Privacy Policy

This Privacy Policy explains how White Mills Ltd ("White Mills Ltd", "we", "us" or "our") collects, uses, stores and protects personal information when you visit https://whitemill.co, contact us, or otherwise interact with us through the contact channels published on this website.

1. Who We Are

White Mills Ltd is the organisation responsible for the processing of personal information described in this Privacy Policy where we determine the purposes and means of that processing.

Business name: White Mills Ltd
Business address: 5 Gunnery Terrace, Cornwallis Road, London, SE18 6SW, United Kingdom
Website: https://whitemill.co
Email: admin@whitemill.com
Telephone: +44 1604 812057

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through this website, by email, by telephone, through business enquiries, and through other direct interactions with White Mills Ltd. It does not automatically apply to third-party websites, platforms or services that may be linked from this website.

3. Personal Information We May Collect

Depending on how you interact with us, we may collect the following categories of information:

• Identity information: name, job title and company or organisation name.
• Contact information: email address, telephone number, postal address and other contact details.
• Enquiry and correspondence information: the content of messages, requests, feedback and communications sent to us.
• Business information: information relevant to a commercial, supplier, partnership or service enquiry.
• Technical information: IP address, browser type, device information, operating system, referring URLs, access times and basic server logs where collected by our hosting or security providers.
• Usage information: information about how visitors use our website where analytics or similar tools are lawfully enabled.
• Any other information: information you voluntarily provide to us in connection with an enquiry or business relationship.

We ask that you do not send sensitive personal information unless it is genuinely necessary for the purpose of your communication and you are authorised to provide it.

4. How We Collect Personal Information

We may collect personal information:

• directly from you when you contact us by email, telephone or website enquiry;
• when you communicate with us in connection with products, services, suppliers or partnerships;
• automatically through website hosting, security, logging or cookie technologies;
• from publicly available sources where permitted by law; and
• from business partners, service providers or professional advisers where there is a lawful basis for doing so.

5. How We Use Personal Information

We may use personal information for purposes including:

• responding to enquiries and communications;
• providing information requested by you;
• managing prospective or existing business relationships;
• preparing quotations, proposals, agreements or related business documentation;
• maintaining administrative and correspondence records;
• operating, securing, maintaining and improving this website;
• detecting fraud, misuse, unauthorised activity or security incidents;
• establishing, exercising or defending legal claims;
• complying with legal, regulatory, tax, accounting or law-enforcement requirements; and
• other purposes that are compatible with the reason for which the information was collected.

6. Lawful Bases for Processing

Where the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018 apply, we process personal information only where an appropriate lawful basis is available. Depending on the circumstances, this may include:

• Consent: where you have given us clear permission for a specific purpose.
• Contract: where processing is necessary to take steps at your request before entering into a contract or to perform a contract.
• Legal obligation: where processing is necessary for us to comply with a legal obligation.
• Legitimate interests: where processing is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your rights and interests.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

7. Cookies and Similar Technologies

This website may use cookies or similar technologies that are strictly necessary for website operation, security or performance. If analytics, advertising or other non-essential tracking technologies are introduced, we will update our Cookie Policy and, where required, request appropriate consent before such technologies are used.

Please see our Cookie Policy for further information.

8. Sharing Personal Information

We do not sell personal information. We may disclose personal information where reasonably necessary to:

• website hosting, IT, email, cybersecurity, cloud or infrastructure providers;
• professional advisers such as accountants, auditors, insurers and legal advisers;
• suppliers, contractors or service providers who assist us in responding to an enquiry or providing a service;
• banks, payment providers or other financial service providers where relevant to a transaction;
• government departments, regulators, courts, law-enforcement agencies or other authorities where required or permitted by law; and
• a purchaser, investor, successor or relevant adviser in connection with a legitimate corporate transaction.

9. International Transfers

Some service providers may process information outside the United Kingdom. Where applicable, we take reasonable steps to ensure that international transfers are made using a lawful transfer mechanism and appropriate safeguards required under applicable data-protection law.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, tax, compliance, security and record-keeping requirements.

11. Data Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, disclosure or destruction. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

12. Your Data Protection Rights

Subject to applicable law and any relevant exemptions, you may have the right to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of personal information in certain circumstances;
• request restriction of processing in certain circumstances;
• object to processing based on legitimate interests;
• request transfer of certain personal information to you or another organisation;
• withdraw consent where processing is based on consent; and
• raise a complaint with the relevant data-protection supervisory authority.

13. Complaints

If you have concerns about how we handle personal information, please contact us first at admin@whitemill.com. Where UK data-protection law applies, you may also have the right to complain to the UK Information Commissioner's Office ("ICO").

14. Third-Party Websites

This website may contain links to third-party websites or services. We do not control those third parties and are not responsible for their privacy practices.

15. Children's Privacy

This website is intended for general business and corporate use and is not directed at children. We do not knowingly seek to collect personal information from children through this website.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, technologies or legal obligations. The revised version will be published on this page with an updated "Last updated" date.

17. Contact Us

White Mills Ltd
5 Gunnery Terrace, Cornwallis Road
London, SE18 6SW
United Kingdom
Email: admin@whitemill.com
Telephone: +44 1604 812057

This is a general corporate privacy template and should be reviewed against the company's actual data-processing activities and service providers before production use.