Privacy policy
Last updated: 28 October 2026.
Surplus Stock Solutions is responsible for how personal information is used to handle stock enquiries and operate this website. This notice covers the enquiry forms on our Contact and Sell your stock pages, direct correspondence and any resulting purchase.
For a privacy question, a request about your information or a complaint, email info@surplusstocksolutions.co.uk or call 07737 709370.
Information we receive
The enquiry form asks for your name, email address, telephone number and message. Your message can include your company, role, collection location, stock quantities, condition and relevant dates. Photographs and stock lists sent by email become part of our correspondence. We also retain relevant follow-up messages and details of any agreed purchase.
We normally receive this information from you. If you contact us for someone else, provide only the contact and stock details you are authorised to share, and let them know about this notice.
When you visit, the hosting and form services receive technical request information such as your IP address, browser or device information, requested pages and the date and time. This information supports delivery of the website and form, troubleshooting and protection against misuse.
What you need to provide
Using the online form is your choice. It marks required fields, including email and telephone details. Without the required answers the form cannot be submitted. You can call or email us instead, and we need a way to reply and enough stock information to assess your enquiry.
Please keep messages and photographs relevant to the stock. Do not include bank details, identity documents, passwords, health information or unrelated personal information. Sending an enquiry does not subscribe you to marketing.
Why we use information and our lawful bases
For an individual asking us to take steps towards a purchase contract with them, we use the necessary enquiry information on the basis of taking those requested steps. If a purchase is agreed with that individual, the contract basis covers the information needed to carry it out.
For enquiries and purchases made on behalf of a company, we rely on legitimate interests: assessing available stock, replying to the right business contact and administering the business relationship. We also rely on legitimate interests to operate and protect the website, investigate misuse and establish or defend legal claims. These uses must be necessary and balanced against the rights and reasonable expectations of the people concerned.
Where accounting, tax or other legal record-keeping duties apply, the relevant information is used to meet those legal obligations. Optional website analytics is currently disabled.
We do not make solely automated decisions about whether to purchase your stock.
Who receives information
Cognito Forms provides the enquiry forms and processes the submitted information for Surplus Stock Solutions. Loading a form connects your browser to Cognito so it can display and operate. Our hosting and email providers process information needed to run the website and manage correspondence.
Where needed for an agreed purchase, relevant contact, collection or transaction details may be shared with the people arranging collection and with professional advisers such as accountants or legal advisers. Information may also be disclosed where a legal duty requires it or where necessary to establish or defend a legal claim. Sharing is limited to what the recipient needs for the relevant purpose.
International processing
Cognito Forms says its customer data is hosted in the United States. Its published privacy policy states that it participates in the UK Extension to the EU-US Data Privacy Framework.
You can contact us for more information about the destinations, applicable transfer arrangements and how to obtain a copy or details of relevant safeguards for your information.
ICO guidance on the UK Extension to the Data Privacy Framework
How long information is kept
We keep enquiry information while it is needed to assess stock, follow up or complete a purchase. Retention depends on whether the matter is active, legal record-keeping duties and any complaint or claim.
Technical records support service operation and security. Cognito entries, correspondence, transaction records and backups are held in different systems, so one automatic deletion period does not apply to every copy.
Our retention approach is to delete or anonymise information when its purpose ends. Contact us about a particular record or to request deletion where that right applies.
Your data protection rights
Depending on the circumstances, you can ask to access your personal information, correct it, have it erased or restrict its use. You can object to processing based on legitimate interests. Data portability applies to certain information provided by you and processed automatically on the basis of consent or a contract. These rights have conditions and legal exceptions.
Email or call us to make a request. Requests are normally free. We respond without undue delay, normally within one calendar month. We may ask for reasonable information to confirm your identity; where the law permits, the response period runs from receiving it. For complex or multiple requests, the law can allow up to two further months; we will explain an extension within the applicable first-month period. If a request cannot be met in full, we will explain why.
Cookies and optional analytics
The Cookie policy explains browser storage and the embedded forms. Optional Google Analytics is disabled. You do not need to agree to analytics to contact us.
Where we rely on your consent, you can withdraw it at any time by contacting us. Withdrawal does not affect processing carried out lawfully before that point.
Privacy complaints
If you think your information has been handled incorrectly, email info@surplusstocksolutions.co.uk or call 07737 709370. Explain what happened and the outcome you are seeking. You do not need to use a stock enquiry form.
We acknowledge data protection complaints within 30 days, investigate, keep you informed and provide an outcome without undue delay. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator.