Itelico AV
Privacy policy
ITELICO AV PRIVACY POLICY
Trade-only B2B website privacy notice
Website: ItelicoAV.co.uk
Company: DGC Wholesale and Ventures Ltd
Company number: 11067198
Registered office: 50 Princes Street, Ipswich, Suffolk, England, IP1 1RJ
Trading name: Itelico AV
Data protection contact: privacy@itelicoav.co.uk
Last updated: 11 July 2026
Version: 1.2
1. WHO WE ARE
This Privacy Policy explains how DGC Wholesale and Ventures Ltd, trading as Itelico AV, collects, uses, stores and shares personal data.
In this Policy, we, us and our mean DGC Wholesale and Ventures Ltd trading as Itelico AV.
You means a person whose personal data we process. This may include a trade-account applicant, director, partner, sole trader, owner, employee, authorised user, business contact, supplier contact, delivery recipient, End User, website visitor or another person connected with an account, Order, delivery, claim, warranty process, complaint or enquiry.
We are the controller of personal data processed for our Website, trade accounts, quotations, Orders, delivery administration, claims, warranty administration, product safety, business communications, security and legal or compliance records, unless a separate written agreement states otherwise for a particular activity.
This Policy is intended to provide privacy information required by the UK General Data Protection Regulation, the Data Protection Act 2018 and other applicable UK data-protection law. Our use of cookies and similar technologies is also governed by the Privacy and Electronic Communications Regulations 2003, as amended.
2. OUR BUSINESS MODEL
Itelico AV is a trade-only business-to-business supplier. We do not sell to consumers through the Website.
At the request of a business customer, we may arrange delivery directly to that customer's customer, site, project address or End User address. We do this to fulfil the business customer's Order. The business customer remains our contractual customer.
If you are an End User or delivery recipient, your details will usually have been provided by the business which sold, supplied, installed or arranged the Goods for you. You should contact that business about sales, refunds, returns, cancellations, installation and general customer-service matters. You may contact us directly about your personal data, a product-safety matter or where a Manufacturer process requires direct contact.
We do not use End User or delivery-recipient details supplied solely for fulfilment for our own direct marketing.
3. WHAT THIS POLICY COVERS
This Policy applies when you:
- visit or use ItelicoAV.co.uk;
- apply for, create or use a trade Account;
- request or receive a quotation;
- place, approve, discuss or administer an Order;
- provide billing, delivery or End User details;
- receive a delivery arranged by us;
- contact us by email, telephone, form, portal, support ticket or another method;
- request product information, warranty support, return authorisation or claim handling;
- receive or subscribe to business communications;
- make a data-protection rights request or complaint; or
- work for, represent or contact a customer, supplier, Manufacturer, carrier, service provider or professional adviser connected with us.
This Policy does not cover employee, worker, contractor or recruitment processing unless expressly stated.
4. PERSONAL DATA WE COLLECT
We may collect the following categories of personal data.
4.1 Account and business-contact data
This may include:
- name, job title and role;
- business name, company number and VAT number;
- trading, billing and delivery addresses;
- business email address and telephone or mobile number;
- business website;
- Account username and securely stored password hash or authentication information;
- Account preferences, status and notes; and
- communications history.
4.2 Authority and Account-application data
This may include:
- the applicant's name and position;
- confirmation of authority to bind or act for the business;
- confirmation that the application and purchasing are for business purposes;
- tick-box and product-specific acknowledgement records;
- the version of our Terms made available and accepted;
- the version of this Privacy Policy made available;
- date and time, IP address, browser user agent and audit record; and
- Account-approval, rejection, suspension or closure notes.
We do not treat acknowledgement that this Policy was made available as consent to processing. Where consent is required for cookies or marketing, it is requested separately.
4.3 Order, payment and transaction data
This may include:
- quotation, purchase-order, Order and invoice references;
- product details, quantities and serial numbers;
- pricing, discounts and account-specific terms;
- dispatch, tracking and Order-status information;
- delivery and site instructions;
- payment status, BACS references and remittance information;
- bank-account information where necessary to identify, reconcile, make or refund a payment;
- credit notes, cancellations and return-to-sender records; and
- damage, shortage, incorrect-delivery, lost-in-transit, return and dispute records.
