Privacy Policy
Last updated: 27 May 2026
This policy explains how Woodstock Industrial Supplies Limited ("we", "us", "our") collects and uses personal data when you use NutJob, our online quoting and ordering service. We are the data controller for the personal data described in this policy.
1. Who we are
Woodstock Industrial Supplies Limited is a company registered in England and Wales (company number 03801457), with registered office at Schofields Chartered Accountants, Unit 1, St Stephens Court, 15-17 St Stephens Road, Bournemouth, Dorset BH2 6LA, and trading address Unit 15, 12 Airfield Road, Christchurch, Dorset BH23 3TG.
For privacy enquiries, contact:
- Email: orders@woodstockindustrial.com
- Phone: 01202 400677
- Post: as above (trading address)
2. What personal data we collect
We collect the following categories of personal data:
Information you give us when placing an order:
- Your name
- Your email address
- Your phone number
- Your billing address
- Your delivery address
- Your account reference (for trade account customers)
Information about your enquiry and order:
- The text or voice content of your enquiry
- The products you select and quantities ordered
- Order totals, dates, and reference numbers
Voice enquiries are currently processed in your browser using your device's built-in speech recognition. If we add a third-party transcription provider in future, we will update this policy to identify that provider before doing so.
Information collected automatically when you use NutJob:
- Technical data including IP address, browser type, device type, and access times, where this is processed by our hosting and infrastructure providers to operate and secure the service
Payment information:
- We do not collect, see, or store your card details. Card payment is processed by Stripe (see section 5). We receive only a confirmation of payment, the amount, the last four digits of the card, and a Stripe transaction reference.
3. Why we use your personal data, and the legal basis
We use your personal data for the following purposes:
| Purpose | Legal basis |
|---|---|
| To process and fulfil your order, take payment, and arrange delivery | Performance of a contract with you |
| To send order confirmations and updates about your order | Performance of a contract with you |
| To respond to enquiries you make through NutJob | Performance of a contract, or our legitimate interest in responding to potential customers |
| To keep accounting and tax records | Compliance with our legal obligations under UK tax law |
| To improve NutJob, including reviewing how customers interact with the AI assistant | Our legitimate interest in operating and improving our service |
| To prevent fraud and secure our systems | Our legitimate interest in protecting our business and our customers |
We do not use your personal data for marketing unless you have explicitly opted in.
4. How long we keep your personal data
| Type of data | Retention period |
|---|---|
| Completed order records (including name, address, items, amounts) | 7 years, to comply with HMRC VAT and tax record-keeping requirements |
| Customer contact details outside of order records | 3 years after your last order with us |
| Abandoned or pending quotes that did not result in an order | 90 days, then deleted |
| Chat enquiry transcripts | 30 days, then deleted |
After these periods, data is either deleted or, where required for accounting purposes, retained in a form that minimises further use.
5. Who we share your personal data with
We share personal data with the following service providers, who act as data processors on our behalf:
Stripe Payments Europe Ltd (Ireland) — processes your card payment. Stripe collects and processes your name, billing address, email, and card details directly. We never see your full card details. Stripe's privacy policy is at stripe.com/gb/privacy.
Resend (operated by Resend, Inc., USA, with data processing in EU regions) — sends transactional email notifications about your order to our team. The email contains your name, contact details, billing and delivery address, and order details. Resend's privacy policy is at resend.com/legal/privacy-policy.
Railway Corp. (USA, with hosting in EU regions) — provides the hosting infrastructure NutJob runs on. Order data is stored in a database hosted on Railway. Railway's privacy policy is at railway.app/legal/privacy.
Anthropic, PBC (USA) — provides the large language model used by NutJob to interpret your enquiries. When you type a question into NutJob, the text of that question is sent to Anthropic's API to produce a structured response. We do not send your name, address, contact details, or payment information to Anthropic. Only the enquiry text itself is sent. Anthropic does not use API inputs to train its models. Anthropic's privacy policy is at anthropic.com/legal/privacy.
We may also share personal data:
- With HMRC and other government bodies where required by law;
- With professional advisers (accountants, lawyers) under duties of confidentiality;
- With a purchaser of our business, in the event of a sale or restructuring.
We do not sell your personal data to anyone.
6. International transfers
Some of our service providers (notably Stripe, Resend, Railway, and Anthropic) are based in the United States or transfer data outside the UK. Where this happens, we rely on:
- The UK government's adequacy decisions, where applicable;
- Standard Contractual Clauses approved by the UK Information Commissioner's Office; or
- Other safeguards required by UK GDPR.
7. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct any data that is inaccurate or incomplete
- Delete your personal data, subject to our legal obligations to retain it (for example, for tax records)
- Restrict how we use your personal data
- Object to processing based on our legitimate interests
- Receive your data in a portable format, where the processing is based on contract or consent
- Withdraw consent at any time, where we are relying on consent
To exercise any of these rights, contact us at orders@woodstockindustrial.com. We will respond within one month.
You also have the right to complain to the UK Information Commissioner's Office (ICO) at any time:
- Website: ico.org.uk
- Phone: 0303 123 1113
8. Security
We protect your personal data using appropriate technical and organisational measures, including:
- Encrypted transmission of data (HTTPS)
- Card payments handled exclusively by Stripe, a PCI-DSS Level 1 certified processor
- Access controls on our systems
- Service providers selected for their security posture
No system is perfectly secure, but we take security seriously and review our practices regularly.
9. Cookies
NutJob uses only the minimum cookies needed to operate. Specifically:
- Session cookies to keep track of your current quote and checkout flow. These are deleted when you close your browser.
- Stripe cookies are set during the checkout process by Stripe directly. These are required for secure payment processing.
We do not use advertising cookies, tracking cookies, or third-party analytics.
10. Children
NutJob is intended for business and adult consumer use. We do not knowingly collect personal data from anyone under 18.
11. Changes to this policy
We may update this policy from time to time. The current version is always available at /privacy. Material changes will be notified to active customers by email where appropriate.
12. Contact
For any privacy question, request, or complaint, contact us using the details in section 1.