PRIVACY NOTICE

Last updated: 16 June 2026

Lords Group Trading PLC and its group companies(“Lords Group”, “we”, “our” or “us”) are committed to protecting and respecting your privacy.

This Privacy Notice explains how personal data is handled when you interact with Lords Group companies, including when you visit our website, purchase goods or services, open a trade account, apply for employment, or otherwise communicate with us.

This notice provides a general overview of how personal data is processed within the Lords Group. More detailed information about specific types of processing can be found in the privacy notices linked below.

WHO WE ARE

Lords Group Trading PLC is the parent company of a number of trading businesses operating within the Lords Group.

When you interact with a Lords Group company—for example by purchasing goods or services, opening a trade account, applying for employment, supplying goods or services, making a donation to, or applying for funding from, the Lords Group Foundation or visiting one of our websites—the relevant Lords Group company you deal with will normally act as the data controller responsible for processing your personal data.

The following Lords Group companies act as data controllers for the purposes of UK data protection legislation:

Registered Company Company Number ICO Registered Number Trading Names (including websites)
Carboclass Limited 1906203 ZA282507 Lords Builders Merchants, Advance Roofing Supplies, George Lines Merchants, Hevey Building Supplies, Hevey Timber Supplies, Huntingdon Timber Supplies, MAP Building & Civils Supplies, Lords Timber Supplies, Lords Lintels, Lords Group Trading, Lords Group Foundation and other trading names operated by Carboclass Limited.
Weldit LLP OC3034215 Z3029180 Weldit LLP, Lords Group Trading, Lords Group Foundation
CMO Superstores Limited 16498979 ZC044548 CMO Superstores, Click Basin, Building Superstore, Door Superstore, Drainage Superstore, Insulation Superstore, Landscaping Superstore, Plumbing Superstore, Roofing Superstore, Lords Group Trading, Lords Group Foundation
AW Lumb & Company Limited 00799448 Z7040415 AW Lumb & Company Limited, Lords Group Trading, Lords Group Foundation
APP Wholesale Limited 06552800 ZA560891 APP Wholesale Ltd, Direct Heating, Mr Central Heating, HRP Trade, Ultimate Renewable Supplies, Lords Group Trading, Lords Group Foundation

Registered Office for the above companies: 12–15 Hanger Green, London, W5 3EL

If you have any questions about how your personal data is handled, please contact: DPO@lordsgrouptrading.co.uk

Your enquiry will be directed to the appropriate Lords Group company.

Where more than one Lords Group company is involved in providing goods or services or supporting a business relationship, those companies may act as separate or joint controllers where appropriate. Further information will be provided where this applies.

FURTHER INFORMATION

Depending on your relationship with Lords Group, a more specific privacy notice may apply (for example, where you are a customer, supplier, job applicant, colleague or visitor). Those notices provide more detailed information about the processing activities relevant to that relationship.

HOW WE USE PERSONAL DATA

Lords Group companies may process personal data for a variety of legitimate business purposes, including:

  • supplying goods and services to customers
  • managing customer and trade accounts
  • assessing credit applications
  • managing supplier and business partner relationships
  • recruitment and employment administration
  • marketing communications where permitted
  • operating and securing our websites and IT systems
  • complying with legal and regulatory obligations
  • protecting the security of our premises, colleagues, customers and visitors

Further information about how personal data is used in each of these contexts is provided in the detailed privacy notices listed below.

LAWFUL BASES FOR PROCESSING

Depending on the circumstances, Lords Group companies process personal data under one or more of the following lawful bases:

  • Contractual necessity – where processing is required to provide goods or services or enter into a contract
  • Legal obligations – where processing is required to comply with applicable laws or regulations
  • Legitimate interests – where processing is necessary for legitimate business purposes such as fraud prevention, credit risk assessment, customer service and internal administration
  • Consent – where consent is required for specific processing activities such as certain marketing communications

Further details about the lawful bases for particular processing activities are set out in the relevant detailed privacy notices.

AUTOMATED DECISION MAKING

Lords Group companies may use automated tools to support certain business processes, such as fraud prevention, identity verification and credit risk assessment.

These tools may analyse personal data using predefined criteria to generate indicators or risk scores. However, we do not generally make decisions that have legal or similarly significant effects on individuals based solely on automated processing without meaningful human review.

Further information about automated processing can be found in the relevant detailed privacy notices.

SHARING PERSONAL DATA

Personal data may be shared where necessary with:

  • other companies within the Lords Group
  • trusted service providers who support our business operations
  • delivery and logistics providers
  • professional advisers such as auditors, legal advisers and consultants
  • credit reference agencies and fraud prevention organisations
  • regulatory authorities, courts or law enforcement agencies where required by law

Further details about how personal data may be shared are provided in the relevant detailed privacy notices.

INTERNATIONAL TRANSFERS

Some of our service providers may process personal data outside the United Kingdom.

Where this occurs, we ensure that appropriate safeguards are in place to protect personal data in accordance with UK data protection law.

PROTECTING YOUR INFORMATION

We maintain appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Access to personal data is limited to those who require it for legitimate business purposes.

DATA RETENTION

Personal data is retained only for as long as necessary for the purposes for which it was collected and in accordance with the Company's Records Retention and Disposal Policy and applicable legal and regulatory requirements.

Further details about retention periods for specific processing activities are provided in the relevant detailed privacy notices.

DETAILED PRIVACY NOTICES

More detailed information about how personal data is processed in specific situations can be found in the following notices:

YOUR RIGHTS

Under UK data protection law, individuals have rights in relation to their personal data, including the right to:

  • request access to personal data
  • request correction of inaccurate or incomplete data
  • request deletion of personal data in certain circumstances
  • restrict or object to certain types of processing
  • request the transfer of personal data to another organisation where applicable

If you wish to exercise any of these rights, please contact us using the details provided above, alternatively you can use this online form: Individual Rights Request Form

You may also contact the relevant Lords Group company you deal with directly in relation to the exercise of your rights.

DATA PROTECTION CONCERNS AND COMPLAINTS

If you have concerns about how your personal data has been handled, believe that your information has been used unlawfully, or think we have not complied with applicable data protection law, you can raise a concern or make a formal complaint with us.

You can contact the Data Protection Officer:

Please provide as much information as possible about your concern, including details of the issue, the individuals involved (where known) and any supporting evidence you wish us to consider.

We will investigate concerns and complaints in accordance with our internal complaints process and applicable data protection legislation.

WHAT HAPPENS NEXT?

  • We will acknowledge your complaint without undue delay and no later than 30 days after receiving it.
  • We will carry out appropriate enquiries into the matters raised.
  • If additional time is required due to the complexity of the complaint, we will keep you informed of progress.
  • We will provide you with the outcome of our investigation and explain the reasons for our decision.

If you remain dissatisfied after receiving our response, you have the right to complain to the Information Commissioner's Office (ICO).

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Telephone: 0303 123 1113

Website: www.ico.org.uk/make-a-complaint

UPDATES TO THIS NOTICE

We may update this Privacy Notice from time to time to reflect changes in legal requirements or business practices.

The most recent version will always be published on this website.