Privacy Policy for East Rand Brands Ltd

Last updated: 15 October 2026

1. Introduction

East Rand Brands Ltd (“we,” “us,” or “our”) operates the website erbrands.co.uk (the “Site”). We are committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our Site or engage with our services. We provide practical business solutions across people, technology, training, administration, facilities, supplies, property, and operational support.

We are the “data controller” for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This means we are responsible for deciding how and why your personal data is processed.

2. Contact Information

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Company: East Rand Brands Ltd
Website: erbrands.co.uk
Email: er@erbrands.co.uk

3. What Personal Data We Collect

We may collect and process the following types of personal data:

Information you provide directly to us:

Name and job title
Contact information (email address, phone number, postal address)
Company or organisation name
Any information you provide when you contact us via our website, email, or phone
Information provided in the course of us delivering services to you

Information we collect automatically when you visit our Site:

Technical data including IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
Usage data including information about how you use our website and services
Cookie data (see Section 9 below)

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use your personal data for the following purposes:

Purpose	Lawful Basis
To respond to enquiries and provide information about our services	Legitimate interests (responding to business enquiries) or consent
To deliver services you have engaged us to provide	Performance of a contract
To manage our relationship with you, including notifying you of changes to our services	Performance of a contract or legitimate interests
To improve our website and services	Legitimate interests
To comply with legal and regulatory obligations	Compliance with legal obligations
To send marketing communications (where you have opted in)	Consent

Where we rely on legitimate interests as our lawful basis, we have conducted a balancing test to ensure your rights do not override our legitimate interests.

5. Disclosure of Your Personal Data

We may share your personal data with:

Service providers who process data on our behalf (such as IT service providers, website hosting providers, email service providers) under written contracts that require them to protect your data
Professional advisers including lawyers, bankers, auditors, and insurers where necessary
Regulatory authorities where required by law

We do not sell your personal data to third parties.

6. International Transfers

We do not routinely transfer personal data outside the UK. If we need to transfer data internationally in connection with the services we provide, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

7. Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

The retention period varies depending on the type of data and the purpose. If you would like specific information about our retention periods for particular data, please contact us.

8. Your Rights

Under the UK GDPR, you have the following rights:

Right to be informed about how we use your data (this Privacy Policy fulfils this right)
Right of access to the personal data we hold about you
Right to rectification of inaccurate or incomplete data
Right to erasure of your data in certain circumstances
Right to restrict processing in certain circumstances
Right to data portability in certain circumstances
Right to object to processing based on legitimate interests
Right to withdraw consent where we rely on consent (you can withdraw consent at any time)

To exercise any of these rights, please contact us using the details in Section 2.

9. Cookies

Our website uses cookies and similar technologies. Cookies are small text files placed on your device that help the website function and provide information to us.

The types of cookies we may use include:

Strictly necessary cookies: required for the website to function properly
Analytical/performance cookies: help us understand how visitors use our Site
Functionality cookies: remember your preferences

You can control cookies through your browser settings. For more detailed information about the specific cookies we use and how to manage them, please see our Cookie Policy.

10. Data Security

We have implemented appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

Encryption of data where appropriate
Role-based access controls
Secure systems and networks
Staff training on data protection

11. Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (ICO) within 72 hours where required, and inform you where the breach poses a high risk to you.

12. Complaints

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal data.

ICO Contact Details:

Website: www.ico.org.uk
Phone: 0303 123 1113

We would appreciate the opportunity to address your concerns directly before you approach the ICO.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We will notify you of any material changes where required.