1.Introduction

Eximex UK Ltd (“we”, “us”, “our”) is committed to protecting the privacy, security, and integrity of all personal data we handle.

This policy explains how we collect, use, store, process, and protect personal data in compliance with:

  • The UK General Data Protection Regulation (UK GDPR)
  • The Data Protection Act 2018 (DPA 2018)
  • Other relevant UK privacy legislation

By interacting with Eximex, individuals acknowledge that their personal data will be processed according to this policy.

2.What Is Personal Data?

Personal data includes any information that can identify an individual, directly or indirectly.

Examples include:

  • Name, address, phone number, email
  • Identification numbers
  • Employment details
  • Bank details and financial information
  • Online identifiers (IP addresses, cookies)

Special category data (e.g., health, ethnicity, biometric data) is subject to stricter controls and is only processed where legally permitted.

3.Principles of Data Protection

Eximex adheres to the core UK GDPR principles.

Personal data must be:

  • 1
    Processed lawfully, fairly, and transparently
  • 2
    Collected for specific, explicit, and legitimate purposes
  • 3
    Adequate, relevant, and limited to what is necessary
  • 4
    Accurate and kept up to date
  • 5
    Stored only as long as necessary
  • 6
    Processed securely

We are accountable for complying with these principles and for demonstrating compliance.

4.What Data We Collect

Eximex may collect personal data from:

  • Customers
  • Employees and applicants
  • Suppliers and service providers
  • Website visitors
  • Partners and contractors

Types of data collected may include:

  • Contact details
  • Contractual information
  • Payment and invoicing data
  • Website usage data (analytics/cookies)
  • Employment-related information
  • Communications, correspondence, and customer service interactions

5.How We Use Personal Data

We process personal data for the following purposes:

  • To fulfil orders, contracts, and business operations
  • To communicate with customers, suppliers, and partners
  • To meet legal and regulatory obligations (e.g., HMRC, accounting, product compliance)
  • For recruitment, HR administration, and payroll
  • To manage our website, improve user experience, and ensure security
  • To maintain internal records

We only process personal data where we have a lawful basis, such as:

  • Performance of a contract
  • Legal obligation
  • Legitimate interests
  • Consent (when explicitly

For further information, please contact us via our contact form.