Direct

Privacy Policy

How we handle the personal data you share with Direct. Last updated 28 July 2026.

Who we are

This website is operated by Int Direct Limited(“Direct”, “we”, “us”). For the purposes of the UK GDPR and the Data Protection Act 2018, Int Direct Limited is the data controller for the personal data described in this policy.

If you have any questions about this policy or how we handle your data, contact us at info@direct.co.uk.

What we collect

We only collect what you actively submit through our registration and enquiry forms. Depending on the form, this may include:

  • Your name and the name of your business or organisation
  • Email address and telephone number
  • Business location, country or region
  • Commercial details you choose to provide — product categories, supply volumes, seasonality, certifications, production capacity and similar information
  • Any free-text message you write to us

Our server also records the IP address a submission came from. This is used solely to rate-limit abusive traffic and is not used to build a profile of you.

We do not use advertising or analytics cookies on this site, and we do not track you across other websites.

Why we process it, and on what basis

We process your data to respond to your enquiry, assess your registration, and contact you about working with Direct. Our lawful basis is your consent, which you give by ticking the consent box when you submit a form. Where a commercial relationship follows, we may continue to process your data on the basis of performance of a contract or our legitimate interests in operating the business.

We do not sell your data, and we do not use it for automated decision-making or profiling.

Who we share it with

Your data is stored on our own infrastructure. We share it only with service providers who help us operate the site — for example our hosting provider and the email service that delivers enquiry notifications to our team. These providers act on our instructions and may not use your data for their own purposes.

We will disclose personal data where we are legally required to do so, or where it is necessary to establish, exercise or defend legal claims.

How long we keep it

Enquiries and registrations are retained for up to 24 months from your last contact with us, after which they are deleted. If you become a customer or supplier, we retain records for as long as the relationship continues and for any period required by law afterwards.

Your rights

Under UK data protection law you have the right to:

  • Be informed about how your data is used
  • Access a copy of the data we hold about you
  • Have inaccurate data corrected
  • Have your data erased
  • Restrict or object to how we process your data
  • Receive your data in a portable format
  • Withdraw consent at any time

To exercise any of these rights, email info@direct.co.uk. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Security

We apply appropriate technical and organisational measures to protect your data, including encrypted connections, access controls on our admin systems, and hashed credentials. No transmission over the internet can be guaranteed completely secure, but we take reasonable steps to reduce that risk.

Changes to this policy

We may update this policy from time to time. Any changes will be published on this page with a revised date at the top.