Privacy policy

Last updated: 20 august 2026

2.1 Who is the controller

Expo Digital SCM UK Limited, is the data controller for personal data collected through this website.

Data protection contact: uksupport@expobazaar.com

PS. If personal data is shared between Expo Digital SCM UK Limited and Expo Digital SCM B.V. (Netherlands), we need an intra-group data sharing agreement and a lawful transfer mechanism. TBC

2.2 What we collect

Because we are a B2B platform, most data we hold is business contact data:

Category	Examples
Account data	Name, job title, business email, business phone
Business data	Company name, registration number, VAT number, trading address
Order data	Products ordered, order history, delivery address
Payment data	Processed by our payment provider; we do not store full card numbers
Technical data	IP address, browser type, device, pages visited
Marketing data	Your preferences for receiving marketing from us

2.3 Why we use it, and our lawful basis

Purpose	Lawful basis (UK GDPR Art. 6)
Setting up and managing your trade account	Contract
Verifying you are a genuine business	Legitimate interests (fraud prevention)
Processing and delivering orders	Contract
Taking payment	Contract
Customer support	Contract / legitimate interests
Sending B2B marketing	Legitimate interests, with an opt-out in every message
Website analytics and improvement	Legitimate interests
Fraud prevention and security	Legitimate interests / legal obligation
Accounting, tax and audit records	Legal obligation

TBC
On B2B marketing: under PECR, we may email business contacts at corporate subscribers about our own similar products without prior consent, provided we identify ourselves and offer an opt-out in every message. Sole traders and unincorporated partnerships are treated as individuals and require consent.

2.4 Who we share it with

Payment providers- to take payment securely
Shipping and logistics partners- to deliver your order
IT and hosting providers- including Shopify, which hosts this store
Professional advisers- accountants, auditors, lawyers
Group companies- including Expo Digital SCM B.V. TBC
Authorities- where we are legally required to disclose

We do not sell your personal data.

2.5 International transfers

Some of our providers and group companies are outside the UK. Where we transfer personal data internationally, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum. TBC the transfers from NL and IN

2.6 How long we keep it

Account data: for as long as your account is active, plus---years
Order and financial records: 6 years, to meet HMRC requirements
Marketing data: until you opt out
Technical data:- tbc

2.7 Your rights

Under UK data protection law you have the right to: access your data; have it corrected; have it erased; restrict how we use it; object to our use of it; port it to another provider; and withdraw consent where we rely on it.

To exercise any right, contact: We will respond within one month.

2.8 Complaints

If you are unhappy with how we have handled your data, please contact us first at uksupport@expobazaar.com so we can put it right.

You also have the right to complain to the Information Commissioner's Office (ICO): Website: ico.org.uk · Helpline: 0303 123 1113

ACTION REQUIRED BY 19 JUNE 2026: The Data (Use and Access) Act 2025 requires organisations to have a formal, documented data protection complaints procedure not just an email address. You need a written process covering who receives complaints, how they are logged, the acknowledgement clock, and who decides the response. This is a live compliance obligation, and it needs to exist as an internal document as well as being described here.