Privacy Notice
Last updated: 6th October 2026
GVAV Limited respects your privacy. This notice explains what personal information we collect, why we use it, who we may share it with, how long we keep it and the rights available to you.
It applies when you visit our website, contact us, ask for information, buy goods or services from us, supply goods or services to us, or otherwise deal with GVAV. Our website is not intended for children, and we do not knowingly collect children’s personal information.
Who we are and how to contact us
GVAV Limited is the controller responsible for the personal information covered by this notice. In this notice, “GVAV”, “we”, “us” and “our” mean GVAV Limited.
Legal entity: GVAV Limited
Email: GDPR@GVAV.com
Post: GDPR, GVAV Ltd, 676 River Gardens, North Feltham Trading Estate, London, TW14 0RB
If you have a question, want to exercise a privacy right or wish to make a data protection complaint, please contact us using these details. We would welcome the opportunity to address your concern directly. You may also contact the Information Commissioner’s Office at www.ico.org.uk.
The information we may collect
The information we collect depends on how you deal with us. It may include:
- Identity information: your name, title, username or another identifier.
- Contact information: business billing or delivery address, email address and telephone number.
- Financial information: business bank account or payment-card details where needed to take or make payment.
- Transaction information: details of payments, orders, products and services.
- Technical information: IP address, login information, browser and device details, time-zone and location settings, operating system and platform.
- Profile information: account details, orders, interests, preferences, feedback and survey responses.
- Usage information: how you use our website, products and services.
- Marketing and communication preferences: whether and how you want to receive marketing from us or relevant third parties.
We may also use information in an aggregated or anonymised form that does not identify you. If we combine it with other information so that you can be identified, we treat the combined information as personal information.
We do not intend to collect special category information, such as information about health, ethnicity, religious beliefs or biometric identifiers, or information about criminal convictions. Please do not send this type of information unless it is genuinely necessary and we have asked you to provide it.
How we collect information
We may collect personal information:
- directly from you, for example when you complete a form, contact us, request a quotation, place an order, create an account, subscribe to communications, provide feedback or take part in a survey;
- automatically when you use our website, through essential technologies and, where permitted, analytics or similar technologies;
- from organisations involved in providing products or services, including payment, delivery, IT and professional-service providers;
- from publicly available sources, such as Companies House; and
- from customers, suppliers or other business contacts where they give us your details for a legitimate business purpose.
Why we use your information and our lawful bases
We only use personal information where the law allows us to. The table below summarises the main ways we use it.
| What we do | Information commonly used | Lawful basis |
|---|---|---|
| Respond to enquiries, prepare quotations and take steps before a contract | Identity and contact | Steps before a contract; legitimate interests in responding to business enquiries |
| Set up and manage a customer or supplier relationship | Identity, contact and profile | Contract; legitimate interests in managing business relationships |
| Process and deliver orders, services, payments and refunds | Identity, contact, financial and transaction | Contract; legal obligation; legitimate interests in recovering debts |
| Provide support, warranties and service communications | Identity, contact, transaction and profile | Contract; legitimate interests in customer service and record keeping |
| Operate, secure and improve our website and IT services | Identity, contact, technical and usage | Legitimate interests in running secure and effective systems; legal obligation where applicable |
| Analyse website and service use | Technical and usage | Consent where required for non-essential cookies; otherwise legitimate interests where permitted |
| Send relevant business marketing and measure its effectiveness | Identity, contact, profile, usage and marketing preferences | Consent where required; otherwise legitimate interests where permitted |
| Meet legal, regulatory, tax, accounting and reporting duties | Identity, contact, financial and transaction | Legal obligation |
| Establish, exercise or defend legal claims and manage business change | Relevant information depending on the matter | Legitimate interests; legal obligation |
Where we rely on legitimate interests, we consider the purpose, necessity and possible impact on you. We will not use that basis where your rights and interests override ours. You can ask us for more information about a particular assessment.
If we need information to enter into or perform a contract, or to comply with the law, and you do not provide it, we may be unable to provide the relevant product or service. We will explain this when the information is requested.
Cookies & website analytics
Our website uses cookies or similar technologies. Some are necessary for the site to work. We will ask for your choice before using non-essential cookies where consent is required. You can review or change your choices using the cookie-controls provided within our website.
Marketing
We may send relevant information about GVAV products or services where you have asked to receive it or where the law otherwise permits us to do so. You can stop marketing at any time by using an unsubscribe link or contacting GDPR@GVAV.com. Opting out of marketing will not stop service messages relating to an order, contract, warranty or other transaction.
We will obtain the required permission before sharing your personal information with another organisation for that organisation’s own marketing.
Who we may share information with
Where necessary for the purposes described above, we may share information with:
- IT, hosting, website, analytics, payment, logistics and delivery providers;
- professional advisers such as lawyers, auditors, insurers, bankers and accountants;
- HM Revenue & Customs, regulators, law-enforcement bodies and other public authorities where required;
- customers, suppliers and business partners where needed to deliver a product, service or project
We require service providers acting on our behalf to protect personal information and use it only for agreed purposes and in accordance with our instructions and applicable law.
International transfers
Some suppliers or systems may process personal information outside the United Kingdom. Where this happens, we use an approved legal mechanism and appropriate safeguards, such as UK adequacy regulations or approved contractual protections. You may contact us for more information about the safeguard used for a particular transfer.
Keeping information secure
We use appropriate organisational and technical measures designed to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure. Access is limited to people and service providers who need the information for legitimate business purposes and who are subject to confidentiality and security requirements.
We have procedures for dealing with suspected personal data breaches and will notify affected people and regulators where the law requires us to do so.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, regulatory, tax, accounting and reporting requirements. We may retain information for longer where a complaint, dispute or legal claim exists or is reasonably anticipated.
When setting retention periods, we consider the nature, amount and sensitivity of the information, the risk of harm, why it is needed, whether the purpose can be achieved another way, and applicable legal requirements. Basic customer transaction and accounting records are generally retained for six years after the relationship ends, where required for tax and accounting purposes. We may retain anonymised information indefinitely because it no longer identifies an individual.
Your privacy rights
Depending on the circumstances, you may have the right to:
- Access: ask for a copy of personal information we hold about you.
- Correction: ask us to correct incomplete or inaccurate information.
- Erasure: ask us to delete information where there is no lawful reason to keep using it.
- Restriction: ask us to pause or limit use of your information in certain circumstances.
- Objection: object to processing based on legitimate interests and always object to direct marketing.
- Portability: receive certain information you provided to us in a structured, commonly used, machine-readable format, or ask us to send it to another controller, where the right applies.
- Withdraw consent: withdraw consent at any time where consent is our lawful basis. This does not affect earlier lawful processing.
To exercise a right, email GDPR@GVAV.com. You will not usually have to pay a fee. We may ask for information to confirm your identity and clarify your request. We aim to respond within one month. If a request is complex or you make several requests, the law may allow more time; if so, we will explain this and keep you updated.
Complaints
If you are unhappy with how we have used your personal information, please contact us at GDPR@GVAV.com so we can investigate and respond. You may also raise your concern with the Information Commissioner’s Office through www.ico.org.uk.
Changes to this notice
We may update this notice to reflect changes in our activities, technology or legal requirements. The latest version will be published on this page with its updated date. Where a change materially affects how we use personal information, we will take reasonable steps to bring it to the attention of affected people before the new use begins.
Third-party websites
Our website may link to websites, plug-ins or applications operated by other organisations. We do not control their privacy practices. Please read their privacy information before providing personal information to them.
This notice has been prepared in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018