Last update: September 01, 2026
This policy explains how Solmoryn Limited ("Solmoryn", "we", "us", "our") collects and uses personal data when you: (a) visit solmorynlimited.com (the "Website"); (b) send us an enquiry through the contact form or by email; or (c) deal with us as a customer, supplier, distributor or other business contact. We are the controller for the personal data described in this policy. That means we decide why and how it is processed.
We process personal data in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003 ("PECR").
This table is the operative part of this policy. For each category of personal data it states the purpose, the lawful basis under Article 6 UK GDPR, and the retention period.
| Category and examples | Purpose | Lawful basis (Art. 6 UK GDPR) | Retention |
|---|---|---|---|
| Enquiry data — the fields in the Website contact form: your name; your business name and business address; your email address; and the content of your message. | To receive and assess your enquiry, to reply to it, and to decide whether we can supply you or work with you. |
Art. 6(1)(b) — steps taken at your request before entering into
a contract, where the enquiry concerns supply. Art. 6(1)(f) — our legitimate interest in responding to enquiries addressed to our business, where you write for any other reason or on behalf of a company. |
24 months from our last substantive contact with you |
| Correspondence data — email addresses, message headers and routing data, message content, attachments, and the details in your signature block. | To manage and record our correspondence, to evidence what was requested, quoted or agreed, and to establish, exercise or defend legal claims. | Art. 6(1)(f) — our legitimate interest in administering the business, keeping accurate records and protecting our legal position. | 24 months from last contact for non-customer correspondence. |
| Technical and security data — IP address, date and time of each request, the page requested, HTTP response code, referring URL, and the user-agent string (browser and operating system). This data is generated by our hosting provider and by Cloudflare, which sits in front of the Website. | To deliver the Website to your device; to protect it against bots, scraping, denial-of-service and other attacks; to detect and investigate faults; to keep access logs as evidence. | Art. 6(1)(f) — our legitimate interest in network and information security and in keeping the Website available. Recital 49 UK GDPR expressly recognises this interest. | 30 days in our own server logs. |
2.1. Directly from you — when you complete the contact form, email us, telephone us, or give us information in the course of a business relationship.
2.2. Automatically — the technical and security data is generated whenever anyone loads a page, whether or not they contact us.
3.1. Where we rely on Article 6(1)(f), the law requires us to weigh our interest against your interests, rights and freedoms. We have carried out and recorded a legitimate interests assessment for each such purpose.
3.2. You may ask us for a summary of any legitimate interests assessment by writing to [email protected].
4.1. We do not sell personal data. We do not share it with advertising networks, data brokers or affiliate networks for their own marketing or profiling purposes.
5.1. No transmission over the internet can be guaranteed to be completely secure. Please do not send us sensitive information such as health data, identity documents or payment card details through the Website contact form.
5.2. If a personal data breach occurs, we assess it without delay.
6.1. The contact form asks for your name, your business name and address, your email address and your message. All except the message are required, because without them we cannot identify who is asking or reply to you.
6.2. If you do not want to use the form, you can email us directly at [email protected].
7.1. No transmission over the internet is completely secure, and we cannot guarantee the security of data sent to us over the internet.
7.2. If a personal data breach occurs we assess it without delay.
8.1. The retention periods are in the table in section 1. They reflect what we need the data for, the statutory record-keeping and product-traceability duties that apply to our sector, and the periods within which claims can be brought against us.
8.2. When a period expires we delete the data or irreversibly anonymise it.
Access. To be told whether we hold personal data about you and, if we do, to receive a copy of it together with information about how we use it.
Rectification. To have inaccurate personal data corrected and incomplete data completed.
Erasure. To have your personal data deleted where there is no good reason for us to continue holding it.
Restriction. To ask us to suspend the use of your personal data, for example while its accuracy is being checked.
Objection. To object to processing based on our legitimate interests, on grounds relating to your particular situation. Where we process your data for direct marketing, your right to object is absolute — we will stop immediately.
Portability. To receive the personal data you gave us in a structured, commonly used, machine-readable format, and to have it sent to another controller where this is technically feasible.
Withdrawal of consent. Where we rely on your consent, to withdraw it at any time.
Automated decisions. Not to be subject to a decision based solely on automated processing that produces legal effects for you or similarly significantly affects you. We do not take such decisions.
To exercise any of these rights, email [email protected].
9.1. Response times. We will respond to requests to exercise your data protection rights without undue delay and within the time limits required by the UK GDPR and the Data Protection Act 2018. Where those laws permit us to extend or to pause that period — for example, because your request is complex or numerous, or because we reasonably require further information from you to verify your identity or to identify what your request relates to — we will notify you and explain our reasons.
We may update this policy from time to time. The current version is always published on the Website with the date at the top. If we make a change that materially affects how we use your personal data, we will take reasonable steps to bring it to your attention, and where the change requires your consent we will ask for it before the change takes effect.
Questions about this policy or about how we handle personal data: [email protected]