Privacy notice

How we use your information when you enquire, offer machinery for sale or buy from Northgreaves.

Updated 23 September 2026

Who is responsible

Northgreaves Plant & Machinery Limited is the data controller. We are registered in England and Wales under company number 17468234. For privacy questions or requests, email northgreavesplant@gmail.com or write to our trading and correspondence address: Unit 2, Byram Business Park, Brotherton, Knottingley, WF11 9HS. Our statutory registered office is listed separately in our company details.

What we collect

We collect the contact details and messages you send us, including your name, email address and telephone number. Machinery enquiries can include the machine you are interested in, or details of a machine you wish to sell: make, model, year, displayed hours, condition, location, asking price and photographs. The enquiry also records the page from which it was sent.

Required form fields are marked. We need enough contact information to reply; without it we cannot progress an enquiry. Seller photographs are optional. Please avoid including people, identity documents or unrelated personal information in photographs. If a transaction proceeds, we also need the details necessary for the order, invoice, payment records and collection or delivery.

Why we use it

• Enquiries and sales: to respond, assess a machine, prepare a quotation and fulfil an agreed order. Our basis is taking steps at your request before a contract, or performing that contract.
• Business contacts and follow-up: where you act for a company, and for proportionate enquiry records, our basis is our legitimate interest in managing business relationships and responding to requests.
• Accounts and legal requirements: to retain required tax and accounting records and respond to lawful requests. Our basis is compliance with legal obligations.
• Security and disputes: to prevent misuse, investigate problems and establish or defend legal claims. Our basis is our legitimate interest in protecting the business, customers and website.

Sending an enquiry does not sign you up to a marketing mailing list. If we separately ask for consent for a particular use, you can withdraw it at any time without affecting earlier lawful processing. We do not make decisions about you solely through automated processing that have legal or similarly significant effects.

Services and sharing

Our website uses Netlify hosting and Supabase for machinery data, enquiry records and seller-photo storage. We use Gmail for email correspondence. The site also loads fonts from Google Fonts and software from jsDelivr. These services can receive technical request information such as your IP address, browser details and the requested resource.

Seller photographs are submitted for our review, not automatically published as adverts. We do not sell your personal information. Where needed for a transaction, we may share relevant details with a delivery contractor, payment or banking provider, accountant or other professional adviser. Information may also be disclosed where required by law or necessary to resolve a dispute.

Processing outside the UK

Our service providers operate internationally, so information may be processed outside the UK. Applicable transfer arrangements depend on the provider and service, and may include UK adequacy regulations or approved contractual safeguards. Contact us for details of the arrangements that apply to your information and how to obtain a copy of relevant safeguards.

How long information is kept

We retain enquiry correspondence and seller photographs while assessing and responding to the enquiry, then only where there is a continuing need such as an active sourcing request, transaction or dispute. We assess that need by the status of the enquiry, our last meaningful contact and whether the information is needed for an outstanding obligation or legal claim. We delete unnecessary copies and photographs when that need ends.

Transaction and accounting records are retained for the applicable statutory period, normally at least six years from the end of the company financial year they relate to. Relevant records may need to be kept longer for an ongoing dispute, investigation or legal requirement. Backups and service logs follow the relevant provider's retention arrangements.

Cookies and similar technology

The public website has no customer login or checkout and does not include advertising trackers or an analytics tag in its website code. External hosting and content services receive technical requests as described above. The separate administration area uses browser storage for staff authentication. If optional tracking is introduced, we will update this notice and provide any required consent controls before it runs.

Your rights

Depending on the circumstances, you can request access to your information, correction, deletion, restriction of use or transfer of information in a portable format. You can object to processing based on legitimate interests, including business-contact follow-up. You can object to direct marketing at any time. These rights are subject to the relevant legal conditions; for example, we may need to retain an invoice to meet accounting obligations.

Contact us using the details above. We may need to confirm your identity before releasing information. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not have to contact us first, although we welcome the opportunity to resolve a concern.