Privacy & Cookie Policy


This Privacy Notice (“Notice”) is adopted by William Gregor Limited and all subsidiary companies and other entities which directly or indirectly are controlled by William Gregor Limited and its Affiliates being collectively referred to as “William Gregor Limited”, “we”, “us”

  • You can contact us using the information in the “contact us” section of the website:
  • A full list of PG Metal Shop entities who may process your information is also available there. 
  • We may send you information about our products and services. To learn more about when and how we do this and how you can change your contact or marketing preferences at any time. 
  • We use cookies and tracking technology on our Site. To learn more about how we use these technologies and how you can control your setting. 
  • We may share your personal information with other third parties. To learn more about who we share your information with and how we ensure your personal information is protected.

This Notice provides you with information about:

  • Who we collect information from and the information we collect
  • How we use the information we collect
  • How we use cookies and other tracking technologies
  • Who we disclose your information to
  • International transfers
  • How we protect and store your information
  • Retention of your personal information
  • How this notice applies to links and third-party websites
  • Your rights and how to opt out or request changes to your personal information
  • How we notify you of changes to this privacy policy
  • How you can contact us


Who we collect information from

PG Metal Shop collects information from the following data subjects:

  • Site users;
  • individual prospective customers & customers;
  • representatives of corporate prospective customers & customers;
  • PG Metal Shop suppliers and business partners and their personnel;


The Site is not intended for or directed at children under the age of 16 and we will never knowingly collect Personal Information from individuals under this age.

We collect Personal and Aggregate Information

We collect two types of information from you: “Personal Information” (anything which identifies you as an individual, either on its own or by reference to other information) and “Aggregate Information” (non-personally identifiable and anonymous data).

On our Site, Personal Information (such as your name, address, telephone number, or email address) is collected when you voluntarily submit it through a Site form, such as during a request for product information. Other information that may also constitute Personal Information (such as your browser type, operating system, IP address, domain name, number of times you visited the Site, dates you visited the Site, and the amount of time you spent viewing the Site) may be collected via cookies and other tracking technologies. Aggregate Information (such as how many times visitors log onto this Site) may also be collected.

We will indicate to you where the provision of certain Personal Information is required in order for us to provide you or the organisation you represent with our services or certain features of the Site. If you choose not to provide such Personal Information, we may not be able to provide you with our services or access to certain aspects of the Site.


The purposes for which we use your Personal Information

As a data controller, we will only use your Personal Information if we have a legal basis for doing so. The table at Annex 1 sets out how we use the Personal Information we collect about you and the legal basis which we rely on to process the Personal Information. 

More generally, we process Personal Information:

  •  to answer your specific inquiry or respond to your complaints. For example, if you contact us with a technical question, we will use your contact information and technical information to resolve the issue;
  • to administer and enhance the Site;
  • for our general business purposes, such as the administration of your customer account, to invite you to events, to interact with you in the course of our business relationship, deal with your queries or for marketing or sales purposes;
  • in connection with a proposed or actual sale, merger or transfer of all or a portion of a business or division.


We use cookies and similar technologies on our Site for various purposes, including improving your experience of the Site. For more information about cookies and why we use these, please refer to our Cookies Policy.


We work with third parties to help manage our business, deliver services and as otherwise required to achieve the purposes set out in Annex 1. We and our service providers (as defined below) disclose and share your Personal Information:

  • among PG Metal Shop and our Affiliates;
  • for credit card payments we employ a third party to process these payments on our behalf. This third party will only have access to the Personal Information which you provide directly to them when you make a credit card payment. They are required under their contract with us to process this Personal Information securely and in accordance with all relevant Data Protection laws. We will not collect or store any credit card details; this third party being the sole data controller of that data. When you pay for any goods, you will be taken to a link to this third party’s website in order to conclude the sale;
  • to a third party in connection with a proposed or actual sale, merger, or transfer of all or a portion of a business or division; and
  • to other persons (such as law enforcement or regulators) where we are under a legal obligation to disclose your Personal Information, and only as permitted or required by applicable law or regulation. Such disclosure could be made to courts, to respond to lawful requests by public authorities, regulators and law enforcement agencies in the United Kingdom, European Union and around the world or to protect and defend our rights or property.

