Privacy Policy

Privacy Policy for Gresham Blake Studios B2B

We care about your privacy.
Gresham Blake Studios is a B2B, Trade site for ordering stock uniform pieces and managing trade accounts. We treat personal data with care and keep it secure.

Who we are

Gresham Blake Studios is the data controller for personal data collected through this website.

If you have any questions, or want to use your data rights, contact us at studios@greshamblake.com


What data we collect

Depending on how you use the site, we may collect:

Account and contact details: name, business name, number of employees, social media accounts, email address, phone number, VAT number, billing and delivery address

Order and payment details: items ordered, order history, invoices, delivery information (payment details are handled securely by our payment providers and we do not store full card details.)

Customer support information: messages, emails, call notes, and order queries

Website usage data: device information, IP address, pages viewed, and interactions (via cookies and similar technologies)


Where your data is stored

Your data is stored securely within our business systems and trusted service providers that support this B2B website, such as e-commerce, email, and analytics platforms.

We restrict access to authorised staff and suppliers who need it to provide the service.


How we use your data

We use personal data to:

Set up and manage your trade account

Process and fulfil orders, including delivery and returns

Communicate with you about your account, quotes, orders, or product availability

Provide customer service and resolve issues

Improve our website, products, and services

Maintain records for accounting, tax, and compliance purposes

Send relevant business communications, including product and service updates where permitted (see Direct marketing below)


Our lawful bases for processing

We rely on the following lawful bases under UK GDPR, depending on the situation:

Contract: to create accounts and fulfil orders

Legitimate interests: to run and improve our business, provide B2B customer service, and send relevant communications to business contacts where appropriate (you can object at any time)

Legal obligation: for tax, accounting, and compliance record keeping

Consent: where required for certain types of marketing, or where you have explicitly opted in

The ICO notes legitimate interests is often appropriate in a B2B context, but you must apply the balancing test and provide clear opt outs.


Direct marketing and preference choices

We may send occasional marketing that is relevant to your business, such as product updates, range changes, and service information.

B2B email marketing rules vary depending on who the recipient is:

If we email a corporate address (including named employees at a company), consent under PECR is not always required, but we will still provide a clear opt out in every message.

If you are a sole trader or certain types of partnership, consent or soft opt in rules may apply.

We will always respect opt out requests, and you can ask us to stop marketing at any time by:

Clicking the unsubscribe link in an email

Emailing studios@greshamblake.com

Using our contact form

ICO guidance on B2B marketing explains these distinctions and the need to comply with both PECR and UK GDPR.


Who we share data with

We do not sell your data.

We may share data with trusted suppliers who help us deliver our services, for example:

E-commerce and hosting providers: Shopify (website platform, account management, order processing, and hosting)

Payment processing providers

Delivery and logistics partners

Email and customer communication platforms (for example Klaviyo, when used)

These providers act as processors and are required to protect your data and use it only to provide services to us. Klaviyo publishes a Data Processing Agreement and GDPR resources.


International transfers

Some of our service providers may process data outside the UK. Where this happens, we use appropriate safeguards such as contractual protections designed for international transfers.


How long we keep your data

We keep personal data only as long as needed for the purposes described above.

Typical retention includes:

Order and invoice records kept for accounting and tax purposes

Account records kept while your trade account is active, and for a reasonable period afterwards for service continuity and compliance

You can request deletion, but we may need to retain some information where we have a legal obligation or a legitimate business reason (for example bookkeeping).


Your data rights

You have the right to:

Access a copy of your personal data

Correct inaccurate or incomplete data

Request deletion in certain circumstances

Restrict processing in certain circumstances

Object to processing based on legitimate interests, including direct marketing

Withdraw consent where processing is based on consent

Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any rights, email studios@greshamblake.com.

The ICO explains what privacy information organisations should provide and the rights individuals have under UK GDPR.


Cookies and similar technologies

We use cookies to:

Make the website function properly

Remember preferences

Understand site performance and improve the experience

Support marketing and re-marketing where enabled

Where required, we will ask you to choose your cookie preferences. You can also control cookies in your browser settings.