1. Who we are
CHANDLERS 1935 LTD is the controller of personal information handled through this website. We are registered in England and Wales under company number 17336166, with our registered office at 53C Unimix House, Abbey Road, London, England, NW10 7TR.
This policy explains what we collect, why we use it, who we share it with, how long we keep it and the rights available under UK data protection law.
2. Information we collect
Depending on how you use the website, we may collect:
- your name, email address, telephone number and postcode;
- the content of enquiries and subsequent correspondence;
- the machinery or vehicle you enquire about or reserve;
- reservation details, deposit amount, payment status and Stripe transaction references;
- technical and security information, including a protected hash derived from your IP address, server logs, browser information and strictly necessary session data;
- records showing when you acknowledged this policy and accepted our reservation terms; and
- any information you choose to provide when communicating with our team.
Payment card details are entered on Stripe’s hosted checkout service. CHANDLERS 1935 LTD does not receive or store your full card number or card security code.
3. How we receive information
We receive information directly from you when you submit an enquiry, start a reservation, contact us or interact with the website. We also receive payment status and transaction identifiers from Stripe, and limited technical information automatically from our hosting and security systems.
4. Why we use information and our lawful bases
We use personal information:
- to respond to enquiries and take steps you request before entering into a contract - contract and legitimate interests;
- to create, administer and confirm machinery reservations and payments - contract;
- to prevent duplicate reservations, fraud, spam and misuse, and to secure and improve the website - legitimate interests;
- to maintain transaction, tax, accounting and legal records - legal obligation and legitimate interests;
- to establish, exercise or defend legal claims - legitimate interests; and
- to send marketing only where we have a lawful basis and provide any opt-out required by law.
Our legitimate interests include operating an effective machinery sales business, answering prospective customers, protecting stock and payments, maintaining website security and keeping proportionate business records. We balance those interests against your rights and reasonable expectations.
We do not use personal information collected through this website for solely automated decisions that produce legal or similarly significant effects.
5. Who we share information with
We share information only where necessary with:
- authorised CHANDLERS 1935 LTD staff and contractors;
- Stripe and its payment partners for checkout, payment, fraud prevention, refunds and dispute handling;
- our website hosting, database, backup, email and IT security providers;
- professional advisers, insurers, auditors and accountants;
- delivery, finance or manufacturer partners where you ask us to involve them or it is necessary for a transaction; and
- regulators, courts, law enforcement or other authorities where required by law.
We do not sell personal information.
6. Stripe payments
Stripe processes payment and device information under its own privacy terms as well as acting as a service provider for parts of the transaction. When you continue to Stripe Checkout, you leave our website and Stripe may set cookies or use fraud-prevention technologies necessary to provide its service. Please review Stripe’s privacy information on its website.
7. International transfers
Some service providers may process information outside the United Kingdom. Where UK data protection law requires safeguards, we expect the relevant provider to use an adequacy regulation, approved contractual protections or another lawful transfer mechanism. You may contact us for more information about safeguards relevant to your information.
8. Retention
Product enquiries are normally retained for up to 24 months, after which their personal content can be anonymised, unless the enquiry develops into a transaction or a longer period is required for legal reasons.
Reservation, payment, refund and completed-sale records are generally retained for up to six years after the relevant transaction or relationship ends, where needed for accounting, tax, contractual or legal purposes. Security logs and failed or abandoned checkout records are kept only for a proportionate period. We may retain information longer where a dispute, investigation or legal hold applies.
9. Security
We use access controls, encrypted HTTPS connections, protected credentials, role-based administration, backups, audit logging and other proportionate technical and organisational safeguards. No online service can guarantee absolute security, but we review and improve our controls as the website develops.
10. Cookies and similar technologies
The website currently uses only technologies needed to provide requested features and protect the service, including:
- a secure session cookie used for forms, administrator authentication and website security; and
- anti-forgery or security tokens used to protect submissions.
These are strictly necessary and do not require consent under the usual PECR exemption, although we explain them here for transparency. A session normally expires after a period of inactivity.
We do not currently use advertising or non-essential analytics cookies on this website. If that changes, we will update this policy and provide an appropriate consent control before setting non-essential cookies. Stripe may use its own necessary cookies when you visit its hosted checkout.
11. Your rights
Subject to legal conditions and exemptions, you may ask us to:
- provide access to your personal information;
- correct inaccurate or incomplete information;
- erase information;
- restrict how information is used;
- provide portable information where the right applies; or
- stop processing based on legitimate interests or stop direct marketing.
You may also withdraw consent where consent is the lawful basis. Withdrawing consent does not affect earlier lawful processing. We may need to verify your identity before acting on a request.
12. Complaints
Please contact us first so we can investigate any concern. You also have the right to complain to the Information Commissioner’s Office (ICO). Current contact and complaint information is available at ico.org.uk.
13. Changes and contact
We may update this policy when our services, providers or legal obligations change. The latest version will always be published on this page. To exercise a right or ask a privacy question, use the contact details shown on this page.
Last updated: 29 July 2026.