Skip to main content
Nationwide DepotsNationwide Depots
Free Delivery*Free Delivery*
Free CuttingFree Cutting
Same Day CollectionSame Day Collection
Please enter your postcode to check available services

Privacy Policy

By reviewing this privacy statement, you will gain an understanding of how Barclay & Mathieson collects and processes your personal data as part of our use of this website, including any information you may provide through this website, such as when creating an account, signing up for our email list, purchasing our products, participating in our contests, or writing a review.

Contact details

Data Protection Officer
Barclay & Mathieson
BM Steel,
180 Hardgate Road, 
Shieldhall, 
Glasgow, 
G51 4TB

gdpr@bmsteel.co.uk

Our policy on privacy is constantly reviewed as part of our commitment to customer privacy. This privacy policy was last updated in February 2023.

The type of personal information we collect 

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We currently collect and process the following information:

  • Identity data - including first name, last name, title.
  • Contact data - including billing address, delivery address, email address and telephone number.
  • Transaction data - including details of products and services you have purchased from us.
  • Technical data - which includes the Internet protocol (IP) address of your computer, your login information, your browser type and version, your time zone setting, your location, the type and version of browser plug-ins, the operating systems and platforms on the devices you access this website, the number of times you use the website, and other performance information. Data is collected through the use of cookies, server logs, and other similar technologies.
  • Profile data - which includes the username and password you use for your profile, your interests, preferences, your feedback, and responses to surveys.
  • Usage data - which includes information about your visit to our website, including your Uniform Resource Locator (URL), clickstream to, through and from our website (including the date and time of your visit), products you viewed or searched for, page response times, length of visits to certain pages, interactions with the page (such as scrolling, clicking, and mouse-overs), and how you browsed away from the page.
  • Marketing - which includes the preferences you have for receiving marketing materials from us.

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

  • Register you as a new customer
  • Provide products and services, to process and deliver your orders
  • Manage our relationship with you to notify you of changes to our terms and policies
  • Take part in competitions, prize draws
  • Complete surveys

We use the information that you have given us in order to:

  • answer your questions and/or provide you with requested information;
  • provide customer support;
  • deliver goods to you via a third party carrier;
  • provide relevant website content and advertisements to you and measure the effectiveness of the advertising that we serve;
  • send third party service review request;
  •  provide administration, data analysis, testing, system maintenance, support, reporting, and hosting services to our company (including troubleshooting, data analysis, testing, and reporting);
  • improve our website, products/services, marketing customer relationships, research surveys, and customer experiences through use of cookies and data analytics; and
  • identify and prevent fraud.

Who might we share your personal data with

It may be necessary to share Contact Data with our delivery carriers so that your package can be delivered to you; it may also be necessary to share your personal information with Trustpilot so that we can collect feedback from our customers regarding our service.

We may need to share your data with other relevant third parties for example professional advisers, providers of banking services, service providers who provide IT and system administration services, auditors, and any third parties you request us to share the data with.

Where we share your personal data with our service providers, relevant personal data would be provided to and processed by the provider of such services, in accordance with the terms of our contract with them and only to the extent appropriate for the performance of that contract.

The legal basis for processing your personal data

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

  • Consent: where you have given clear consent for us to process your personal data for a specific purpose.
  • Contract: where the processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract. We rely on this lawful basis to:
    • register you as a new customer
    • process and deliver your order including to manage payments, fees and charges and to collect and recover money owed to us.
  • Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
  • Vital interests: the processing is necessary to protect someone’s life.
  • Legitimate interests: the processing is necessary for our legitimate interests. We rely on this lawful basis to:
    • process and deliver your order including to manage payments, fees and charges and to collect and recover money owed to us - our legitimate interest is to recover such debts due to us;
    • manage our relationship with you, for example by notifying you about changes to our terms or privacy policy or asking you to leave a review or take a survey or a third party service review - our legitimate interest is to keep our records updated and to study how customers use our products/services;
    • enable you to partake in a prize draw, competition or complete a survey - our legitimate interest is to study how customers use our products/services, to develop them and grow our business;
    • administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, prevention of fraud and hosting of data) - our legitimate interest is to run our business, to provide administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise;
    • deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you - our legitimate interest is to study how customers use our products, to develop them, to grow our business and to inform our marketing strategy;
    • use data analytics to improve our website, products/services, marketing, customer relationships and experiences - our legitimate interest is to define types of customers for our products, to keep our website updated and relevant, to develop our business and to inform our marketing strategy; and
    • make suggestions and recommendations to you about goods or services that may be of interest to you - our legitimate interest is to develop our products and grow our business

