating system
Cookie preferences

Usage data

Website interactions
Browsing behaviour
Pages viewed
Referral sources

Marketing preference data

Communication preferences
Consent choices

We do not sell or share mobile phone numbers with third parties for their own marketing purposes. SMS service providers engaged by us may process your mobile number and message data solely on our behalf and under appropriate contractual and data protection safeguards.

We will only send marketing text messages where we have an appropriate lawful basis, typically your consent. You may opt out of marketing SMS communications at any time by following the unsubscribe instructions included in the message or by contacting us directly.

• Marketing and promotional messages (where you have provided consent)

• Customer service communications

• Order confirmations and delivery updates

Where you provide your mobile telephone number, we may use it to send SMS or text messages relating to:

3A. SMS and Text Message Communications

4. How we use your data and our lawful basis

We process personal data only where we have a lawful basis to do so.

Contract

We process your data to:

Process and fulfil orders
Manage payments and deliveries
Provide customer support

Legitimate interests

We process data to:

Operate and improve our website
Analyse website performance
Prevent fraud
Maintain website security
Improve customer experience

Consent

We rely on consent for:

Non-essential cookies
Marketing communications where required
Analytics and advertising tracking tools

You may withdraw consent at any time.

Legal obligation

We process data where necessary to:

Meet tax and accounting requirements
Respond to lawful requests
Comply with regulatory obligations

5. Sharing your data

We do not sell your personal information.

We may share personal data with trusted service providers who process data on our behalf, including:

Shopify (e-commerce platform and hosting)
Content Fusion (website services)
Klaviyo (email marketing and customer communications)
Payment processors
Professional advisers including accountants and legal advisers
IT and website support providers

These providers process personal data only under contractual safeguards and on our instructions.

6. Analytics and advertising technologies

We use analytics and advertising technologies to understand website performance and improve our marketing.

These include:

Google Analytics
Meta Pixel

These tools may collect information such as:

Pages visited
Time spent on site
Device and browser information
Referral sources
Conversion activity

These technologies are only activated where required after you provide consent through our cookie banner.

For more information, please see our Cookie Policy.

7. International transfers

Some of our service providers may process personal data outside the United Kingdom.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including:

UK adequacy regulations
The UK International Data Transfer Agreement (IDTA)
Standard contractual safeguards or equivalent legal protections

8. Storage and security

We use appropriate technical and organisational security measures to protect personal data, including:

Secure hosting environments
Encryption where appropriate
Access controls
Restricted staff access
Monitoring and security updates

9. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including legal and accounting requirements.

Typical retention periods:

Customer enquiries: up to 12 months
Order and accounting records: duration of contract plus up to 7 years
Marketing consent records: until consent is withdrawn or no longer valid

10. Your rights

Under UK data protection law, you have the right to: