Privacy policy

Last updated: 15 October 2026

This policy explains how Greenbridge Distribution Ltd (GreenBridge, we, us or our) handles personal information in connection with our website, business enquiries and third-party logistics services. Our services include pallet storage, goods receiving, e-commerce fulfilment, B2B dispatch, returns, rework, packaging and related account support.

1. Who we are and how to contact us

Greenbridge Distribution Ltd, company number 16979679.
Unit 55 Atcham Business Park, Atcham, Shrewsbury, Shropshire, SY4 4UG, United Kingdom.
Email: orders@greenbridgedistribution.com.

Please use this email address for privacy questions or requests about your personal information.

2. Our role: business records and client fulfilment data

We act as a data controller when we decide why and how information is used for our own activities, such as responding to enquiries, managing business relationships, invoicing and operating our website.

When a brand or business appoints us to handle its customers' order and delivery information, we generally act as a data processor on that client's instructions. The client remains responsible for its customer privacy notice and the lawful basis for that processing. The service agreement and applicable data-processing terms govern this work. Our role can differ where we need to use records for our own legal obligations or claims.

If your question concerns an order placed with one of our clients, contact the brand or retailer first. If you contact us about data we hold on its behalf, we will refer the request to the relevant client and assist it as appropriate.

3. Information we handle and where it comes from

Enquiries and business contacts: name, company, job or business contact details, email, telephone number, correspondence and the storage, product, stock and order-volume information you choose to provide. We receive this through our enquiry form, email, telephone and business communications.
Client and supplier administration: contact details, account and contract records, invoices, payment status and relevant billing information, supplied by you or your organisation.
Fulfilment and delivery: recipient names, delivery and collection addresses, email addresses, telephone numbers, order references, items to be dispatched, delivery instructions, tracking and delivery-status records, and returns or enquiry details. These are supplied by our clients, their connected sales platforms and order systems, recipients and delivery partners.
Additional services: relevant correspondence and contact details where we provide agreed address or customer-enquiry support for a client.
Website information: IP address, device and browser information, page interactions and technical or security information collected through Shopify, website technologies and spam-protection services.

Please provide only information needed for your enquiry or the agreed service. Do not put passwords, payment-card details, identity documents or sensitive personal information into the website enquiry form.

4. Why we use information and our lawful bases

For activities where we act as controller, we use personal information for the following purposes:

Responding to enquiries and preparing quotes: our legitimate interests in answering business enquiries and developing business relationships; or taking steps at your request before entering a contract with you personally.
Managing services, accounts and suppliers: performing a contract where you are personally a party to it, or our legitimate interests in administering services and communicating with the people representing our clients and suppliers.
Invoicing, accounting and required disclosures: complying with legal obligations, and our legitimate interests in keeping appropriate business records and recovering payments.
Website operation, security and service improvement: our legitimate interests in maintaining a reliable, secure website and protecting our business and users. Consent is used where required for optional cookies or similar technologies.
Handling complaints and legal claims: our legitimate interests in resolving issues and establishing, exercising or defending legal rights, and compliance with applicable legal obligations.

Where we rely on legitimate interests, we consider those interests alongside your rights and reasonable expectations. You can object to processing based on legitimate interests. When processing client fulfilment information as a processor, we follow the client's documented instructions rather than choosing the client's lawful basis.

You may decline to provide information, but we may be unable to prepare an accurate quote, respond to you or perform the relevant service without the necessary details. GreenBridge does not currently send marketing emails or run advertising campaigns. Enquiry and account communications are used to respond to requests and manage the relevant logistics services.

5. Who information is shared with

Information is shared where needed for the relevant purpose, including with:

the client or brand whose stock, orders, returns or customer enquiries we are handling;
carriers, pallet networks and other delivery partners for booking, dispatch, tracking, delivery and resolving problems;
Shopify for website hosting and enquiry handling, ShipStation for connected order and dispatch workflows, and relevant IT, integration, email and cloud-service providers;
professional advisers, insurers and accounting providers where needed for business administration, advice or claims; and
public authorities or other parties where disclosure is required by law or necessary to protect legal rights.

We limit information shared to what is relevant to the purpose. Some recipients, including carriers, may act as independent controllers for their own activities. Their privacy notices explain those uses.

6. Website cookies, Shopify and spam protection

Our website is hosted on Shopify. Cookies and similar technologies support website functionality, security, preferences and measurement. Where consent is required for optional technologies, you can accept or decline them through the website's cookie controls. You can also manage cookies in your browser, although blocking essential cookies may affect website features.

Shopify and connected services may process device and usage information to operate their services and, depending on the features used and your choices, for their own purposes. See the Shopify Privacy Policy, Shopify Cookie Policy and Shopify Privacy Portal for more information and available privacy choices.

Our enquiry form uses hCaptcha to help prevent spam and abuse. Its processing is described in the hCaptcha Privacy Policy.

7. International processing

Some technology and delivery providers operate internationally, so information may be processed or accessed outside the UK. Where a transfer is subject to UK data-transfer restrictions, the applicable safeguards may include UK adequacy regulations, an International Data Transfer Agreement, or the UK Addendum to approved standard contractual clauses. Contact us for information about the safeguards relevant to your data and how to obtain a copy, with confidential information removed where necessary.

8. How long information is kept

Retention depends on the type of record and why it is needed:

Enquiries and quotations: for dealing with the enquiry and relevant follow-up, taking account of whether a business relationship develops and whether a record is needed to resolve an issue.
Client, supplier, contract and financial records: for the business relationship and afterwards where necessary for accounting, tax, legal record-keeping, payment recovery or resolving claims.
Client fulfilment data: according to the client's instructions and agreed processing terms, including arrangements for return or deletion when the service ends, subject to any legal requirement to retain particular records.
Technical and security records: for the period needed for the relevant website, security or diagnostic purpose and the applicable provider's settings.

We consider the purpose, sensitivity and amount of information, legal requirements and relevant claim periods when deciding retention. You can contact us for details relevant to a particular record.

9. Security

Personal information needs protection against unauthorised access, loss and misuse. Appropriate access restrictions and organisational and technical safeguards are required for the services concerned. No website or electronic transmission can be guaranteed completely secure. Contact us if you believe information connected with our services has been compromised.

10. Your rights

Depending on the circumstances, UK data-protection law gives you rights to request access to your information, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests and to direct marketing. Where processing relies on consent, you can withdraw that consent without affecting processing that was lawful before withdrawal.

These rights are subject to legal conditions and exceptions. Email us to make a request. We may need proportionate information to verify your identity and understand the request. For information processed on behalf of a client, the client normally handles the request with our assistance.

11. Complaints

Please contact us if you have a concern about our use of personal information. You also have the right to complain to the UK's Information Commissioner's Office (ICO). Visit ico.org.uk/make-a-complaint for details. You do not have to contact us first.

12. Changes to this policy

We will update this policy when our services or information-handling practices change. The date above shows when it was last updated.