We do not accept credit card payments and do not intentionally collect payment-card details through the Website. If card details are sent to us accidentally, we will not use them and will take reasonable steps to delete or securely restrict them.
4.4 End User and delivery-recipient data
Where a customer asks us to deliver directly to another person, site or business, we may process:
- recipient name and business or site name;
- delivery address;
- telephone number and email address;
- delivery instructions and access information;
- carrier tracking and proof of delivery;
- a signature, name, image or location evidence recorded by a carrier;
- delivery-issue information; and
- claim, warranty, product-safety or recall information.
4.5 Claims, warranty, DOA and returns data
This may include:
- product serial numbers and technical details;
- product and packaging photographs or video;
- proof of delivery;
- fault descriptions, diagnostic and troubleshooting information;
- installation, configuration and environmental information;
- Manufacturer case, RMA, service-ticket and return-authorisation references;
- correspondence with customers, End Users, Manufacturers, suppliers, carriers and service agents; and
- inspection, testing, credit, replacement and claim-decision records.
4.6 Website, device and security data
This may include:
- IP address;
- device, browser and operating-system information;
- pages viewed, date and time, referring page and session information;
- Account login and authentication records;
- security, fraud, error and audit logs;
- cookie or consent identifiers; and
- analytics data where permitted and, where required, consented to.
4.7 Communications, rights-request and complaint data
This may include:
- email and form content;
- telephone notes;
- support tickets and portal messages;
- attachments and documents;
- correspondence history;
- identity or authority evidence where reasonably required;
- data-protection requests and complaints; and
- investigation, response and outcome records.
4.8 Marketing and preference data
This may include:
- business contact details;
- organisation type, including whether the subscriber is corporate or individual for electronic-marketing purposes;
- marketing preferences, consent and soft-opt-in records where applicable;
- subscription and unsubscribe status;
- suppression-list records;
- communication and engagement history; and
- product-interest or enquiry information.
4.9 Public and third-party business data
We may use information from:
- Companies House and other public registers;
- VAT and business-verification sources;
- business websites and directories;
- customers, suppliers, Manufacturers, carriers and service providers;
- banks and payment records;
- fraud-prevention, sanctions-screening and compliance providers; and
- professional advisers or public authorities where lawful.
5. SPECIAL-CATEGORY DATA, CRIMINAL-OFFENCE DATA AND CHILDREN
We do not intentionally request special-category personal data or criminal-offence data through the Website. Please do not send such data unless we specifically request it, explain why it is needed and a lawful condition applies.
The Website and our services are intended for business users aged 18 or over and are not directed at children. We do not knowingly collect children's data through the Website.
6. HOW WE OBTAIN PERSONAL DATA
We may obtain personal data:
- directly from you;
- from the business you work for or represent;
- from an Account holder or Authorised User;
- from a customer supplying End User or delivery-recipient details;
- from a supplier, Manufacturer, distributor, carrier, warehouse, service agent or fulfilment partner;
- from public registers and business sources;
- from banks and payment records;
- from the Website, cookies, consent tools, server logs and security systems; and
- from communications, forms, support tickets and claims.
7. PURPOSES AND LAWFUL BASES
We only use personal data where a lawful basis applies. The applicable basis depends on the activity and the person concerned.
7.1 Trade-Account applications and Account administration
Purposes:
- receiving and assessing Account requests;
- verifying the business and applicant's authority;
- creating, securing, managing, suspending or closing an Account;
- keeping acceptance and authority evidence; and
- preventing fraud and unauthorised access.
Lawful bases:
- legitimate interests in operating and protecting a trade-only business;
- contract or steps requested before entering a contract where the applicant is the contracting individual, such as a sole trader; and
- legal obligation where a particular verification or compliance requirement applies.
