Privacy Policy – Door Access Supplies Ltd

Updated 9 October 2026

We respect the privacy of trade and individual customers. This notice explains the personal information we use when you browse, order, request quotes, manage subscriptions or use Projects and our online tools. This is information about data processing, not a request for blanket consent.

1. Who is responsible

Door Access Supplies Ltd, company number 17208102, 124 City Road, London, EC1V 2NX, United Kingdom. Contact for privacy enquiries and requests: sales@dooraccesssupplies.com.

2. Information we collect

  • Contact and trade-account details: name, business name, role, postal and delivery addresses, email, phone number and relevant VAT/account information.
  • Orders and enquiries: items selected or purchased, quotes, invoices, deliveries, returns, communications and service history.
  • Accounts, Projects and online tools: login identifiers, saved product selections, named projects/assets, site postcodes, project notes and related quotation or order information entered by users.
  • Van Stock subscriptions: items, quantities, delivery preferences, renewal instructions and payment-related transaction information.
  • Website and marketing data: device and browser information, IP address, pages viewed, cookie preferences, advertising interactions and communications preferences, where permitted.
  • Payment information: payments are handled through payment providers; we do not need to hold full card numbers ourselves.

3. Purposes and lawful bases

The lawful basis depends on the particular activity. Our principal uses are:

Purpose Usual lawful basis
Accept orders, supply goods, manage returns and respond to purchase enquiries Contract (or steps requested before a contract)
Maintain trade accounts, Projects, quotes and subscriptions Contract, or legitimate interests where appropriate
Accounting, tax records and legal compliance Legal obligation
Protect systems, detect misuse, prevent fraud and manage disputes Legitimate interests, or legal obligation where applicable
Provide customer service and improve store operations Contract or legitimate interests
Send direct marketing where permitted Consent when required; otherwise legitimate interests for eligible business-to-business communications, with the right to object
Use non-exempt cookies, targeted advertising and tracking Consent where legally required

Where we rely on legitimate interests, these include providing reliable trade services, protecting customers and our business, responding to enquiries and promoting relevant products in a lawful, proportionate way. You can object to direct marketing at any time.

4. Who receives information

We share only information reasonably needed with Shopify and relevant app or hosting providers, payment providers, delivery couriers, suppliers dispatching orders directly, professional advisers, IT/support providers, and analytics or advertising partners where applicable and lawfully permitted. Project and subscription tools may require hosted data services to retain the information you choose to save. We do not sell customer contact lists.

5. International data transfers

Some service providers may process personal information outside the UK. Where restricted transfers take place, we use a lawful transfer mechanism, such as UK adequacy regulations or appropriate contractual safeguards, as applicable.

6. How long information is kept

We keep information only as long as necessary for its purpose. Financial and VAT records are generally kept for at least six years to meet UK accounting and tax requirements. Orders, disputes and support records may be kept for applicable limitation periods or until enquiries are resolved. Saved accounts, Projects and subscription records are kept while the service is used and for a reasonable period afterwards, subject to legal and operational requirements. Non-essential marketing information is retained only while it remains appropriate and is removed or suppressed following valid requests. Contact us for more detail about a specific record.

7. Security and account access

We use appropriate administrative and technical controls and work with service providers to protect personal information. Account holders should keep login details secure and avoid entering unnecessary sensitive personal information in free-text project notes. No internet service is entirely risk-free.

8. Your rights

Subject to applicable law and exceptions, you may request access to or correction, deletion, restriction or transfer of personal data, object to certain processing, and withdraw consent at any time where consent is the basis used. Withdrawal does not invalidate earlier lawful processing. Contact us using the email above. You may also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies, marketing and external websites

See our Cookie Policy for information about consent and browser controls. You can unsubscribe from marketing emails using their unsubscribe link or by contacting us. Third-party sites have their own privacy notices. Shopify's own processing is also described in its consumer privacy information.

10. Changes

We may revise this policy to reflect changes to our services, service providers or legal obligations. Material changes will be communicated where legally required.