Privacy Policy

How Blowpack Ltd collects, uses and protects personal information.

Last updated: 4 October 2026

1. Who we are

Blowpack Ltd (“Blowpack”, “we”, “us”) is the data controller for the personal information described in this policy. We are a company registered in England and Wales, company number 15995596, registered and trading at Unit 1 Waterfall Trade Park, Stancliffe Street, Blackburn BB2 2QD.

If you have any questions about this policy or how we handle your information, email us at blowpackltd@gmail.com, call 07456 999489, or write to us at the address above.

2. The information we collect

We collect only the information we need to run our business. This includes:

  • Enquiries: when you contact us by email or phone (including via the enquiry form on our Contact page, which opens your own email program), we receive your name, company, email address, phone number and the content of your message.
  • Business contact details: names, job titles, work email addresses, phone numbers and addresses of people at our customers and suppliers.
  • Order and invoice details: details of quotes, orders, deliveries, invoices and payments, including the contact and billing details needed to process them.

We do not knowingly collect special category data (such as health information), and our website does not ask you to create an account.

3. How we use your information and our lawful bases

Under the UK General Data Protection Regulation (UK GDPR) we must have a lawful basis for using personal information. We rely on:

  • Contract: to respond to enquiries and quotes you ask for, and to take, make, deliver and invoice orders.
  • Legitimate interests: to run and develop our business, keep in touch with existing customers and suppliers, manage our supply chain, keep our website and systems secure, and establish or defend legal claims. We balance these interests against your rights.
  • Legal obligation: to keep accounting and tax records and to meet other legal and regulatory requirements.

We use your information to:

  • answer your enquiries and prepare quotes;
  • process, deliver and invoice orders, and take payment;
  • send business emails such as order confirmations and invoices;
  • manage our relationships with customers and suppliers;
  • keep proper business and accounting records; and
  • comply with the law.

4. How long we keep it

We keep personal information only for as long as we need it for the purpose it was collected for — generally for as long as we have a business relationship with you, and afterwards for as long as required by law or needed to deal with any questions or claims. Accounting records (such as invoices and order records) are normally kept for 6 years, as required for UK tax and company law purposes. When information is no longer needed, we delete it or securely dispose of it.

5. Who we share it with

We never sell your personal information. We share it only where necessary with:

  • Service providers who help us run the business, such as our email provider (Google) and our website hosting provider (Cloudflare), and other IT, delivery and payment providers. They may only use the information to provide their services to us.
  • Professional advisers such as accountants, auditors, lawyers and insurers.
  • Authorities such as HMRC, regulators, the police or courts, where we are required by law or need to protect our rights.

6. International transfers

Some of our service providers, including Google (email) and Cloudflare (website hosting and security), may process information outside the UK, for example in the United States or the European Economic Area. Where this happens, the transfer is protected by appropriate safeguards recognised under UK data protection law, such as UK adequacy regulations (including the UK–US data bridge) or the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses.

7. Keeping your information secure

We use appropriate technical and organisational measures to protect personal information, including password-protected accounts, encrypted (HTTPS) connections to our website, and limiting access to the people who need it to do their job. No system is completely secure, but we take care to protect your information and will act promptly if something goes wrong.

8. Google user data and the Blowpack Factory System

The Blowpack Factory System is our internal business system. It connects to Google’s Gmail API for one purpose only: to send business emails, such as order confirmations and invoices, from blowpackltd@gmail.com.

  • It stores no Google user data other than the OAuth access token needed to send these emails.
  • It does not read, store, analyse or share the content of any mailbox.
  • It does not share Google user data with third parties, and does not use Google user data for advertising or for training artificial intelligence or machine learning models.

The Blowpack Factory System’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke the Blowpack Factory System’s access to a Google account at any time from your Google Account permissions page at https://myaccount.google.com/permissions. If you have any questions about how we handle Google user data, contact us at blowpackltd@gmail.com.

9. Your rights

Under UK GDPR you have the right to:

  • access the personal information we hold about you;
  • ask us to correct information that is wrong or incomplete;
  • ask us to delete your information;
  • ask us to restrict how we use your information;
  • object to our use of your information where we rely on legitimate interests;
  • ask for your information to be transferred to you or another organisation (data portability); and
  • withdraw consent at any time, where we rely on consent.

Some of these rights only apply in certain circumstances. To make a request, contact us at blowpackltd@gmail.com. There is normally no charge, and we will respond within one month.

10. Complaints

If you have a concern, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk.

11. Cookies

Our website does not use advertising or tracking cookies, and we do not use analytics tools to track visitors. Our hosting provider, Cloudflare, may set strictly necessary cookies to keep the website secure and protect it from attacks; these do not identify you personally and do not require consent.

Our website loads fonts from Google Fonts. When your browser requests these fonts, Google receives technical information such as your IP address, as it would for any web request.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the “Last updated” date shown at the top.

13. Contact us

Blowpack Ltd, Unit 1 Waterfall Trade Park, Stancliffe Street, Blackburn BB2 2QD
Email: blowpackltd@gmail.com
Phone: 07456 999489