7.2 Quotations, Orders, payments and supply
Purposes:
- preparing quotations and processing Orders;
- communicating about availability and fulfilment;
- reconciling BACS payments;
- issuing invoices, refunds and credit notes;
- maintaining transaction and tax records; and
- enforcing or defending contractual rights.
Lawful bases:
- contract where the data subject is the contracting individual;
- legitimate interests in administering contracts with corporate customers and communicating with their personnel;
- legal obligation for tax, accounting and regulatory records; and
- legitimate interests in establishing, exercising and defending legal claims.
7.3 Delivery and End User Delivery
Purposes:
- arranging dispatch and delivery;
- passing necessary details to suppliers, warehouses, carriers and fulfilment partners;
- providing tracking and proof of delivery;
- managing delivery failures, refusals, return-to-sender events and disputes; and
- communicating safety, warranty or recall information where necessary.
Lawful bases:
- contract where the recipient is also the contracting individual;
- legitimate interests in fulfilling a business customer's Order and ensuring safe and effective delivery;
- legal obligation for product safety, regulatory or record-keeping matters where applicable; and
- vital interests in a rare emergency involving health or safety.
7.4 Damage, discrepancy, warranty, DOA and return processes
Purposes:
- investigating and administering claims;
- communicating with Manufacturers, suppliers, carriers, repair centres and service agents;
- arranging inspection, testing, repair, replacement, collection or credit;
- detecting fraudulent or abusive claims; and
- maintaining evidence and resolving disputes.
Lawful bases:
- contract where applicable;
- legitimate interests in administering claims and protecting the parties' legal and commercial interests; and
- legal obligation or legal claims where applicable.
7.5 Product safety, corrective action and recalls
Purposes:
- investigating safety concerns;
- tracing serialised products and recipients;
- issuing warnings, stop-use notices, corrective actions and recalls;
- communicating with Manufacturers and authorities; and
- protecting health and safety.
Lawful bases:
- legal obligation;
- legitimate interests in product safety and risk management; and
- vital interests where necessary to protect life or physical safety.
7.6 Customer service, communications, rights requests and complaints
Purposes:
- responding to enquiries and support requests;
- keeping correspondence records;
- handling disputes and service complaints;
- verifying and responding to data-protection rights requests;
- receiving, acknowledging, investigating and responding to data-protection complaints; and
- training and quality assurance where proportionate.
Lawful bases:
- contract where applicable;
- legitimate interests in business administration and service quality;
- legal obligation for data-protection rights and complaints; and
- legal claims where applicable.
7.7 Website operation, cyber security and fraud prevention
Purposes:
- delivering Website and Account functionality;
- authenticating users and maintaining baskets or sessions;
- protecting systems and detecting attacks, fraud, abuse and unauthorised access;
- diagnosing errors and maintaining audit logs; and
- measuring and improving performance where permitted.
Lawful bases:
- legitimate interests in operating and securing the Website and business;
- legal obligation where security or incident obligations apply;
- contract for functionality requested by a contracting individual; and
- consent for non-essential cookies or similar technologies where consent is required.
7.8 Business-to-business marketing
Purposes:
- sending relevant product, availability, service, supplier and trade information;
- measuring engagement where permitted; and
- maintaining opt-out and suppression records.
Lawful bases:
- legitimate interests for relevant marketing to corporate business contacts where electronic-marketing law permits it;
- consent or the soft opt-in where required for sole traders, certain partnerships or other individual subscribers; and
- legal obligation and legitimate interests for maintaining suppression records and respecting objections.
We do not use delivery-recipient or End User details supplied solely for fulfilment for our own marketing.
7.9 Legal, tax, accounting, insurance and compliance
Purposes:
- maintaining accounting and VAT records;
- responding to HMRC, courts, regulators and law-enforcement bodies;
- obtaining professional advice;
- managing insurance, fraud, sanctions and legal claims; and
- enforcing our Terms and Conditions.
Lawful bases:
- legal obligation; and
- legitimate interests in governance, risk management and legal claims.
