Privacy policy

Who controls your information

Station Matting is a trading name of The Maximum Industrial Group Limited, registered in England and Wales under company number 17360049. The registered office is Lancaster Park, Newborough Road, Needwood, Burton-on-Trent, Staffordshire, DE13 9PD. The Maximum Industrial Group Limited is the controller of personal information collected through this website.

For privacy questions or requests, email [email protected] or write to the registered office above.

Information we collect

• Contact details: name, company, email address and phone number.
• Order details: selected products, quantity, value, order reference and payment status.
• Delivery details: delivery address and information needed by the carrier.
• Enquiries: messages, measurements, layouts and other information you choose to send.
• Technical and security data: IP address, browser information, request logs and information used to prevent abuse or diagnose a failed checkout.

Stripe handles card details directly. We do not receive or store your full card number, security code or online banking credentials.

How we use it and our lawful bases

• To answer enquiries and prepare quotations: taking steps at your request before entering a contract and our legitimate interest in responding to customers.
• To take payment, fulfil, deliver and support an order: performance of our contract with you.
• To handle cancellations, returns and complaints: performance of the contract and compliance with legal obligations.
• To keep accounting, tax and transaction records: compliance with legal obligations.
• To protect the website and checkout from fraud or abuse: our legitimate interest in operating a secure service.

We do not use information submitted for an order or enquiry for unrelated marketing without a separate lawful basis. We do not sell personal information.

Who receives it

We share only the information needed to operate the site, take payment, communicate about orders and deliver goods. Our main service providers are:

• Stripe: hosted payment processing and fraud prevention.
• Cloudflare: website hosting, content delivery, checkout processing and security.
• Resend: transactional order and fulfilment email.
• Our parcel carrier: delivery address, contact number and shipment information.
• Professional advisers or public authorities: where reasonably necessary or legally required.

Some providers may process information outside the UK. Where this occurs, the provider is responsible for using an applicable lawful transfer mechanism and safeguards under UK data protection law.

How long we keep it

Order, payment and accounting records are normally retained for six years after the end of the relevant accounting period so we can meet tax, accounting, warranty and legal obligations. Enquiries and quotations are kept only while they remain useful for the requested work, customer support or the establishment, exercise or defence of legal claims, and are reviewed for deletion when no longer needed.

Security and diagnostic logs are retained for the shortest practical period needed to investigate incidents, prevent abuse and maintain the service. We may retain information longer where the law requires it or a dispute makes it necessary.

Security

We use technical and organisational measures intended to protect personal information, including restricted access, encrypted connections, hosted payment processing, signed webhooks and controls around the checkout endpoint. No online system can guarantee absolute security.

Your rights

Depending on the circumstances, UK data protection law may give you rights to access, correct, erase or restrict personal information, receive certain data in a portable form, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time.

These rights are not absolute and can depend on the lawful basis and our legal obligations. Email [email protected] to make a request. We may need to confirm your identity before responding.

You may complain to the Information Commissioner's Office at ico.org.uk if you are unhappy with how we handle personal information. We would appreciate the opportunity to resolve the issue first.

Cookies and analytics

The site does not currently use advertising or analytics cookies. Essential security or checkout technologies may be used where strictly necessary to provide the service. If optional analytics or advertising tools are added, this policy and any required consent controls will be updated before they are used.

Changes

We may update this policy as the website, checkout or service providers change. The date above identifies the latest version.