Privacy Policy
Charles J Marshall (Aberdeen) Ltd
Last updated: 6 May 2026
1. Introduction
Charles J Marshall (Aberdeen) Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website www.marshall-trailers.co.uk, purchase spares from us online, contact us, or otherwise interact with our business.This Policy is issued in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
2. Who we are (Data Controller)
The data controller responsible for your personal data is:Charles J Marshall (Aberdeen) Ltd
Chapel Works,
Bucksburn,
Aberdeen
AB21 9TL
Telephone: 01224 722777
Email: admin@marshall-trailers.co.uk
If you have any questions about this Policy or how we handle your personal data, please contact us using the details above.
3. Personal data we collect
We may collect and process the following categories of personal data:• Identity data: your name and, where relevant, your job title and the company you represent.
• Contact data: postal address, email address and telephone number.
• Transaction data: details of the products you have purchased from us and confirmation of payment. We do not store full payment card details — see Section 10
• Technical data: IP address, browser type and version, device information, time-zone setting and operating system, collected through cookies and similar technologies.
• Usage data: information about how you use our website.
• Marketing and communications data: your preferences in receiving marketing from us and your communication preferences.
We do not knowingly collect personal data from children under the age of 13. If you believe we have collected such data, please contact us so we can delete it.
4. How we collect your personal data
We collect personal data:• Directly from you when you fill in a form on our website, place an order for spares, contact us by phone or email, or otherwise correspond with us.
• Automatically as you interact with our website, through cookies and similar technologies (see Section 7).
• From third parties such as payment processors, couriers and analytics providers we use in the course of our business.
5. How we use your personal data and our lawful bases
Under UK data protection law we must have a lawful basis to process your personal data. The lawful bases we rely on are set out in the table below.| Purpose | Lawful basis
| Replying to enquiries you send us | Legitimate interests; or taking steps at your request to enter into a contract
| Processing and fulfilling orders for spares | Performance of a contract with you
| Managing your account and customer records | Performance of a contract; legitimate interests
| Maintaining records and complying with legal, accounting and tax requirements | Legal obligation
| Sending you marketing communications about our products and services | Consent (which you may withdraw at any time)
| Improving our website, products and customer experience | Legitimate interests
| Protecting our website and systems from misuse and fraud | Legitimate interests; legal obligation
Marketing: we will only send you marketing communications where you have given us your consent to do so, or where you are an existing customer and we are permitted to do so on a “soft opt-in” basis under PECR. You can withdraw your consent or opt out of marketing at any time by clicking the “unsubscribe” link in any marketing email or by emailing admin@marshall-trailers.co.uk.
6. Sharing your personal data
We do not sell your personal data. We may share your personal data with the following categories of recipient:- Payment processing: online and card payments are processed by Square (Squareup Europe Ltd and its group company Block, Inc.). When you pay online, your card details are provided by you directly to Square and are not received or stored by us. For payment processing and fraud prevention, Square acts as a data controller in its own right and processes your data in accordance with its own privacy policy, available at https://squareup.com/gb/en/legal/general/privacy.
- Couriers and hauliers, who receive your name, delivery address and contact details so that they can deliver your order and contact you about the delivery.
- Other service providers who help us operate our business, such as IT and hosting providers and professional advisers.
- Regulators, law enforcement agencies, courts and other public authorities where we are required to do so by law, or to establish, exercise or defend our legal rights.
- Successors in the event of a merger, sale or business reorganisation; in such a case, the successor will be required to honour this Policy.
We require all third parties who process personal data on our behalf to respect the security of your personal data and to treat it in accordance with the law. They are only permitted to process your personal data for specified purposes and in accordance with our instructions.
7. Cookies
A cookie is a small text file placed on your device when you visit a website. We use cookies to make our website work, to remember your preferences and to understand how visitors use the site so we can improve it.When you first visit our website we will ask for your consent to the use of non-essential cookies (for example analytics or marketing cookies). Strictly necessary cookies, which are required for the website to function, do not require consent.
You can withdraw or change your cookie preferences at any time using the cookie banner on our website or your browser settings. To learn more about cookies and how to manage them, see the Information Commissioner’s Office guidance at https://ico.org.uk/your-data-matters/online/cookies/. Please note that disabling certain cookies may affect the functionality of our website.
8. How long we keep your personal data
We will only keep your personal data for as long as is necessary to fulfil the purposes for which we collected it, including for the purposes of meeting any legal, accounting or reporting requirements. As a general guide:• Customer transaction and accounting records are retained for 7 years to meet HMRC requirements.
• General enquiry correspondence is retained for up to 2 years from last contact.
• Marketing preference data is retained until you withdraw consent or unsubscribe, plus a short suppression-list period to ensure we honour your request.
When personal data is no longer needed, we will securely delete or anonymise it.
9. International transfers
Most of your personal data is processed in the United Kingdom. Our payment provider, Square, is part of Block, Inc., a company headquartered in the United States, and personal data processed in connection with payments may be transferred to and processed in the United States and other countries in which the Square group operates.Where we, or a provider acting for us, transfer personal data outside the UK, we will only do so where appropriate safeguards are in place, such as the UK Extension to the EU–US Data Privacy Framework (where the recipient is certified), the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries the UK Government has determined provide an adequate level of protection.
10. Security
We take the security of your personal data seriously. We have put in place appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include:• Hosting our website and core business systems with UK-based providers, with all traffic encrypted in transit using TLS/HTTPS.
• Two-factor authentication (2FA) on staff accounts and business systems.
• Microsoft 365 for email and collaboration, with email filtering to block spam, phishing and malicious attachments, and anti-virus / endpoint protection on staff devices.
• Use of Square as our payment service provider for online and card-present payments — card details are captured and processed directly by Square, a PCI-DSS-compliant payment processor, and full card numbers are never stored on our systems.
• Role-based access controls so that only employees, agents and contractors with a business need can access personal data.
• Regular off-site backups of our systems and data.
• Physical security at our Chapel Works premises, including a locked server location.
• Regular staff training on data protection and information security awareness.
In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office within 72 hours of becoming aware of it and, where required, inform affected individuals without undue delay.
11. Your rights
Under UK data protection law you have the following rights in relation to your personal data:• The right to be informed about how we use your personal data (this Policy).
• The right of access to a copy of the personal data we hold about you.
• The right to rectification of inaccurate or incomplete personal data.
• The right to erasure (“right to be forgotten”) in certain circumstances.
• The right to restrict processing in certain circumstances.
• The right to data portability for the personal data you have provided to us.
• The right to object to processing based on legitimate interests, and to direct marketing at any time.
• Rights in relation to automated decision-making and profiling (we do not currently carry out any such processing).
• The right to withdraw consent at any time, where we are relying on consent to process your personal data, without affecting the lawfulness of any processing carried out before withdrawal.
To exercise any of these rights, please contact us at admin@marshall-trailers.co.uk. We will respond within one month. We may need to verify your identity before we can act on your request.
You will not normally have to pay a fee to exercise your rights. However, we may charge a reasonable fee or refuse to comply if your request is clearly unfounded, repetitive or excessive.