Our contact details

Name:  id8 retail Limited

Address: The Courtyard, High Street, Ascot, Berkshire, United Kingdom, SL5 7HP

E-mail: contact@id8retail.com

If you have any questions about this notice or about how we handle your personal information, please contact us using the details above.

The personal information we collect and why

1. Website visitors and business enquiries

When you contact us through our website (for example, via our new business contact form) or by email, we collect the information you provide, which typically includes your name, job title, employer, email address, telephone number, and the content of your enquiry.

We use this to respond to your enquiry, to provide you with information about our services where you have asked for it or where you would reasonably expect to hear from us, and to keep a record of our correspondence.

Lawful basis: our legitimate interest in responding to enquiries and developing our business, and, where relevant, taking steps at your request before entering into a contract.

2. Marketing and service updates

Where you have asked to hear from us, or where you are an existing client or a business contact who would reasonably expect relevant updates, we may send you occasional information about our services, insights, and events.

Lawful basis: your consent where required, or otherwise our legitimate interest in keeping our clients and contacts informed. You can ask us to stop sending marketing communications at any time using the contact details above or the unsubscribe link in any message.

3. Clients, prospective clients, and their personnel

When we pursue, scope, and deliver engagements, we hold personal information about the individuals we deal with at client and prospective client organisations. This typically includes names, job titles, work email addresses and telephone numbers, and records of our dealings with them.

We use this to manage opportunities and proposals, to communicate during an engagement, to deliver our services, and to manage our client relationships and contractual and financial records.

Lawful basis: our legitimate interest in managing and delivering our business relationships, and the performance of our contract with the client. Where we hold information for financial and record-keeping purposes, we also rely on our legal obligations.

4. Personal information we receive from clients and other third parties

In the course of our work, and during competitive tender, RFI, and RFP processes, we sometimes receive personal information about individuals from our clients, prospective clients, and other organisations, rather than from those individuals directly. This may include, for example, the names, job titles, and work contact details of an organisation's personnel provided to us in organisational charts, tender and procurement materials, project documentation, or correspondence.

We use this information to understand an organisation's structure and capability, to prepare and submit proposals, and to plan and deliver our engagements.

Lawful basis: our legitimate interest in responding to opportunities, preparing proposals, and delivering our services, balanced against the limited, business-context nature of the information involved.

Where we receive this information from a third party rather than from the individual concerned, we generally have no direct relationship with, or means of contacting, that individual. In these circumstances we rely on the provisions of Article 14 UK GDPR that apply where providing information directly to the individual would involve disproportionate effort, and we rely on the organisation that provided the information to have informed its own personnel of any sharing. Where the information is provided solely to support a tender or procurement process, we delete it once that process has concluded in accordance with our Data Retention Policies.

When we act on a client's instructions

On many of our engagements we process personal information solely on our client's documented instructions and on their behalf, rather than for our own purposes. In these cases:

• our client is the data controller and remains responsible for informing the relevant individuals about how their personal information is used, and for establishing the lawful basis for that use;

• we process the information only as set out in our contract with the client, which includes the data protection terms required by Article 28 UK GDPR; and

• we apply appropriate technical and organisational measures to keep the information secure.

If you are an individual whose information we process on behalf of one of our clients, and you wish to exercise your data protection rights, please contact that organisation in the first instance. We will support them in responding to your request.

Where we get personal information from

We collect personal information:

• directly from you, when you contact us, use our website, or deal with us during an engagement;

• from our clients and prospective clients, and from other organisations, including during tender and procurement processes; and

• from publicly available sources, such as company websites and professional networking sites, where we research organisations and contacts in the ordinary course of business development.               

How long we keep your personal information

We keep personal information only for as long as we need it for the purposes described in this notice, and to meet our legal, contractual, and record-keeping obligations. In particular:

• enquiry and marketing contact information is kept for as long as you remain an active contact and for a reasonable period afterwards, unless you ask us to delete it sooner;

• information provided to us solely for a tender or procurement process is deleted once that process has concluded and we are no longer involved;

• client engagement and contractual records are kept for the duration of the relationship and for a period afterwards in line with legal and professional requirements.

When we no longer need personal information, we securely delete or anonymise it.

Sharing information outside the UK

Where necessary, we may transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place. Please contact us for more information.

Your data protection rights

Under data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal data.

• Your right to rectification - You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

• Your right to erasure - You have the right to ask us to erase your personal data in certain circumstances.

• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal data in certain circumstances.

• Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.

• Your right to data portability - You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.

• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent.

You don’t usually need to pay a fee to exercise your rights. If you make a request, we have one calendar month to respond to you.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Cookie Policy

Our website, uses cookies to enhance your browsing experience, provide personalised features, and analyse our traffic. This Cookie Policy explains what cookies are, how we use them, and how you can manage them.

What are Cookies? Cookies are small text files stored on your device (computer, tablet, smartphone) when you visit websites. They are widely used to make websites work more efficiently, as well as to provide information to the site owners.

How we use Cookies: We use the following types of cookies:

• Essential Cookies: Ensure the website functions properly. These cookies are necessary for you to browse our website and use its features.

• Performance Cookies: Analyse how visitors interact with our website, which helps us improve our website's functionality and your browsing experience.

• Functional Cookies: Remember your preferences and various settings. These enhance functionality and personalisation, such as remembering your language preference.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last revised. Where changes are significant, we will take reasonable steps to bring them to your attention.

Last updated

July 2026.