8. OUR LEGITIMATE INTERESTS
Where we rely on legitimate interests, those interests may include:
- operating a secure trade-only B2B business;
- verifying businesses and authority;
- fulfilling and administering Orders;
- arranging direct delivery;
- maintaining accurate transaction, delivery and claims records;
- administering Manufacturer processes;
- protecting against fraud, misuse, disputes and non-payment;
- ensuring product safety and traceability;
- communicating with business contacts;
- carrying out relevant corporate B2B marketing;
- improving the Website and operations; and
- establishing, exercising and defending legal rights.
We consider the necessity and likely impact of the processing and do not rely on legitimate interests where your rights and freedoms override our interests.
9. END USER AND DELIVERY-RECIPIENT PRIVACY INFORMATION
Where we receive your details from a business customer rather than from you directly, the categories normally obtained are those described in sections 4.4 and 4.5. The source is normally the business which sold, supplied, installed or arranged the Goods for you.
Our business customer is required to make our End-User Delivery Privacy Notice or this Policy readily available to you before submitting your details, unless a lawful exemption applies.
Where we communicate with you directly, we will make privacy information available at the first communication. Where applicable, and unless an exemption applies, we will provide privacy information within a reasonable period and no later than one month after obtaining the data, or at the latest when we first communicate with you or first disclose the data to another recipient.
We may disclose delivery details to a carrier, supplier or fulfilment partner shortly after receiving them. For that reason, our business customer should provide the privacy notice before transmitting your details to us.
10. COOKIES AND SIMILAR TECHNOLOGIES
The Website uses cookies and may use local storage, pixels, tags and similar storage or access technologies.
10.1 Strictly necessary technologies
Strictly necessary technologies support functions such as security, fraud prevention, Account authentication, session management, basket operation, load balancing and recording cookie choices. They operate where necessary without consent.
10.2 Non-essential technologies
Analytics, preference and marketing technologies which are not strictly necessary will not be set or activated until you give the required consent.
Our consent mechanism will:
- offer equally accessible choices to accept all non-essential technologies, reject all non-essential technologies or manage choices;
- keep non-essential categories off by default;
- avoid treating continued browsing, silence or closing the banner as consent;
- allow granular choices by purpose;
- record the consent choice and relevant policy version; and
- provide a persistent Cookie Settings link so consent can be changed or withdrawn as easily as it was given.
Withdrawing consent does not affect processing which took place lawfully before withdrawal. We will take reasonable steps to stop future use and remove non-essential first-party technologies we control, although data previously received by a third party may remain subject to that party's retention and legal obligations.
A consent choice will normally be remembered for up to 180 days. We may ask again sooner if the technologies, vendors, purposes or legal requirements change materially.
Details of the technologies currently in use, including their provider, purpose, category and duration, are set out in our Cookie Policy at /cookie-policy and in the Cookie Settings tool.
Browser controls may also restrict cookies, but blocking strictly necessary technologies may prevent parts of the Website from working.
11. BUSINESS-TO-BUSINESS MARKETING
We may send relevant electronic marketing to contacts at limited companies, LLPs and other corporate subscribers where permitted by the Privacy and Electronic Communications Regulations and where our legitimate interests are not overridden.
Sole traders and some partnerships are treated as individual subscribers for electronic-marketing purposes. We will send unsolicited electronic marketing to them only where valid consent or another permitted route, such as a valid soft opt-in, applies.
Every marketing email will identify us and provide a simple way to unsubscribe. You may object or unsubscribe at any time.
We may continue to send non-marketing messages, including Order, payment, delivery, security, warranty, product-safety, recall, legal and Account-administration communications.
12. WHO WE SHARE PERSONAL DATA WITH
Where necessary and lawful, we may share personal data with:
- carriers, delivery companies, warehouses and fulfilment partners;
- suppliers, distributors, Manufacturers and vendors;
- warranty providers, repair centres and authorised service agents;
- banks, payment and accounting providers;
- IT hosting, cloud, security, email, CRM, support-ticket, Website and software providers;
- cookie, consent and analytics providers used in accordance with section 10;
- fraud-prevention, identity, sanctions and compliance providers;
- accountants, solicitors, auditors, insurers, debt-recovery advisers and other professional advisers;
- HMRC, courts, regulators, law-enforcement bodies and public authorities where required or lawful; and
- prospective purchasers, investors and advisers in connection with a proposed sale, restructuring or transfer of all or part of the business.
