How we use the information you give us.

This notice explains what personal data Karpat Trading Ltd collects through karpattrading.co.uk, the lawful bases on which we process it, how long we keep it, and your rights under UK GDPR and the UK Privacy and Electronic Communications Regulations (PECR).

Who we are

Karpat Trading Ltd is a UK Limited company registered at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. Companies House number 16221500. We are the data controller for personal information collected through this website. Contact us at info@karpattrading.co.uk.

What we collect

When you submit the contact form on this site, we receive: your name, your company name, your trade type (selected from a dropdown), your email address, and the free-text inquiry you write. We also receive your IP address as part of the submission, which Web3Forms (our form-handling processor) uses transiently for anti-spam.

The web fonts used for the site's typography (Cormorant Garamond and Inter) are served from this website itself, not from a third-party font CDN — so loading a page makes no request to any third party and sets no cookies. We do not embed Google Maps anywhere on the site; the contact page contains only an ordinary link to Google Maps, which loads nothing from Google unless you choose to click it.

Why we use it (lawful basis)

We use the contact form data on the basis of legitimate interest — to respond to a B2B trade inquiry that you initiated. We do not use it for marketing emails, profiling, or onward sale.

How long we keep it

We retain inquiry data for up to 24 months from your last contact with us, after which we delete it from our active systems. Where an inquiry becomes a customer relationship, we retain commercial records (invoices, orders, shipping) for the period required by UK tax and customs law (currently 6 years).

Who we share it with

• Web3Forms — processes the contact form submission and emails it to info@karpattrading.co.uk. Their privacy policy: web3forms.com/privacy.
• Google Workspace (Gmail) — hosts our info@karpattrading.co.uk mailbox, so any email you send us is processed by Google. Google's privacy policy: policies.google.com/privacy.
• We do not share your data with marketing, advertising, or analytics providers.

International transfers

Two of our processors are based in the United States. Google (Google Workspace / Gmail, which hosts our info@ mailbox) is certified under the EU–US Data Privacy Framework and its UK extension — an approved safeguard for UK-to-US transfers. Web3Forms (our form handler) stores submissions encrypted on Amazon Web Services and deletes them after 30 days; for that transfer we rely on the UK International Data Transfer Agreement (IDTA) or equivalent standard contractual clauses. To ask which safeguard applies to a particular transfer, email info@karpattrading.co.uk.

Your rights

Under UK GDPR you have the right to: access the personal data we hold about you; ask us to correct or delete it; restrict or object to our processing; and complain to the Information Commissioner's Office (ICO) at ico.org.uk. To exercise any of these rights, email info@karpattrading.co.uk and we will respond within one calendar month.

Cookies

This site sets no cookies at all and runs no analytics, advertising, or marketing trackers — no Google Analytics, no Facebook Pixel. Fonts are self-hosted and we embed no third-party content, so loading the site makes no third-party requests. If we add analytics or any other non-essential cookie in future, we will update this notice and show a consent banner before any such cookie is set.

Changes to this notice

If we materially change how we use your data, we will update this page and the "last updated" date below. The current version applies to all data submitted on or after this date.

Last updated: 30 May 2026.