Privacy policy.

We do not run advertising. We do not run analytics that fingerprint you. We hold the smallest amount of data needed to do the job, and we delete it when the job is done.

01 Who is the controller

Qazi Wholesalers Ltd., registered office in London, United Kingdom, is the data controller for all personal data we collect through this website, the trade portal, and direct correspondence.

You can reach our data team at qazi@qaziwholesalers.co.site. We respond to data-rights requests within 30 days, usually faster.

02 What we collect

We collect only what is necessary to verify your business, process orders, and provide trade support.

From trade-account applications

• Business name, trading name, registered address, trading address
• Companies House number, VAT number
• Contact name, role, email, telephone
• Type of retail business, intended product categories, estimated order volume

From orders & correspondence

• Order history, invoices, delivery addresses
• Email, phone and written correspondence between you and our team
• Payment-confirmation records (we do not store full card details — see §5)

From this website

• A minimal session cookie for portal authentication only
• Anonymised server-side logs (IP, browser, page) retained for 30 days for security purposes

We do not use third-party analytics, advertising trackers, social-network plugins, or behavioural fingerprinting.

03 Why we hold it (lawful basis)

• Contract — to verify your business, accept orders, fulfil and invoice them. This covers the bulk of what we hold.
• Legal obligation — to retain invoices, VAT records and trade correspondence as required by HMRC and Companies Act rules.
• Legitimate interest — to detect fraud, prevent counterfeit-stock requests, and protect our infrastructure. We balance this against your rights.
• Consent — for any optional contact beyond the operation of your account. You will be asked explicitly and may withdraw at any time.

04 Who we share with

We share personal data only with parties strictly necessary to operate the business:

• Carriers (e.g. our delivery partners) — name, delivery address, phone number for the consignment in transit.
• Payment processors — minimum transaction metadata. They handle card data; we never see it.
• Companies House & HMRC — for the verification and tax-record obligations described above.
• Our auditors and accountants — under contractual confidentiality.
• Law enforcement — only when compelled by a valid UK court order or statutory notice.

We do not share your data with Syro Global or any other trade partner for marketing purposes. Where a trade enquiry routes externally, it does so only with your explicit consent.

05 Payments

Card payments are processed by an FCA-regulated payment service provider. Qazi does not store, log, or transmit card numbers, CVV, or expiry data. Our records retain only an anonymised transaction reference, the amount, and the date.

06 How long we keep it

• Trade account records — for the lifetime of the account plus 6 years (HMRC retention).
• Invoices & orders — 6 years from issue.
• Marketing/contact email opt-ins — until you withdraw, then deleted within 30 days.
• Application forms from declined or unfinished accounts — 12 months, then deleted.
• Server logs — 30 days.

07 Where data lives

All personal data is stored on servers physically located in the United Kingdom or European Economic Area. If we ever need to transfer data outside the UK/EEA we will do so under the UK International Data Transfer Agreement or an equivalent legally adequate mechanism, and we will tell you.

08 Your rights

Under the UK GDPR and the Data Protection Act 2018 you have the right to:

1. Be told what we hold about you (right of access);
2. Correct anything inaccurate or incomplete (right to rectification);
3. Ask us to delete data we no longer need (right to erasure, subject to legal-retention exceptions);
4. Restrict how we use your data while a dispute is resolved;
5. Receive your data in a portable format (right to portability);
6. Object to processing based on legitimate interest;
7. Withdraw consent where consent is our lawful basis.

Email qazi@qaziwholesalers.co.site to exercise any of these. We respond within 30 days at no cost. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

09 Cookies

This site uses one (1) cookie:

• qw_session — first-party, strictly-necessary, used only to keep you signed into the trade portal. Expires when you sign out or after 24 hours of inactivity.

We do not set analytics, advertising or third-party tracking cookies. Strictly-necessary cookies do not require consent under the PECR.

10 Security

We apply industry-standard organisational and technical measures, including TLS in transit, encryption at rest, role-based access control on our internal systems, and quarterly access reviews. No system is perfectly secure; if we ever experience a breach affecting your data, we will notify you and the ICO within 72 hours as required by law.

11 Changes

We may update this policy. The version in force is the version on this page. Material changes will be notified by email to all active trade accounts at least 14 days in advance.

---