Who we are
G B Tyres (UK) Ltd is the data controller for the personal data described in this policy. We are registered in England and Wales under company number 07747704, at GB House, Black Lake, West Bromwich, B70 0FS.
We are a tyre wholesaler selling to the trade. Most of the personal data we hold is business contact data about the people who work at our trade customers and suppliers, rather than data about members of the public.
This policy is written to meet the UK General Data Protection Regulation and the Data Protection Act 2018.
What we collect and why
| What we collect | Why | Lawful basis |
|---|---|---|
| Trade account contacts — name, job title, business email, business telephone, the business address | To open and run your account, take orders, deliver goods and answer queries | Performance of a contract, and our legitimate interests in running a trade account |
| Account application data — Companies House number, VAT number, trading address, branch details, sectors of interest, requested credit terms | To verify the business, assess the account and set pricing and terms | Performance of a contract, and compliance with a legal obligation |
| Credit and reference data — bank details, trade references, credit reference agency results, payment history | To assess and review credit, and to recover debts | Legitimate interests in assessing credit risk, and performance of a contract |
| Order, delivery and collection records, including delivery addresses and signatures | To fulfil orders, prove delivery and handle shortage or damage claims | Performance of a contract |
| Ghost shipment recipient details supplied by you | To deliver to your customer under your name | Performance of our contract with you, and our legitimate interests |
| Warranty claim data submitted through the warranty portal | To assess and settle warranty claims, and to refer them to manufacturers | Performance of a contract, and legitimate interests in product quality |
| Portal login and usage records | To give you access, keep the portal secure and investigate misuse | Performance of a contract, and legitimate interests in security |
| Correspondence — emails, letters, notes of telephone calls | To answer queries and keep a record of what was agreed | Legitimate interests in managing the relationship |
| Invoices, statements and accounting records | To take payment and meet our tax and company law obligations | Compliance with a legal obligation |
| Marketing contacts — business name, contact name and business email | To send trade updates about products, stock and services | Legitimate interests for existing trade customers, consent otherwise |
| Website data — pages viewed, referrer, device and browser information, IP address | To run the site and understand how it is used | Legitimate interests for essential operation, consent for analytics cookies |
| Recruitment data — applications, CVs, interview notes and references | To assess candidates and make hiring decisions | Steps prior to entering a contract, and legitimate interests |
We do not knowingly collect personal data from anyone under 18, and we do not collect special category data in the ordinary course of trading. Data collected during employment and recruitment is covered by our separate staff and candidate privacy notice, available on request.
Where we get it from
Most of it comes directly from you: the account application, an order, an email, a telephone call or the portal. We also obtain data from Companies House, HMRC’s VAT checking service, credit reference agencies, and publicly available business sources when we verify or assess an account. Where you give us the details of your own customer for a ghost shipment, we receive that data from you, and you are responsible for having a lawful basis to pass it to us.
Who we share it with
We share personal data only where we need to, and only with:
- CAM Systems, who provide the stock, ordering and portal platform we run on
- Carriers and delivery partners, where a consignment does not go on our own fleet
- Tyre manufacturers, where a warranty claim is referred to them
- Credit reference and debt recovery agencies, for credit assessment and recovery of overdue accounts
- Payment providers and our bank, to take and reconcile payment
- Our accountants, auditors, insurers and legal advisers, where they need it to advise us
- IT, hosting, email and website suppliers, who process data on our instructions
- Public authorities, including HMRC and the Environment Agency, where the law requires it
We do not sell personal data, and we do not share it for anyone else’s marketing.
Where a supplier processes personal data on our behalf, they do so under a written contract that requires them to act only on our instructions and to keep the data secure.
Transfers outside the UK
We buy from manufacturers in India, Vietnam, Thailand and China, and we supply export customers. Where that involves transferring personal data — usually no more than the business contact details of the people handling a shipment — outside the United Kingdom, we do so only where the country has UK adequacy regulations in place, or under the International Data Transfer Agreement or the Addendum to the EU standard contractual clauses.
Our website is hosted in the United Kingdom. Where a supplier we use stores data outside the UK — for example a cloud email or software provider — we rely on a UK adequacy regulation or the safeguards described above, and we keep a record of the safeguard used for each supplier.
How long we keep it
| Record | Kept for |
|---|---|
| Accounting and tax records, including invoices | Six years from the end of the financial year they relate to, as required by company and tax law |
| Trade account records and contract documents | Six years after the account closes, matching the limitation period for a claim on a contract |
| Order, delivery and warranty records | Six years from the end of the relationship, in line with the limitation period |
| Credit assessment records | Six years from the end of the relationship |
| Unsuccessful account applications | Twelve months from the decision |
| Marketing contacts | Until you unsubscribe or object, or after 24 months with no engagement |
| Recruitment records for unsuccessful candidates | Six months from the close of the vacancy |
| Website analytics | Up to 26 months — see the cookie policy |
When a retention period ends we delete the data or anonymise it so that it can no longer identify anyone.
How we keep it secure
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or damage. Access is limited to the people who need it to do their job. Our systems are password-protected with access limited by role, our website is served over HTTPS and hosted in the UK, backups are taken regularly and held securely, and staff who handle customer data are briefed on this policy. If we become aware of a breach that is likely to put your rights at risk we will tell you and, where required, the ICO within 72 hours.
Marketing
We send trade updates by email to people at businesses that buy from us or have asked to hear from us. Every message carries an unsubscribe link, and you can also ask us to stop at any time by emailing sales@gbtyres.net. Unsubscribing from marketing does not stop the operational messages we have to send about your orders and your account.
Your rights
Under data protection law you have the right to:
- Be informed about how we use your data — that is what this policy is for
- Access the personal data we hold about you
- Rectification of data that is inaccurate or incomplete
- Erasure of data, where we no longer have a good reason to keep it
- Restrict processing while a dispute about the data is resolved
- Data portability, where the data was provided by you and is processed by automated means on the basis of consent or a contract
- Object to processing based on our legitimate interests, and to object to direct marketing at any time
- Withdraw consent at any time, where we rely on consent
- Not be subject to a solely automated decision with legal or similarly significant effects
To exercise any of these, email sales@gbtyres.net or write to us at the registered office. We will respond within one month. There is normally no charge. We may ask you to confirm your identity before we act on a request.
Cookies
The website uses cookies. Which ones, what they do and how to change your choice are set out in the cookie policy.
How to contact us
For anything about this policy or about your data:
The Managing Director (accountable for data protection)
G B Tyres (UK) Ltd, GB House, Black Lake, West Bromwich, B70 0FS
sales@gbtyres.net · +44 (0)121 520 5215
Complaining to the ICO
If you are unhappy with how we have handled your personal data, please tell us first so we have the chance to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, and you can do so without contacting us first.
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline 0303 123 1113 · ico.org.uk
Changes to this policy
We review this policy when our systems or practices change, and at least annually. The current version and its date are shown below.
Version 1.0 · Last reviewed: 5 September 2026 · Approved by: the Managing Director, G B Tyres (UK) Ltd.
Other legal documents
Our terms of sale, cookie policy, delivery and returns policy and modern slavery statement.