Cookies 

Our website may use cookies to collect information from visitors, which may include personal information. Cookies are text files that are placed on your computer as soon as you visit our website. A cookie is a text file that is stored on your computer. Depending on your browser, you may be able to decide whether or not you want to accept cookies, and if you choose to accept cookies, you may be able to choose what level of acceptance you would like to allow. Check out our cookie page to learn more about how we use cookies.

 

Marketing

Whenever you give us your consent or if you have previously purchased from us, we may use your information to contact you about the products that you have purchased, to inform you of goods and services we think you may be interested in, and to let you know about our offers that we may be offering. You may receive our marketing communications via email, post, or any other method that we choose. If you do not wish to receive these communications at any time, please feel free to contact us at gdpr@bmsteel.co.uk.

Additionally, you will have the opportunity to opt out of receiving these marketing communications both at the time that you provide us with your contact information and at any time thereafter by clicking on the relevant link provided in an email or by contacting us at gdpr@bmsteel.co.uk at any time.

In the event that you request that we do not contact you for marketing purposes in the future, we will not contact you for this purpose. However, if your information is necessary to maintain the information for other non-marketing purposes, such as complying with our legal obligations, we will not necessarily remove it from our database(s). Upon opting out of receiving marketing communications from us, it may take a few days for our records to be updated, during which time you may continue to receive marketing communications. As well, your withdrawal of consent does not have any impact on the lawfulness of processing based on your consent prior to the withdrawal.

A web beacon may also be utilized by us in marketing emails sent to customers who have opted into our database. We will record whether you open or click on our email if your email is configured to download images if you receive our HTML formatted email. In order to understand the effectiveness of our emails, we may aggregate this information. Also, we may use the information to publish more relevant content or to unsubscribe recipients who have not opened our emails for a specified period of time.

Transfer of your data to other countries

In the course of carrying out the activities referred to above we may transfer your data to other countries, which may not have the same legal protections for your data as the UK, for example where this is necessary to fulfil an international order or to transfer the data within our business.

Where data is being transferred outside of the UK, we will take steps to ensure that your data is adequately protected in accordance with UK legal requirements and any other applicable laws.

How we store your personal information

It is our intention to maintain your personal information only so that it can be used for the purposes for which it was collected, including satisfying any legal, accounting, and reporting requirements we may have. As such, the length of time for which we store your personal information varies depending on the type of information we hold.

For determining the appropriate retention period for your personal data, we will take into account the amount, nature, and sensitivity of your personal information, as well as the potential harm that could result from your personal data being misused or disclosed by unauthorised parties, the purpose for which we process your personal information and whether we can achieve those purposes by using other means, and any other applicable legal requirements that may apply. It may vary from country to country based on the laws and regulations of the particular country.

Details of the periods of retention for various aspects of your personal data are available upon request by email via gdpr@bmsteel.co.uk.

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information. 

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. 

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. 

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

If you would like to make a request, please contact us at:

Data Protection Officer
Barclay & Mathieson
BM Steel,
180 Hardgate Road, 
Shieldhall, 
Glasgow, 
G51 4TB

gdpr@bmsteel.co.uk

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at 

Data Protection Officer
Barclay & Mathieson
BM Steel,
180 Hardgate Road, 
Shieldhall, 
Glasgow, 
G51 4TB

gdpr@bmsteel.co.uk

You can also complain to the ICO, the UK regulator for data protection issues, if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk