Last Updated: 20 July 2026 

 

This policy explains how Emergency CORE Bag collects and uses personal information through our website, when processing orders and when communicating with customers, potential customers and other business contacts.

 

1. Who we are

We are Emergency CORE Bag (“us”, “we”, “our”). 

 

Unless we notify you otherwise, we are the controller of the Personal Data we process about you. This means that we decide what Personal Data to collect and how to process it.

 

This privacy notice also explains your rights, so please read it carefully. If you have any questions, you can contact us at emergencycorebag@outlook.co.uk. 

​

2. Personal information we collect 

Depending on how you interact with us, we may collect:

 

Contact & identity information. This may include:

• name;

• job title or role;

• business or organisation name;

• business address;

• delivery and billing address;

• email address; and

• telephone number.

 

Order & transaction information. This may include:

• the products and quantities ordered;

• order and invoice numbers;

• delivery information;

• payment status;

• refund and return information; and

• records of previous orders.

 

Payments may be processed by a third-party payment provider. We may receive confirmation that a payment has been made and limited information relating to the transaction, but the payment provider will process payment-card information under its own privacy arrangements.

 

Communications. We may retain information you provide when you:

• contact us with a question;

• request a quotation;

• place or amend an order;

• request a cancellation, return or refund;

• make a complaint;

• report a delivery problem;

• report a fault or product-safety concern; or

• communicate with us by email, telephone, website form or another channel.

 

Product-safety information. Where you report a product fault, incident or safety concern, we may collect:

• details of the product involved;

• photographs;

• batch, lot or reference numbers;

• information about what happened; and

• limited information about an injury or health impact where this is relevant to investigating the incident.

 

Please do not provide medical or other sensitive personal information unless it is necessary for us to understand and respond to a product-safety concern.

 

Website & technical information. When you se our website, we may collect limited technical information such as:

• IP address;

• browser and device type;

• operating system;

• pages visited;

• the date and time of visits;

• referring website;

• website interaction information; and

• cookie preferences.

 

Marketing preferences. Where applicable, we may record whether you have asked to receive or stop receiving marketing communications from us.

 

3. How we obtain personal information 

We usually receive personal information directly from you when you:

• visit or use our website;

• complete a website form;

• create or place an order;

• request a quotation;

• contact us;

• arrange a return or delivery; or

• report a fault, complaint or safety concern.

 

We may also receive personal information from:

• another person within your organisation;

• the organisation on whose behalf an order is placed;

• payment providers;

• delivery and logistics providers;

• website, e-commerce and IT service providers; and

• publicly available business sources.

 

Where someone places an order for your organisation and provides your details as the delivery or operational contact, we may use those details to process and deliver the order.

 

4. How and why we use personal information 

We must have an appropriate lawful basis for each way in which we use personal information. The most relevant bases for our activities are contract, legal obligation and legitimate interests. Consent may apply to certain optional activities.

 

What we use information for

Our lawful basis

Responding to enquiries and providing quotations

Legitimate interests in responding to potential customers and developing our business

Verifying that an order is for business, professional or organisational use

Legitimate interests in operating a B2B sales model

Processing an order placed by an individual or sole trader in their own business capacity

Taking steps to enter into or perform a contract

Processing an order placed on behalf of a company or organisation

Legitimate interests in administering our contract and relationship with that organisation

Taking and confirming payment

Contract and legitimate interests in administering the order

Arranging shipping and delivery

Contract or legitimate interests in fulfilling the organisation’s order

Communicating about an order, delivery, return, refund or complaint

Contract and legitimate interests in providing customer service

Maintaining financial, tax and transaction records

Compliance with legal obligations

Preventing fraud, misuse and unauthorised transactions

Legitimate interests in protecting our business, customers and systems

Operating, maintaining and securing our website

Legitimate interests in providing a secure and effective website

Understanding general website use and improving the website

Legitimate interests, or consent where consent is required

Investigating faults, incidents and product-safety concerns

Legal obligations and legitimate interests in maintaining product safety and responding to incidents

Managing product recalls or safety communications

Legal obligations and legitimate interests in protecting customers and users

Establishing, exercising or defending legal claims

Legitimate interests and, where necessary, the establishment, exercise or defence of legal claims

Sending marketing communications

Consent or legitimate interests, where permitted by applicable marketing and privacy laws

 

Where we rely on legitimate interests, we consider whether the use is necessary and proportionate and whether the individual’s interests or rights outweigh our interests. People have an absolute right to object to the use of their personal information for direct marketing.

 

5. Information required to process an order

Certain information is needed for us to accept, process and deliver an order. This includes the purchaser’s contact details, organisation details, billing information and delivery information.