We share only information reasonably necessary for the relevant purpose and require appropriate contractual, confidentiality and security protections where applicable.
13. CONTROLLERS, PROCESSORS AND SUPPLIERS
For Order, delivery, warranty, product-safety, legal and business-administration activities, we will normally act as an independent controller because we determine purposes and essential means of processing.
Some providers process personal data on our behalf as processors. Where required, we put in place written terms addressing processing instructions, confidentiality, security, sub-processors, assistance with rights and incidents, audit information, and return or deletion of data.
Other organisations, including some Manufacturers, suppliers, carriers, banks and professional advisers, may act as separate controllers for their own purposes. Their privacy notices may also apply.
If a separate written agreement identifies us as a processor for a specific activity, that agreement applies to that activity.
14. INTERNATIONAL TRANSFERS
We are established in the United Kingdom. Some suppliers, Manufacturers, vendors, cloud platforms or service providers may process personal data outside the United Kingdom.
Where UK transfer restrictions apply, we will use an approved safeguard or lawful exception, which may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another lawful transfer mechanism. We will carry out any required transfer-risk assessment and apply supplementary measures where appropriate.
You may contact privacy@itelicoav.co.uk for more information about the safeguard used for a relevant transfer, subject to necessary confidentiality and security restrictions.
15. RETENTION
We keep personal data only for as long as reasonably necessary for the purposes described above, including tax, accounting, warranty, product-safety, security, dispute and legal-claims purposes.
Our usual retention periods are:
- Account records: for the life of the Account and normally up to six years after closure or the last transaction.
- Order, invoice, BACS, VAT and core contract records: normally at least six years after the relevant accounting period or transaction.
- Delivery and proof-of-delivery records: normally up to six years after the Order, or longer for a live claim, warranty, recall or legal matter.
- Damage, discrepancy, warranty, DOA and return records: normally up to six years after the matter closes where linked to a contract or potential claim; routine diagnostic material may be deleted earlier when no longer needed.
- Product-safety and recall records: for as long as reasonably necessary for traceability, regulatory compliance and legal claims, which may exceed six years.
- Website security and access logs: usually up to 12 months, unless required for an investigation, fraud prevention or legal claim.
- Terms, product-acknowledgement and cookie-consent records: normally for the life of the relevant Account or consent and up to six years after the associated transaction or dispute; cookie-choice records not linked to a transaction are normally retained for up to 24 months after expiry or replacement.
- Corporate marketing contact records: normally until objection or unsubscribe, or after 24 months without meaningful engagement, subject to periodic review.
- Consent and soft-opt-in evidence: while relied on and normally for up to six years afterwards where needed to demonstrate compliance.
- Suppression records: for as long as reasonably necessary to ensure we respect an opt-out.
- General enquiries: normally up to three years unless they become part of an Account, Order, complaint, dispute or legal record.
- Data-protection rights requests and complaints: normally up to six years after closure where needed to demonstrate compliance or manage a claim.
We may keep data longer where necessary to establish, exercise or defend legal claims, comply with law, investigate fraud or resolve a continuing dispute. We may securely anonymise data so it is no longer personal data and use that anonymised information for statistical or operational purposes.
16. SECURITY
We use technical and organisational measures designed to protect personal data, which may include access controls, password hashing, encryption where appropriate, secure hosting, audit logging, role-based access, backups, malware protection, security monitoring, supplier due diligence, incident procedures and staff restrictions.
No Website, email system or database can be guaranteed completely secure. You are responsible for keeping Account credentials confidential and notifying us promptly of suspected unauthorised access.