Any access to such information will be limited to the purpose for which such information was provided to us or our Service Providers, as explained in the “How we use the information we collect” section above.


We take the security of the information we collect seriously. We have implemented and we maintain technical and organisational security measures, policies and procedures intended to reduce the risk of accidental destruction or loss, or the unauthorized disclosure or access to such information appropriate to the nature of the data concerned. Some of the steps we take are: placing confidentiality requirements on our staff members and Service Providers; destroying or permanently anonymising Personal Information if it is no longer needed for the purposes for which it was collected.

Personal Information collected via this Site is stored on servers in the UK.


We will retain your Personal Information for as long as is reasonably necessary for the purposes for which it was collected, as explained in this Notice. Customer data will be retained for a period of 7 years from the date of last transaction with us, after which it will be deleted, anonymised or pseudonymised if required. In some circumstances we may retain your Personal Information for longer periods of time, for instance where we are required to do so in accordance with legal, regulatory, tax or accounting requirements.

In specific circumstances we may retain your Personal Information for longer periods of time so that we have an accurate record of your dealings with us in the event of any complaints or challenges, or if we reasonably believe there is a prospect of litigation relating to your Personal Information or dealings.

Where we have obtained your Personal Information in order to provide you with marketing information for our products and services, your Personal Information will be stored by us only as long as you do not change your mind to receive such materials from PG Metal Shop, in order to avoid future contact with you for marketing purposes. We maintain a data retention notice which we apply to records in our care. Where your Personal Information is no longer required we will ensure it is securely deleted.


Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you have certain rights in relation to your Personal Information:

  • To access Personal Information: You have the right to obtain access to the Personal Information we hold about you.
  • To rectify Personal Information: You have the right to obtain rectification of any inaccurate or incomplete Personal Information we hold about you without undue delay.
  • To erase Personal Information:  You have the right, in some circumstances, to require us to erase your Personal Information without undue delay if the continued processing of that Personal Information is not justified.
  • To withdraw your consent: You have the right to withdraw your consent at any time to any processing carried out on the basis of your consent.
  • To restrict the processing of your Personal Information: You have the right, in some circumstances, to require us to limit the purposes for which we process your Personal Information if the continued processing of the Personal Information in this way is not justified, such as where the accuracy of the Personal Information is contested by you.
  • To transfer your Personal Information: You have the right, in certain circumstances, to receive a copy of the Personal Information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your Personal Information to another person.
  • To object to the processing of Personal Information: You have a right to object to any processing based on our legitimate interests in certain circumstances.
  • Right to object to how we use your Personal Information for direct marketing purposes: You can object to us processing your Personal Information for direct marketing purposes at any time by following the instructions in the “Direct Marketing” section above.

We may ask you for additional information to confirm your identity and for security purposes, before disclosing the Personal Information requested to you. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive.

We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.


Privacy laws and practice are constantly developing and we aim to meet high standards. Our policies and procedures are, therefore, under continual review. We may, from time to time, update our security and privacy policies. If we want to make any significant changes in how we will use your personal data we will contact you directly and, if required, seek your consent.

Notwithstanding the above, we recommend that you check this Notice every time you visit our Site or provide us with your Personal Information offline as we may update this Notice from time to time, by posting the amended Notice on this Site. Any changes will be effective when posted and your continued use of the Site or not objecting to the use of your Personal Information will indicate your acknowledgement of any changes.

Questions regarding this Notice

If you have questions concerning this Notice, please contact via email or by writing to the Global Compliance Manager,

PG Metal Shop
Division of William Gregor Ltd
10-16 Tiller Road
London E14 8PX