Privacy notice

This notice explains how Trimline Group uses personal information about the people we deal with: website visitors, people who contact us, customers, suppliers, newsletter subscribers and job applicants.

Trimline Group Limited is the data controller. We’re registered in England and Wales (company number 14959272), at Teardrop Centre, London Road, Swanley, Kent BR8 8TS. We’re registered with the Information Commissioner’s Office (ICO) under reference ZC292151.

This notice also covers our brands: Pyro + Echo, Dukkaboard, Tilers Gear, OnBoard, Python Adhesives, Validus and VulcaSeal, and their websites and emails.

Questions or requests: email info@trimlinegroup.com, or write to the Privacy Contact at the address above.

When you visit trimlinegroup.com, our hosting and security providers (WP Engine and Cloudflare) process your IP address and technical details of your device and browser. They use these to deliver pages, keep the site secure and block attacks. This is in our legitimate interest in running a safe website.

We use cookies that the site needs to work. With your permission, we also use:

• Google Analytics 4, to count visits and see how the site is used. It sets cookies and sends data to Google, including in the US.
• Lead Forensics, to identify the companies that visit our site from their network (IP) address. We use this to understand which businesses are interested in our products and may contact those businesses. It’s aimed at organisations, not individuals.

Neither runs unless you click “Accept” in our cookie banner. You can change your choice at any time with the cookie button at the bottom of each page. See our cookie policy for the full list.

When you send an enquiry through our website, we collect your name, email address, enquiry type and message, and, if you give them, your company, phone number and how you heard about us. We use these to answer your enquiry and, where it leads to business, to set up or manage your account.

• The enquiry is emailed to our sales team. It’s sent by our email delivery provider, Resend, and isn’t stored on the website.
• We may record the enquiry and your details in our customer system, Microsoft Dynamics 365, so we can follow it up.
• Google reCAPTCHA checks each submission for spam. It looks at device and behaviour signals and sends them to Google. It only runs on pages with a form.
• Legal basis: our legitimate interest in answering enquiries and, where you’re asking about buying from us, taking steps towards a contract.

The form has an unticked box to receive our news and offers by email. We only send these if you tick it (see Newsletter and marketing emails).

You can sign up for the Trimline Group newsletter using the form at the bottom of our web pages, or by ticking the box on our enquiry form. The newsletter form asks for your email address and, if you want to give it, your first name. You need to tick the box to agree to receive our emails; it’s never ticked for you.

We then send you an email asking you to confirm. You’re only added once you click the link in it, so no one can sign you up without your knowledge.

We use your email address and name to send you news, product information and offers from Trimline Group and its brands. We send these with Microsoft Dynamics 365 Customer Insights – Journeys, which records your consent to the “Trimline newsletter” and when you gave it. It also tells us which emails were opened and which links were clicked, so we can improve them.

• Legal basis: your consent. You can unsubscribe at any time using the link in every email, or by emailing info@trimlinegroup.com.
• Business contacts: we may also email people at limited companies we do business with, or that are likely to be interested in our products, about similar products and services. We email sole traders and partnerships only with their consent, or if they’ve bought from us before and didn’t opt out. Every email lets you opt out.
• Our old Mailchimp list: we no longer use Mailchimp. The old list from our previous website will be deleted by 13 November 2026.

When you or your company buy from us or open an account, we collect the contact details of the people we deal with (name, job title, work email, phone, delivery and billing addresses), order and delivery records, and payment and account history.

• Where it’s kept: in our business systems, Microsoft Dynamics 365 and Microsoft Dynamics 365 Business Central. Online orders are handled by our shop, which has its own privacy policy.
• Why: to supply and deliver products, provide technical support, invoice and collect payment, run any T-Points rewards, and keep the accounting records the law requires.
• Legal basis: performing our contract with you or your company; our legal obligations (tax and accounting); our legitimate interest in managing customer relationships.
• Credit accounts: if you apply for credit, we check references and credit reference agencies, and share account information with our credit insurer. For sole traders, partnerships and company directors, this can include a personal credit and identity check.

We keep the work contact details of people at companies we think may be interested in our products, such as contractors, developers and architects. Some come from public sources and some from business data suppliers (Barbour ABI and Glenigan). We use them to contact those businesses by email, phone or post about our products.

• Legal basis: our legitimate interest in promoting our products to businesses. We check that this doesn’t override the person’s interests.
• We email sole traders and partnerships only with their consent, or if they’ve bought from us before and didn’t opt out.
• You can ask us to stop at any time, and we will.

• Calls: we may record calls to and from our sales and service lines for training, quality and fraud prevention. Recordings are kept for 90 days.
• Emails: our email is provided by Microsoft 365, which scans incoming messages and attachments for viruses and spam.
• Visits and CCTV: we keep a visitor record at our premises, and use CCTV to protect people and property and to prevent and detect crime. Footage is kept for 30 days, then held in a secure archive for up to a further 150 days.
• Social media: if you contact us through social media, we keep what you send us. The platform’s own privacy policy also applies.
• Trade events: if you register for or attend one of our events, we keep your name, company and contact details to manage the event and follow up.

If you apply for a job with us, through our website, by email, by post or through an agency, we collect your name, contact details, CV, work history, qualifications and anything else you send us, plus notes from interviews and any assessments.

• Why: to assess your application and, if we offer you a job, to carry out pre-employment checks (identity, right to work, references and, where relevant, a health questionnaire and a criminal records declaration).
• Who sees it: the people handling recruitment and the hiring managers. Website applications are emailed to our recruitment team and kept in the website’s database until deleted. We don’t share applications with anyone else, except recruitment agencies you applied through and, where relevant, our occupational health provider.
• Legal basis: taking steps to enter an employment contract with you; our legal obligations (right to work); our legitimate interest in recruiting.
• How long: see the retention table below. If you’re hired, your application becomes part of your staff file, covered by our staff privacy notice.

We don’t sell personal information. We share it only with service providers who handle it for us under contract, and with others where the law requires it.

We may also share information with the police, courts or regulators where the law requires it, and with a buyer if our business is sold.

Transfers outside the UK: where a provider handles data outside the UK, we rely on UK adequacy regulations (for example, for the EU, and for US companies certified under the UK Extension to the EU–US Data Privacy Framework) or on the ICO’s international data transfer agreement or addendum.

You have the right to:

• access the information we hold about you;
• have it corrected if it’s wrong;
• have it deleted, where we have no good reason to keep it;
• restrict how we use it while a concern is looked into;
• object to how we use it, including the absolute right to stop direct marketing at any time;
• withdraw consent at any time, where we rely on consent;
• receive a copy in a common format, or have it sent to another organisation (portability), where that applies.

Email info@trimlinegroup.com to use any of these rights. We’ll reply within one month. There’s normally no charge.

Profiling: we look at how customers and contacts engage with our emails and website (for example, opens, clicks and company visits) to decide who to contact and about what. No decisions with legal or similarly significant effects are made automatically. You can object to this at any time.

If you’re unhappy with how we’ve used your information, please contact us first at info@trimlinegroup.com and we’ll look into it. You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint or 0303 123 1113.

We review this notice at least once a year and when we change how we use personal information. The date at the top shows when it was last updated.