Privacy Policy – Rex Wholesale

1. Who We Are

Rex Wholesale is the trading name of Veeha Ltd, a company registered in England and Wales under Company Number 11880826. Our registered office is at 35 Kingshill Avenue, Harrow, England, HA3 8JT.

For the purposes of data protection legislation, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, Veeha Ltd is the data controller responsible for determining how and why your personal information is processed.

If you have any questions about this policy or wish to exercise your data protection rights, you can contact us at rexwholesaleltd@gmail.com.

2. Business Customers Only

Rex Wholesale supplies products exclusively to businesses, retailers, traders and other commercial entities. By creating an account or placing an order through our website, you confirm that you are acting in the course of a business, trade, profession or commercial activity. Our services are not intended for individuals under the age of 18.

3. Information We Collect

We may collect, use, store and process the following categories of personal information:

Account Registration Information: full name, company name, email address, telephone number, billing address, delivery address(es) and account login credentials.
Order Information: products purchased, order values, transaction details, delivery instructions, order history and communications relating to your order.
Customer Service Information: your contact details, copies of correspondence, and details of enquiries or complaints needed to investigate and resolve issues.
Marketing Information: your email address, marketing preferences, and records of consent, subscription and unsubscribe requests, where you choose to receive marketing communications.
Technical and Usage Information: IP address, browser type and version, device type, operating system, website interaction data, pages visited, time spent on pages and referral sources, much of which is collected through cookies — see our Cookie Policy for further detail.

4. How We Collect Information

Directly from you when you create an account, place an order, contact us, subscribe to our newsletter, take part in a promotion, or respond to our communications.
Automatically through the operation of our website and the use of cookies and similar tracking technologies.
From third parties, including providers who help us process payments, deliver goods, or otherwise operate our business.

5. How We Use Your Information

We only use your personal information when we have a lawful basis to do so. The main purposes for which we process your data are:

Creating and managing your account — registering users, authenticating account access, and maintaining account functionality and order history. Lawful basis: performance of a contract and legitimate interests.
Processing and fulfilling orders — processing transactions, arranging delivery, communicating about orders, and managing returns and claims. Lawful basis: performance of a contract and compliance with legal obligations.
Providing customer support — responding to enquiries, investigating complaints and resolving disputes. Lawful basis: legitimate interests and performance of a contract.
Sending marketing communications about products, promotions and company news, where you have actively opted in. Lawful basis: consent.
Requesting customer reviews through Trustpilot or similar platforms following a completed purchase. Lawful basis: legitimate interests.
Improving website performance by analysing how visitors use our site. Lawful basis: consent where required, and legitimate interests where permitted.
Preventing fraud and protecting our business — verifying transactions, detecting suspicious activity and enforcing our Terms and Conditions. Lawful basis: legitimate interests and compliance with legal obligations.

6. Marketing Communications

We operate on an opt-in marketing basis and will only send marketing communications where you have given your consent, or another lawful basis applies. You may withdraw your consent at any time; this will not affect the lawfulness of processing carried out beforehand, and unsubscribing will not affect service-related communications needed to administer your account or fulfil your orders.

7. Data Minimisation

We seek to ensure that the personal information we collect is adequate, relevant and limited to what is necessary, and we do not intentionally collect information unrelated to the operation of our business or the provision of our services.

8. Sharing Your Information

We do not sell your personal information to third parties. We may, however, share it with carefully selected third parties where necessary to operate our business, including:

Payment service providers, such as PayPal, who process payment information under their own privacy policies.
Website hosting and infrastructure providers — our website runs on custom software built with Next.js, Node.js and PostgreSQL, hosted using infrastructure provided by GoDaddy.
Delivery and logistics providers, who receive the name, delivery address, contact telephone number and order reference needed to fulfil your order.
Marketing and analytics providers — where you have given consent, this may include Google Analytics, Google Tag Manager, Google Ads Conversion Tracking, Meta (Facebook) Pixel, TikTok Pixel, Microsoft Clarity, Hotjar, Mailchimp and Klaviyo.
Review and feedback providers, such as Trustpilot, for the purpose of requesting feedback after a completed purchase.
Professional advisers and authorities, including legal advisers, accountants, insurers, regulators and law enforcement, where required by law or to establish, exercise or defend legal claims.

9. International Data Transfers

Some of our third-party providers may process personal information outside the United Kingdom. Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place, such as UK adequacy regulations, contractual protections, recognised certification mechanisms, or other lawful transfer mechanisms.

10. Data Retention

We only keep personal information for as long as reasonably necessary, including to meet legal, regulatory, accounting and reporting requirements. Our general retention periods are:

Customer account information: until you request deletion or closure of your account.
Order and transaction records: seven (7) years.
Marketing consent records: six (6) years.
Customer service enquiries and correspondence: two (2) years.

These periods may be extended where required by law or to establish, exercise or defend legal claims. Once information is no longer needed, it is securely deleted, anonymised or otherwise disposed of.

11. Security of Your Information

We take reasonable technical and organisational measures to protect your personal information, including secure hosting environments, password protection, restricted access controls, and ongoing software and security monitoring. While we use commercially acceptable means to safeguard your data, no method of transmission or storage over the internet can be guaranteed to be completely secure.

12. Your Data Protection Rights

Subject to applicable law, you may have the following rights in relation to your personal information:

Right of access — to confirm whether we process your data and request a copy of it.
Right to rectification — to have inaccurate or incomplete data corrected.
Right to erasure — to request deletion of your data in certain circumstances, subject to any legal or contractual obligations requiring us to retain it.
Right to restrict processing — to limit how we use your data in certain circumstances.
Right to object — including an absolute right to object to use of your data for direct marketing.
Right to data portability — to receive your data in a structured, machine-readable format, where applicable.
Right to withdraw consent — at any time, where processing is based on consent, without affecting the lawfulness of earlier processing.

13. Exercising Your Rights

You can submit any request relating to your personal information to rexwholesaleltd@gmail.com. We may ask for reasonable information to verify your identity before responding, and we aim to respond within the timeframes required by applicable law.

14. Complaints

If you have concerns about how we process your personal information, please contact us first so that we may try to resolve them. You also have the right to lodge a complaint with the relevant supervisory authority responsible for data protection matters in the United Kingdom.

15. Changes to This Privacy Policy

We may amend, modify or update this Privacy Policy from time to time. Any changes become effective once the updated policy is published on our website, and we encourage you to review it periodically.

16. Contact Details

If you have any questions about this privacy policy or our data practices, please contact us at:

Email: rexwholesaleltd@gmail.com
Postal address: Veeha Ltd t/a Rex Wholesale, 35 Kingshill Avenue, Harrow, England, HA3 8JT
Company Number: 11880826