-
71-75 Shelton Street Covent Garden, London, UK.
Privacy Policy
How VENYL collects, uses, stores and protects your personal data – and the rights you have.
1. Who we are
This website, venyl.net, is operated by VENYL, a brand of Next Focus Group (“VENYL”, “we”, “us” or “our”). We manufacture and sell heat transfer vinyl, self-adhesive vinyl and related products and services to businesses and consumers worldwide.
For the purposes of the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) and other applicable data protection laws, VENYL is the data controller of the personal data described in this policy.
- UK office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
- Production site: Plant 5, Sanyou Industrial Zone, Dongguan, Guangdong, China
- Privacy contact: [email protected] (subject “Privacy request”)
2. Scope of this policy
This policy applies to personal data we process when you visit our website, contact us, request a quote or samples, subscribe to our newsletter, buy from us, attend training, or interact with us as a business customer, distributor or supplier. It does not apply to third-party websites linked from our site; please read their own privacy policies.
3. Personal data we collect
3.1 Data you give us
- Identity and contact data: name, company name, job title, e-mail address, telephone/WhatsApp number, postal and delivery addresses.
- Enquiry data: the content of messages sent through our contact form, quote form, e-mail or chat, including product interests, quantities and project details.
- Transaction data: orders, invoices, payment status, shipping details and correspondence relating to orders (we do not store full card details).
- Business data: VAT/tax numbers, company registration details and credit information for business accounts.
- Marketing preferences: your newsletter subscription and communication preferences.
- Samples and support data: photos, garment information and test samples you send us for technical support.
3.2 Data collected automatically
When you browse our website, our hosting provider automatically records technical information in server log files, such as IP address, browser type and version, operating system, referrer URL, pages visited and date/time of access. This data is necessary to deliver the website securely and is not combined with other data sources.
Our website does not use analytics, advertising or social-media tracking cookies. We only use strictly necessary browser storage to remember your cookie choice. See our Cookie Policy.
3.3 Data from third parties
We may receive business contact details from distributors, trade fairs, logistics partners or publicly available business directories, and credit-check results from credit reference agencies for business accounts.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering enquiries, quotes and sample requests | Steps prior to entering a contract (Art. 6(1)(b)) / legitimate interest in responding to business enquiries (Art. 6(1)(f)) |
| Processing and delivering orders, invoicing, after-sales service | Performance of a contract (Art. 6(1)(b)) |
| Accounting, tax and customs obligations | Legal obligation (Art. 6(1)(c)) |
| Newsletter and marketing e-mails | Consent (Art. 6(1)(a)) or, for existing customers, legitimate interest / soft opt-in where permitted |
| Technical support, training and product testing | Contract (Art. 6(1)(b)) and legitimate interest in product quality (Art. 6(1)(f)) |
| Website operation and security (server logs) | Legitimate interest in a secure, functioning website (Art. 6(1)(f)) |
| Fraud prevention and credit checks for business accounts | Legitimate interest (Art. 6(1)(f)) |
| Establishing, exercising or defending legal claims | Legitimate interest (Art. 6(1)(f)) |
Where we rely on legitimate interests, we have balanced our interests against your rights and freedoms. You may request details of this assessment.
5. Contact and quote forms
When you submit a form on our website, we process the data you enter (name, e-mail, phone, company, product interest and message) solely to handle your request. Mandatory fields are marked with an asterisk. A hidden “honeypot” field is used to block automated spam; it does not collect personal data. Form data is deleted when your request is completed, unless a business relationship follows or legal retention periods apply.
6. Newsletter
If you subscribe to our newsletter, we use your e-mail address to send product news, technical tips and offers. You can unsubscribe at any time via the link in every e-mail or by writing to us. We keep a record of your consent and unsubscription to prove compliance.
7. Who we share data with
We never sell your personal data. We share it only where necessary with:
- Logistics providers (courier, freight forwarders, customs brokers) to deliver orders;
- IT and hosting providers that host our website and e-mail systems;
- Payment providers and banks to process payments;
- Professional advisers such as accountants, auditors and lawyers;
- Authorities where required by law (e.g. tax or customs authorities);
- Group companies of Next Focus Group involved in production, sales or support.
All service providers acting on our behalf are bound by data processing agreements and may only use data according to our instructions.
8. International transfers
As an international manufacturer with production in China and an office in the United Kingdom, we may transfer personal data outside the UK and European Economic Area – for example to our production and logistics teams in China. Where such countries do not benefit from an adequacy decision, we protect transfers with appropriate safeguards such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, together with supplementary technical and organisational measures. You can request a copy of the relevant safeguards.
9. How long we keep data
- Enquiries without a subsequent order: up to 24 months after the last contact.
- Customer and order records: for the duration of the business relationship and up to 6–10 years afterwards as required by tax and commercial law.
- Newsletter data: until you unsubscribe, plus a suppression record.
- Server log files: up to 30 days, unless needed to investigate a security incident.
- Technical support samples: physical samples are archived for up to 12 months for quality traceability.
10. How we protect your data
We use appropriate technical and organisational measures, including encrypted connections (HTTPS/TLS), access controls based on the need-to-know principle, regular software updates, backups, confidentiality obligations for staff and careful selection of service providers. No internet transmission is completely secure, but we continuously review our safeguards.
11. Your rights
Depending on the law that applies to you, you have the right to:
- access the personal data we hold about you;
- rectify inaccurate or incomplete data;
- erase your data (“right to be forgotten”), subject to legal retention duties;
- restrict processing in certain circumstances;
- data portability – receive your data in a structured, machine-readable format;
- object to processing based on legitimate interests, and at any time to direct marketing;
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
- not be subject to decisions based solely on automated processing – we do not carry out such decision-making.
To exercise your rights, e-mail [email protected]. We may need to verify your identity. We respond within one month, extendable by two months for complex requests.
You also have the right to lodge a complaint with a supervisory authority – in the UK, the Information Commissioner's Office (ICO, ico.org.uk); in the EU, the data protection authority of your country of residence. We would, however, appreciate the chance to address your concerns first.
12. Children
Our products and website are aimed at businesses and adult consumers. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
13. Links to other websites
Our website contains links to external services (e.g. LinkedIn, Pinterest, WhatsApp). When you click such links you leave our website; the respective provider is responsible for processing your data there. No data is transferred to these providers merely by visiting our pages.
14. Changes to this policy
We may update this policy to reflect changes in law, technology or our business. The current version is always available on this page with its “last updated” date. For material changes we will notify customers by e-mail where appropriate.