17. INFORMATION WE REQUIRE AND CONSEQUENCES OF NOT PROVIDING IT
Some information is required to open or secure an Account, verify authority, process an Order, reconcile payment, arrange delivery, handle a claim, comply with law or respond to a rights request.
If required information is not provided, we may be unable to approve an Account, accept or fulfil an Order, arrange delivery, process a claim, make a refund, verify identity or provide the requested service.
Optional marketing consent and non-essential cookie consent are not conditions of opening an Account or placing an Order.
18. AUTOMATED DECISION-MAKING AND PROFILING
We may use automated rules or tools to flag possible fraud, sanctions concerns, security risks, duplicate accounts, unusual Orders or technical abuse for review.
We do not currently make decisions based solely on automated processing which produce legal or similarly significant effects on an individual. Material Account, fraud or compliance decisions are subject to human review.
If this changes, we will provide the information and safeguards required by law before carrying out that processing.
19. YOUR RIGHTS
Depending on the circumstances, you may have the right to:
- be informed about use of your personal data;
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion;
- request restriction of processing;
- object to processing based on legitimate interests;
- object to direct marketing at any time;
- request data portability where applicable;
- withdraw consent where processing is based on consent; and
- complain to us and to the Information Commissioner's Office.
These rights are not absolute. We may need to retain certain Order, invoice, tax, delivery, warranty, safety, fraud-prevention or legal records despite a request for deletion or restriction.
20. HOW TO EXERCISE YOUR RIGHTS
Contact:
privacy@itelicoav.co.uk
or write to:
DGC Wholesale and Ventures Ltd
50 Princes Street
Ipswich
Suffolk
England
IP1 1RJ
Please provide enough information for us to identify you and locate the relevant data. We may request proportionate proof of identity or authority where reasonably necessary.
We will respond without undue delay and normally within one month. We may extend the period where permitted by law if a request is complex or numerous, and will explain an extension.
21. DATA-PROTECTION COMPLAINTS
You may complain about our handling of personal data by emailing privacy@itelicoav.co.uk or writing to our registered office using the details above. Please identify the processing or event concerned and the outcome you seek where possible.
We will take reasonable steps to help you make a complaint, including clarifying what information would assist our investigation.
We will acknowledge a data-protection complaint within 30 days after receiving it. Without undue delay, we will take appropriate steps to investigate, make enquiries where necessary, keep you appropriately informed and communicate the outcome.
A complaint and a data-protection rights request are separate legal processes. Where a communication contains both, we will handle each under the applicable requirements.
Making a complaint to us does not affect your right to complain to the Information Commissioner's Office at any time.
22. COMPLAINTS TO THE INFORMATION COMMISSIONER'S OFFICE
The UK data-protection regulator is the Information Commissioner's Office.
Website: ico.org.uk
Telephone: 0303 123 1113
Postal address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would appreciate the opportunity to address a concern, but you are not required to contact us before approaching the Information Commissioner's Office.
23. MARKETING OPT-OUT
You may opt out by using the unsubscribe link in an email, replying with an unsubscribe request or contacting privacy@itelicoav.co.uk.
We will retain the minimum information needed on a suppression list so that we can respect the opt-out.
24. LINKS AND THIRD-PARTY SERVICES
The Website may link to third-party websites, Manufacturer portals, supplier systems, carrier tracking pages or other services. Those organisations are responsible for their own privacy practices. You should read their privacy information before providing data directly to them.
25. CHANGES TO THIS POLICY
The current version of this Policy describes our current processing activities. It is not a contract and does not create a right for us to use data for materially incompatible new purposes.
We may update this Policy to reflect legal, technical or business changes. If we intend to use personal data for a materially new purpose, we will update the Policy and take reasonable steps to bring the change to the attention of affected people before beginning that processing, where required.
The latest version will be available on the Website with its version number and date.
26. CONTACT
Questions about this Policy or our use of personal data should be sent to:
privacy@itelicoav.co.uk
DGC Wholesale and Ventures Ltd
50 Princes Street
Ipswich
Suffolk
England
IP1 1RJ