Privacy Policy

Sunny Packaging Limited ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website at sunnypackaging.co.uk or otherwise interact with us.

This policy is provided in compliance with the United Kingdom General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations ("PECR").

1. Who We Are (Data Controller)

Sunny Packaging Limited is the data controller responsible for your personal information. We are a company registered in England and Wales, based in Slough, Berkshire, United Kingdom.

2. Information We Collect

We may collect and process the following categories of personal information:

• Contact details you provide when you email us, request a quote or otherwise contact us — for example your name, business name, job title, email address and telephone number.
• Correspondence and enquiry content — the content of emails or messages you send us, and any information you choose to share with us about your business or requirements.
• Technical information automatically collected when you use the Website — such as your IP address, browser type and version, device type, operating system, referring URL, pages visited and timestamps.
• Cookie and similar technology data — see our Cookie Policy for full details.
• Recruitment information if you apply to work with us — such as your CV, employment history and contact details.

We do not knowingly collect special category personal data through the Website, and we do not knowingly collect personal information from children under 16.

3. How We Use Your Information and Our Lawful Basis

Under the UK GDPR, we must have a lawful basis for processing your personal information. The lawful bases on which we rely are set out below:

4. Marketing

We do not send unsolicited marketing emails. If we ever wish to send you marketing communications, we will rely on your consent (or, where permitted by PECR, the "soft opt-in" for existing business customers in respect of similar products and services). You can withdraw consent or opt out at any time by emailing info@sunnypackaging.co.uk.

5. Sharing Your Information

We do not sell your personal information. We may share your personal information only with:

• trusted service providers who help us operate our business — including our website hosting provider, IT and email providers, and accounting/professional advisers — under appropriate written agreements;
• our affiliated and sister companies (including Airtex UK), where strictly necessary for the purposes described in this policy;
• regulators, law enforcement or other public authorities, where we are required to do so by law; and
• a buyer or successor entity, in the event of a merger, sale, restructuring or transfer of all or part of our business.

6. International Transfers

We aim to keep your personal information within the United Kingdom and the European Economic Area ("EEA"). Where any of our service providers process personal data outside the UK or EEA, we ensure that appropriate safeguards are in place — such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses with the UK Addendum, or transfers to countries the UK Government has determined provide an adequate level of protection.

7. How Long We Keep Your Information

We retain personal information only for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements. Typical retention periods are:

• Enquiries that do not lead to a contract: up to 24 months from last contact;
• Customer records and contracts: the duration of the relationship plus 7 years (to comply with our tax and accounting obligations);
• Recruitment records (unsuccessful applicants): up to 12 months;
• Website logs and analytics: typically up to 26 months.

8. Your Rights

Under the UK GDPR you have the following rights in relation to your personal information:

• Right to be informed — about how we use your personal information (set out in this policy).
• Right of access — to request a copy of the personal information we hold about you.
• Right to rectification — to ask us to correct inaccurate or incomplete information.
• Right to erasure — to ask us to delete your personal information in certain circumstances ("the right to be forgotten").
• Right to restrict processing — to ask us to limit the way we use your personal information.
• Right to data portability — to receive certain personal information in a structured, commonly used, machine-readable format.
• Right to object — to processing based on our legitimate interests, and to direct marketing.
• Right to withdraw consent — at any time where we are relying on consent.
• Rights in relation to automated decision-making — we do not carry out solely automated decision-making with legal or similarly significant effects.

To exercise any of these rights, please email info@sunnypackaging.co.uk. We will respond within one month, in line with UK GDPR requirements. We do not normally charge a fee for handling these requests.

9. Security

We have appropriate technical and organisational measures in place to protect your personal information against unauthorised access, accidental loss, alteration, disclosure or destruction. However, no transmission over the internet is ever fully secure — you provide information to us at your own risk.

10. Cookies

Our Website uses cookies and similar technologies. For full details, please see our Cookie Policy.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent change. We encourage you to review this page periodically.

12. Complaints to the Regulator

If you are unhappy with how we have handled your personal information, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the UK Information Commissioner's Office ("ICO"):

13. Contact Us