Privacy Policy

1. Introduction

Ace Supply Platform Ltd ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Ace Supply Platform Ltd is the data controller responsible for your personal data.
Registered Office: 71-75 Shelton Street, London, WC2H 9JQ
Email: [email protected]

3. Information We Collect

We collect information that you provide directly to us, including:

• Personal identification information (Name, email address, phone number)
• Business information (Company name, Companies House number, VAT number)
• Financial information (Payment details, transaction history)
• Shipping and delivery addresses within the United Kingdom

4. Legal Basis for Processing

We process your data based on one or more of the following legal grounds:

• Contract: Processing necessary to perform our contract with you
• Legal obligation: Processing required by UK law
• Legitimate interests: Processing for our business interests, where not overridden by your rights
• Consent: Where you have given specific consent for marketing communications

5. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Verify your identity and business credentials via Companies House
• Comply with UK tax and VAT obligations
• Send you technical notices, updates, and support messages
• Prevent fraud and enhance security

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Receive your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests
• Rights related to automated decision-making: Request human review of automated decisions

To exercise any of these rights, please contact our Data Protection Officer at [email protected]

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Financial records are retained for 7 years as required by HMRC.

8. Data Security

We implement appropriate technical and organizational measures to protect the security of your personal information, including encryption, access controls, and regular security assessments. In the event of a data breach, we will notify you and the Information Commissioner's Office (ICO) as required by law.

9. International Transfers

Your data is primarily stored and processed within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO.

10. Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Phone: 0303 123 1113

11. Contact Us

If you have any questions about this Privacy Policy, please contact our Data Protection Officer at: [email protected]