Privacy Statement

Surya Logistics Limited ("Surya", "we", "us" or "our") respects your privacy and is committed to protecting your personal data. This Privacy Notice explains how we collect, use, store and share your personal data when you visit our website, purchase products from us, create an account, contact us or otherwise interact with us.

Please read this Privacy Notice carefully to understand how we process your personal data.

1. Who We Are

Surya Logistics Limited is generally the data controller responsible for personal data collected through this UK website and from UK customers, website visitors and business contacts.

Certain services may be provided in collaboration with other Surya group companies, including Surya BV and Surya, Inc. Depending on the circumstances, those entities may process personal data on our behalf or act as independent controllers for their own legal obligations and business activities.

Contact details

Surya Logistics Limited

Registered office: 22 Wycombe End, Beaconsfield, England, HP9 1NB

Company number: 15736335

Email: info@uk.surya.com

Telephone: +44 1908 082367

If you have questions about this Privacy Notice or our use of your personal data, please contact us using the details above.

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Identity Data: name, title, username or account identifier, company and job title for trade accounts.

Contact Data: billing address, delivery address, email address and telephone number.

Account Data: login details, account preferences and information associated with your customer or trade account.

Transaction Data: order history, purchases, payments, returns, refunds and delivery information.

Financial Data: payment-related information required to process a transaction. We do not intend to store full payment card details on our website; payments are processed through authorised payment providers.

Technical Data: IP address, browser type and version, device identifiers, operating system, time zone and cookie or similar identifiers.

Usage Data: information about how you use our website, including pages viewed, searches, interactions and navigation activity.

Marketing and Communications Data: marketing preferences, communication preferences and responses to surveys or promotions.

Enquiry and Customer Service Data: information contained in enquiries, complaints, reviews and other communications with us.

We do not intentionally collect special category personal data, such as information about health, race, religion or sexual orientation, through the website. Please do not provide this information unless it is necessary and we have specifically requested it.

3. How We Collect Personal Data

Directly from you when you place an order, open an account, contact us, request support, subscribe to marketing or otherwise provide information to us.
Automatically when you use our website, through cookies and similar technologies.
From third parties, including payment providers, delivery partners, ecommerce and technology providers, analytics providers and, where relevant, other Surya group companies.
From publicly available sources where lawful and relevant to our business activities.

4. How We Use Your Personal Data and Our Legal Bases

UK data protection law requires us to have a lawful basis for each use of personal data. The table below summarises our principal purposes and the legal bases we expect to rely on. The applicable basis may vary depending on the circumstances.

Purpose	Typical lawful basis
Process, fulfil and deliver orders; take payment; manage returns and refunds	Performance of a contract; legal obligation
Create and administer customer or trade accounts	Performance of a contract; legitimate interests in managing customer relationships
Respond to enquiries, complaints and service requests	Performance of a contract; legitimate interests in providing customer service
Prevent fraud, misuse and security incidents	Legitimate interests in protecting our business, customers and systems; legal obligation where applicable
Operate, troubleshoot, analyse and improve the website and services	Legitimate interests in operating and improving our business; consent where required for non-essential cookies
Send marketing communications and manage preferences	Consent where required; otherwise legitimate interests where permitted by law
Maintain accounting, tax and business records	Legal obligation; legitimate interests in business administration
Establish, exercise or defend legal claims and enforce our terms	Legitimate interests; legal obligation
Comply with requests from regulators, courts or law enforcement	Legal obligation; legitimate interests where applicable

5. Marketing Communications

Where permitted by law, we may send you information about products, promotions, services and events that may interest you. We will obtain consent where consent is required.

You may opt out at any time by selecting the unsubscribe link in a marketing email, changing your account preferences where available, or contacting us. Opting out of marketing will not prevent us from sending service messages that are necessary for an order, account or customer service request.

We will not sell your personal data to third parties for their own marketing purposes.

