Privacy policy

Last updated: 17 April 2026

This policy explains how Data Solutionz Limited, trading as WholesaleGrid (“WholesaleGrid”, “we”, “us”), collects, uses, and protects personal data when you use our marketplace at wholesalegrid.co.uk. Data Solutionz Limited is a company registered in England and Wales. It applies to suppliers, retailers, and visitors to the site.

We are the data controller for the personal data described below. You can contact us at any time at hello@wholesalegrid.co.uk.

1. The personal data we collect

We collect the following categories of personal data:

Account and identity

  • Name, email address, password (stored hashed), phone number
  • Company name, trading address, VAT number, company registration details
  • Business logo and profile information you choose to publish

Marketplace activity

  • Products, pricing, and stock information listed by suppliers
  • Quote requests, offers, accepted orders, and order status updates
  • Messages exchanged between suppliers and retailers, and support tickets raised with us

AI assistant interactions

  • Natural-language search queries you submit on the marketplace
  • Conversations with the in-site chatbot

Technical and diagnostic

  • IP address, browser type, device information, and pages visited
  • Authentication session cookies required to keep you signed in
  • Error reports and performance data when something breaks on a page

We do not currently process payment card data. If and when payments are handled on the platform, this policy will be updated to describe the payment processor and the data involved.

2. How we use your data

Under UK GDPR, every use of personal data must rely on a lawful basis. The table below summarises what we do and why.

Provide and operate the marketplace

Lawful basis: Performance of a contract (UK GDPR Art. 6(1)(b))

Creating your account, listing products, processing quotes and orders, exchanging messages, and providing customer support.

Keep the platform secure

Lawful basis: Legitimate interests (UK GDPR Art. 6(1)(f))

Preventing fraud, abuse, and unauthorised access; diagnosing errors; maintaining reliability and performance.

Power AI search and chat features

Lawful basis: Legitimate interests (UK GDPR Art. 6(1)(f))

Processing your queries through our AI provider to return relevant products and assistant responses. Queries are not used to train external models.

Send transactional emails

Lawful basis: Performance of a contract (UK GDPR Art. 6(1)(b))

Sign-up confirmations, password resets, quote and order notifications, support ticket updates.

Send marketing and product updates

Lawful basis: Consent (UK GDPR Art. 6(1)(a))

Only if you have opted in. You can withdraw consent at any time using the unsubscribe link in any email.

Meet legal and accounting obligations

Lawful basis: Legal obligation (UK GDPR Art. 6(1)(c))

Retaining transaction and tax records for the periods required by UK law.

3. Who we share your data with

We do not sell your personal data. We share it with service providers (“processors”) who help us operate the marketplace. Each processor is bound by a data processing agreement that restricts what they can do with your data.

ProviderRoleRegion
SupabaseDatabase, authentication, and file storageEU / US
VercelWebsite hosting and content deliveryUS (global edge)
ResendTransactional and marketing email deliveryUS
SentryError monitoring and diagnosticsUS
AnthropicAI search and chatbot processing (Claude models)US

We may also disclose personal data where required by law, court order, or to protect our rights, property, or safety, or that of our users or others.

4. International data transfers

Some of our processors are based outside the UK. Where that is the case, transfers are protected by the UK International Data Transfer Agreement, the EU Standard Contractual Clauses with the UK addendum, or an equivalent safeguard recognised under UK data protection law.

5. Cookies

We use a small number of cookies and similar technologies:

  • Authentication cookies — required to keep you signed in. Without these, core functionality will not work.
  • Error reporting — small identifiers used by Sentry to correlate errors across a session. Used only if an error occurs.

We do not use advertising cookies, third-party analytics tracking pixels, or cross-site behavioural tracking.

6. How long we keep your data

We keep personal data only as long as we need it for the purposes above.

  • Account data: while your account is active, and for up to 12 months after closure for dispute handling.
  • Order and transaction records: six years, to meet UK accounting and tax requirements.
  • Messages and support tickets: up to three years after the last activity.
  • Error logs and diagnostic data: up to 90 days.
  • Marketing preferences: until you unsubscribe or withdraw consent.

7. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

Access

Request a copy of the personal data we hold about you.

Rectification

Ask us to correct data that is inaccurate or incomplete.

Erasure

Ask us to delete your data where we no longer need it or you withdraw consent (the 'right to be forgotten').

Restriction

Ask us to pause processing in certain circumstances.

Portability

Request your data in a structured, machine-readable format.

Objection

Object to processing based on our legitimate interests, including direct marketing.

Withdraw consent

Withdraw any consent you have given us, at any time.

To exercise any of these rights, email hello@wholesalegrid.co.uk. We will respond within one month.

If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint.

8. Security

We use industry-standard technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords, role-based access to production systems, and regular backups. No online service can be completely secure; if we become aware of a breach affecting your data, we will notify you and the ICO where required.

9. Children

WholesaleGrid is a business-to-business platform intended for use by adults acting on behalf of a business. We do not knowingly collect personal data from children under 18.

10. Changes to this policy

We may update this policy from time to time. When we make material changes we will notify registered users by email and update the “Last updated” date at the top of this page.

11. Contact us

For any questions about this policy, or to exercise your data protection rights, contact us at hello@wholesalegrid.co.uk.