Who we are
This website, plain.packagedproper.co.uk, lets trade customers order plain packaging and catering consumables and pay online. It is run by ACSUPPLYCO LTD, trading as Packaged Proper. ACSUPPLYCO LTD is the data controller for the personal data described here.
Registered office: 19 The Green, Morden, SM4 4HJ, United Kingdom.
Contact: Amir Cherifi, Managing Director · sales@packagedproper.co.uk · +44 7440 386717
What we collect
When you place an order
- Contact and delivery details: business name, your name, mobile number, email address, delivery address and postcode, any delivery notes, and whether you'd like us to confirm by WhatsApp or email.
- Your order: the products, quantities and prices, your order reference, and whether you paid online or sent a request for a price.
When you pay
Payments are taken by Stripe on Stripe's own secure checkout page. You enter your card or wallet details (Apple Pay, Google Pay and similar) with Stripe, not on our site, and we never see or store your full card number. From Stripe we receive the payment amount and status, the email address used, the billing name and address you give Stripe, and limited card details such as the card type, last four digits and expiry date. We use these for refunds, receipts and to resolve payment queries.
When you contact us
If you message us on WhatsApp, phone or email, we receive whatever you choose to share, along with your phone number or email address.
What we don't do
This site has no user accounts, no newsletter, and no analytics or advertising cookies or pixels. We don't use Google Analytics, Google Ads tags or the Meta Pixel here.
How we use your data and why
| What we do | Legal basis (UK GDPR) |
|---|---|
| Take payment, process and deliver your order, and send your receipt and VAT invoice | Contract: we need it to fulfil your order |
| Contact you about your order, for example stock, delivery or a refund | Contract |
| Reply to a price request for 10 or more cases | Steps you ask us to take before a contract |
| Keep order, invoice and payment records for tax and accounting | Legal obligation (HMRC record-keeping) |
| Prevent fraud and keep payments secure | Legitimate interests (ours and Stripe's) |
We don't send marketing emails from this site, and we don't make automated decisions about you. Stripe runs its own automated fraud checks on payments. See Stripe's privacy policy, linked below.
Who we share it with
We only use the services needed to run the site and your order:
- Stripe: payment processing, receipts, VAT invoices and fraud prevention. For fraud prevention and its legal duties, Stripe acts as a separate controller. Stripe privacy policy.
- Web3Forms: emails your order details to us, so we can pick and dispatch it or reply to a price request. Web3Forms privacy policy.
- Cloudflare: hosts and delivers this website and processes the requests your browser makes, including your IP address, for security and performance. Cloudflare privacy policy.
- Google Fonts: serves the typeface used on this site. Your browser requests it from Google, which receives your IP address. No cookies are set. Google privacy policy.
- Suppliers and couriers who pack and deliver your order: receive your name, business name, delivery address and phone number, and nothing more.
- Our accountant and HMRC: order and invoice records, where required for tax and accounting.
Some of these providers process data outside the UK, including in the United States. Where they do, they rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or the UK–US data bridge. We do not sell your data.
Cookies and storage on your device
This site sets no cookies. It uses your browser's local storage, which stays on your device and is never sent to us, to make ordering work and to save you retyping:
| Name | Purpose | Kept |
|---|---|---|
pp_basket | Keeps your basket if you refresh or come back later | Until you order or clear it |
pp_pending, pp_notified_… | Matches your payment to your order when Stripe sends you back, so we're told exactly once | Cleared after payment, or until you clear it |
pp_details | Remembers your delivery and contact details on this device for your next order | Until you clear it |
pp_last | Powers "Add last order to basket" | Until you clear it |
On a shared computer, you can remove all of this now:
When you pay, Stripe's checkout page (checkout.stripe.com) uses its own cookies, mainly to prevent fraud and keep payments secure. They are covered by Stripe's privacy and cookie policies.
How long we keep it
- Orders, invoices and payment records: 6 years from the end of the financial year they relate to, as HMRC requires.
- Price requests that don't become an order, and general messages: up to 24 months from last contact.
- Data on your device: until you clear it (see above).
- Stripe keeps payment records for as long as it is legally required to, under its own policy.
Your rights
Under UK GDPR you can ask us for a copy of your data, ask us to correct or delete it, object to or ask us to restrict how we use it, or ask for it in a portable format. Some rights are limited where we must keep records by law. For example, we can't delete invoices that HMRC requires us to keep.
To use any of these rights, email sales@packagedproper.co.uk. We'll reply within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.
Changes to this notice
If we change how we handle data, for example by adding a new provider or analytics, we'll update this page and the date at the top.