6. Sharing Your Personal Data

We may share personal data, where necessary and lawful, with the following categories of recipients:

Payment and fraud-prevention service providers.
Delivery, freight, warehouse and logistics providers.
Website hosting, ecommerce platform, customer service and other technology providers.
Marketing, communications and analytics providers, subject to applicable consent requirements.
Professional advisers, including legal, accounting, audit and insurance advisers.
Banks and finance providers.
Regulators, tax authorities, courts, law enforcement and other public authorities where required or permitted by law.
A buyer, seller or adviser in connection with a proposed or completed corporate transaction, subject to appropriate confidentiality measures.

Service providers are permitted to process personal data only for specified purposes and in accordance with our instructions, where they act as our processors.

7. Surya Group Companies and Intra-Group Data Sharing

As part of our business operations, personal data may be shared between Surya group companies where necessary for the purposes described in this Privacy Notice. Depending on your relationship with us, these companies may include:

Surya Logistics Limited, United Kingdom.
Surya BV, Netherlands.
Surya, Inc., United States.
Other affiliated Surya companies that support our business operations.

We may share personal data within the Surya group for:

Order processing, fulfilment and customer service.
Customer and trade account management.
Product sourcing, inventory and supply-chain management.
Sales and marketing activities.
Financial reporting, accounting and audit.
Information technology, security and system administration.
Business administration and operational support.
Compliance with legal and regulatory obligations.

Each Surya entity will process personal data only where it has a lawful basis to do so and in accordance with applicable data protection law. The role of each company, including whether it acts as a controller or processor, depends on the relevant processing activity.

8. International Transfers

Some recipients of personal data, including Surya group companies and service providers, may be located outside the United Kingdom. This may include transfers to the Netherlands, the United States and other countries in which our service providers operate.

Where required, we use safeguards recognised under UK data protection law. These may include transferring data to a country covered by UK adequacy regulations, using the UK International Data Transfer Agreement, using the UK Addendum to approved standard contractual clauses, or relying on another lawful transfer mechanism. We also assess and apply supplementary measures where appropriate.

You may contact us for further information about the safeguards relevant to your personal data. We may redact commercially confidential information from copies of contractual safeguards.

9. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, regulatory, tax, accounting and reporting requirements, resolve disputes and enforce agreements.

Retention periods depend on the type of data, the purpose of processing, legal requirements and the potential risk of harm from unauthorised use or disclosure. When personal data is no longer required, we delete, anonymise or securely dispose of it.

10. Data Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Access is limited to personnel and service providers who need the information for legitimate business purposes and who are subject to confidentiality obligations.

No internet transmission or storage method is completely secure. If we become aware of a personal data breach, we will assess it and notify affected individuals and regulators where required by law.

11. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you the right to:

Request access to your personal data.
Request correction of inaccurate or incomplete personal data.
Request deletion of personal data in certain circumstances.
Request restriction of processing in certain circumstances.
Object to processing based on legitimate interests, including profiling related to that processing.
Object at any time to direct marketing.
Request transfer of certain personal data in a structured, commonly used and machine-readable format.
Withdraw consent at any time where processing is based on consent, without affecting processing carried out before withdrawal.
Not be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects, except where permitted by law.

These rights are not absolute and exemptions may apply. To exercise a right, contact us using the details in section 1. We may request information to verify your identity and may need clarification to locate the relevant data. We will respond within the period required by applicable law.

12. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Some are essential for the website to operate. Others may support preferences, analytics, functionality or advertising. Where required, we will ask for consent before placing or accessing non-essential cookies.

13. Third-Party Websites

Our website may contain links to websites, applications or services operated by third parties. We do not control those third parties and are not responsible for their privacy practices. We encourage you to read the privacy notice of each third party you interact with.

14. Children's Privacy

Our website and services are not directed at children, and we do not knowingly collect personal data from children through the website. If you believe a child has provided personal data to us, please contact us so that we can investigate and take appropriate action.

15. Complaints

If you have concerns about our use of personal data, please contact us first so that we have an opportunity to address them.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. Contact information is available at ico.org.uk. You may also have the right to complain to another data protection authority depending on where you live or work or where an alleged infringement took place.

16. Changes to This Privacy Notice

We may update this Privacy Notice to reflect changes in our business, legal requirements or website functionality. The latest version will be published on this website with the updated revision date. Where changes are significant, we will provide an additional notice where appropriate.