Privacy Policy

Last updated: 21 July 2026

This policy explains what personal data we collect when you use the Wonderbuilds trade portal, why we collect it, and the rights you have over it. It applies to the trade portal only. We keep things simple: we collect the minimum we need to run your trade account, and we never sell your data.

1. Who we are

The trade portal is operated by Wonderbuilds Ltd ("Wonderbuilds", "we", "us"), a UK manufacturer of roofing and building products. Wonderbuilds is the data controller for the personal data described in this policy. If you have any question about this policy or your data, contact us at admin@wonderbuilds.co.uk.

2. What we collect

We collect and hold the following information:

• Account details — your email address, company name, contact name and phone number, provided when your trade account is created or updated.
• Addresses — business and delivery addresses associated with your account.
• Portal usage — standard technical records of your use of the portal, such as log-ins and the pages and pricing you view, used to keep the service secure and working properly.
• Pricing and enquiry requests — the content of enquiries, pricing requests and messages you send us through the portal.
• Cookies — the portal sets a small number of essential and preference cookies only: wbsid (keeps you logged in),wb-cookies-ok (remembers that you have seen our cookies notice) andwb-welcome-seen (remembers that you have dismissed the welcome message). We do not use tracking, advertising or analytics cookies.

3. How we use your data

We use this information to:

• operate your trade account and let you log in securely;
• show you your trade pricing and your order and pricing history;
• respond to your enquiries and pricing requests;
• send transactional emails — such as enquiry confirmations, account emails and password resets — via our email provider. We do not send marketing emails from the portal without your agreement.

4. Lawful bases

Under UK GDPR, we rely on the following lawful bases:

• Contract — most processing is necessary to provide your trade account and respond to the requests you make, as part of our trading relationship with your business.
• Legitimate interest — we have a legitimate interest in keeping the portal secure, preventing misuse, and maintaining accurate records of trade enquiries and pricing. Where we rely on legitimate interest, we balance it against your rights and expectations.

5. Who we share it with

We share your data only with the service providers we need in order to run the portal, and only for the purposes described above:

• Hosting — the portal is hosted on Heroku.
• Storage — data is stored with Amazon Web Services in the eu-west-2 (London) region.
• Email — transactional emails are sent through Zoho Mail.
• Inventory system — your account is linked to our internal inventory system so that we can maintain your order and pricing history.

We do not sell your personal data, and we do not share it with advertisers or data brokers. Each provider processes data on our behalf under its own contractual and security commitments.

6. How long we keep it

We keep account details and order and pricing history for as long as your trade account is active, and afterwards for as long as we need them to meet our legal and accounting obligations. Enquiry messages are kept for as long as needed to deal with the enquiry and maintain a record of our correspondence. When data is no longer needed, it is deleted.

7. Your rights

Under UK GDPR you have the right to:

• Access — ask us for a copy of the personal data we hold about you;
• Rectification — ask us to correct data that is inaccurate or incomplete;
• Erasure — ask us to delete your data where we no longer have a valid reason to keep it;
• Complaint — complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have handled your data improperly.

To exercise any of these rights, email admin@wonderbuilds.co.uk. We will respond within one month.

8. Security

All traffic between your browser and the portal is encrypted in transit (HTTPS). Account credentials are stored encrypted — we never store your password in plain text. Access to personal data within Wonderbuilds is limited to the staff who need it to serve your account.

9. Changes to this policy

If we change how the portal handles personal data, we will update this policy and the "last updated" date above. Significant changes will be flagged to account holders by email or within the portal.