 

If this information is not provided, or is inaccurate or incomplete, we may be unable to accept or fulfil the order.

 

6. Marketing communications

We may send relevant information about our products or services to business contacts where:

• the person has asked to receive it;

• the organisation has an existing relationship with us and the communication is permitted by law; or

• we have another appropriate lawful basis.

 

Every electronic marketing communication will provide a way to unsubscribe.

 

You can also ask us to stop sending marketing communications at any time by contacting emergencycorebag@outlook.co.uk. 

 

Stopping marketing messages will not prevent us from sending operational communications about an existing order, delivery, safety issue or business relationship.

 

7. Who we share personal information with 

We may share relevant personal information with organisations that help us operate the website and fulfil orders, including:

• website and e-commerce platform providers;

• website hosting and IT support providers;

• payment processors;

• delivery, courier and logistics providers;

• email and communications providers;

• customer-support systems;

• accounting, bookkeeping and financial service providers;

• manufacturers, suppliers or insurers where necessary to investigate a product issue;

• professional advisers, including accountants and legal advisers; and

• government bodies, regulators, courts or law-enforcement authorities where required or permitted by law.

 

We provide these organisations only with the information reasonably required for the relevant purpose.

 

Some providers act as processors on our behalf. Others, such as payment providers and delivery companies, may act as separate controllers for some of their activities.

 

We do not sell personal information.

 

8. International transfers

Some of the service providers used to operate our website, process payments, provide communications or store information may be based outside the United Kingdom or may use systems located outside the United Kingdom.

 

Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate legal transfer mechanism and relevant protections are in place.

 

9. How long we keep personal information 

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including meeting legal, accounting, tax, safety and dispute-resolution requirements. Our usual retention periods are:

 

Information 

Usual retention period 

Orders, invoices, payments and transaction records

Up to six years after the end of the relevant financial year or business relationship

Delivery, return and refund records

Normally up to six years after the transaction

General enquiries that do not result in an order

Normally up to two years after the enquiry is closed

Customer-service and complaint records

Normally up to six years, depending on the nature of the matter

Product-safety, incident and recall records

For as long as reasonably necessary to meet safety, regulatory, insurance and legal requirements

Marketing records

Until you unsubscribe or we determine that the information is no longer current or useful

Marketing suppression records

For as long as needed to respect the opt-out

Routine website and security logs

Normally no longer than 12 months, unless required to investigate a security incident

 

We may retain information for longer where there is an ongoing dispute, investigation, legal claim, regulatory requirement or product-safety reason.

 

10. How we protect personal information 

We use reasonable organisational and technical measures intended to protect personal information from:

• unauthorised access;

• accidental loss;

• misuse;

• alteration; and

• unauthorised disclosure.

 

Access to personal information is limited to people and service providers who reasonably need it for their work.

 

No website, email system or electronic-storage method can be guaranteed to be completely secure. You should take appropriate care when sending information online and avoid sending unnecessary sensitive information by ordinary email.

 

11. Your data protection rights

Depending on the circumstances, you may have the right to:

• be informed about how your personal information is used;

• request access to the personal information we hold about you;

• ask us to correct inaccurate or incomplete information;

• ask us to erase personal information;

• ask us to restrict how personal information is used;

• object to certain uses of personal information;

• receive certain information in a portable format;

• withdraw consent where we rely on consent; and

• raise concerns about solely automated decisions that significantly affect you.

 

These rights are not absolute and may not apply in every situation. For example, we may need to retain certain transaction information to comply with legal obligations or manage a legal claim. The UK GDPR provides rights relating to access, correction, erasure, restriction, portability, objection and automated decision-making.

 

To exercise a right, contact us at emergencycorebag@outlook.co.uk. 

 

We may need to ask for information to confirm your identity and understand your request. We will not normally charge a fee for dealing with a data-protection rights request.

 

12. Complaints

Please contact us first if you have a question or concern about how we use personal information at emergencycorebag@outlook.co.uk. 

 

You also have the right to complain to the Information Commissioner’s Office, the UK regulator responsible for data protection.

 

13. Children 

Our website and products are intended for businesses, organisations and adults acting in a professional capacity. They are not directed at children, and we do not knowingly collect personal information directly from children through the website.

 

14. External websites

Our website may contain links to websites operated by other organisations.

 

Those organisations are responsible for their own websites and privacy practices. We recommend reviewing their privacy information before providing personal information to them.

 

15. Changes to this policy 

We may update this Privacy Policy where our business activities, website, service providers or legal responsibilities change.

 

The latest version will be published on this page, and the date at the top will be updated.

 

Where a change materially affects how we use existing personal information, we will take reasonable steps to bring it to the attention of the people affected before beginning the new use.