Privacy and cookies


This privacy statement should be read in conjunction with our Terms and Conditions, which are incorporated by reference herein (collectively, this “Agreement”). By accessing our website or otherwise interacting with us, you agree to be bound by this Agreement.

If you accept or agree to this Agreement on behalf of a company of other legal entity, you represent and warrant that you have the authority to bind that company of other legal entity to this Agreement and, in such event, “you” and “your” will also refer and apply to that company or other legal entity.

Fundamentals First Ltd based at 50 Beech Road, Harrogate, North Yorkshire, UK, HG2 8EA, as well as all of its corporate affiliates under its control with whom you trade or otherwise do business  (collectively, “Fundamentals First”, “we” or “us”) are responsible for your personal information and we take our data protection and privacy responsibilities and your rights as data subjects seriously.

This privacy notice explains how we collect, use and share personal information in the course of our business activities, including:

  • the personal information we collect, and when and why we use it
  • how we protect and store personal information
  • your legal rights subject to Applicable Laws (as defined below) 
  • how you can contact us

Third-party websites

You might find external links to third party websites on our website. This privacy notice does not apply to your use of a third-party website.

What personal information we collect and for what purpose

In this section you can find out more about

  • when we collect personal information
  • the types of personal information we collect
  • how we may use your personal information
  • the legal basis for using personal information
  • with whom we may share your information

When we collect information

We collect information about you if:

you do business with us;

you are a visitor to our website;

you apply for a job with us;

collectively (“you” or “your”).

If you do business with us

If you are one of our valued customers or suppliers (or prospective customers or suppliers, or work for or represent one of our customers or suppliers), we will collect information about your name, contact details (including email, phone and mail address), the position you have in the business you work for and the interactions you have with us.

We will use your information:

  • to manage the routine commercial transactions we have with us
  • to respond to requests from you for information about us or our products and services
  • to address any customer / supplier related service issues, such as product queries, issues, complaints or claims
  • to keep you informed about our products and services – we explain more about this in the separate sections below relating to direct marketing and cookies.

We will collect your personal information from you if you contact us. We may also collect information about you from the business you represent or work for if they provide your details (for example as the contact point for a particular product sale), or if you or they attend an event.

We will only collect, use and share your personal information where we are satisfied that we have an appropriate legal basis to do this. This will be because:

  • we need to use your personal information to perform a contract or take steps to enter into a contract with you – this will be of particular relevance if we are transacting with you where you are a sole trader or partnership;
  • you have provided consent for us to contact you by email, phone or physical address – we will only be sending direct marketing communications to you if you provide us with your consent. You can change your preferences at any time.  However, we may rely instead on our legitimate interest in providing email marketing to our business contacts to the extent permitted by Applicable Laws such as contacts at incorporated business entities, but we will honor any instructions that you send to us to unsubscribe from such emails. 
  • we need to use your personal information for our legitimate interest as a commercial organisation – we routinely maintain records as a business about the commercial transactions we enter into with our customers and suppliers and to address issues relating to product development and supply, including marketing and business development (other than by email, where you have provided your consent for us to contact you). The information we hold will be because it is relevant to a transaction or our business development, for example if you are involved in helping us with our product lifecycle, placing an order with us, requesting information, or raising an issue or concern with us. In all cases, we will look after your information at all times in a way that is proportionate and respects your privacy rights and you have a right to object to processing as explained in the Legal Rights section;
  • we need to use your personal information to comply with a relevant legal or regulatory obligation that we have. For example, if we need to retain particular records for health and safety, environmental law or tax related purposes.

If you would like to find out more about the legal basis for which we process personal information please contact us.

If you are a visitor to our website

If you are a visitor to our website, we may collect data from cookies which help us understand how you came to our site, the pages you visited on our site and your IP address. We use this information to help optimise the website experience. You can find more about cookies below.

If you apply for a job with us

If you contact us to apply for a job, we will collect information about your name, contact details and any information you supply to us in relation to the job you are interested in applying for (including your qualifications, education and employment history). We will use this information to help assess your suitability for the role you are applying for or other roles that may be appropriate for your skills and experience. Our HR team maintain a separate privacy policy which they will provide to you during the recruitment process, explaining more about how we manage personal information for our employees and prospective employees. With your consent, we unsuccessful for a particular position we will ask you if we can keep your personal details on file for future opportunities.

Sharing information with others

We share your personal information:

  • with other companies within the Fundamentals First group, where we believe disclosure to other group companies is necessary to manage our business.
  • service providers who help manage our business and deliver services to us, for example suppliers who provide IT and marketing support services – these organisations have all agreed to confidentiality restrictions with us and only use any personal information we share with them or which they collect on our behalf solely for the purpose of providing the contracted service to us;
  • these include (but may not be limited to) a list of suppliers we use, to be filled in before go live…..

We may also share in aggregate, statistical form, non-personal information regarding the visitors to our website, traffic patterns, and website usage with our affiliates, service provider, and other business partners.

In the event of a merger, dissolution or similar corporate event, or the sale of all or substantially all of our assets, we expect that the information that we have collected, including personal information, would be transferred to the surviving entity in a merger or the acquiring entity. All such transfers shall be subject to our commitments with respect to the privacy and confidentiality of such personal information as set forth in this privacy policy.

More about direct marketing

We use personal information to let you know about our products and services that we believe will be of interest to you.

We may contact you by email, post, or telephone or through other communication channels that we think you may find helpful. In all cases, we will respect your preferences for how you would like us to manage marketing activity with you.

To protect privacy rights and to ensure you have control over how we manage marketing with you:

  • we will take steps to limit direct marketing to a reasonable and proportionate level and only send you communications which we believe may be of interest or relevance to you;
  • we will only send you direct marketing by email if you have provided consent to us sending messages to your registered email address;
  • you can ask us to stop direct marketing at any time. You can ask us to stop sending email marketing by following the “unsubscribe” link you will find on all the email marketing messages we send you, or by contacting us here. Please specify whether you would like us to stop all forms of marketing or just a particular type; and
  • you can change the way your browser manages cookies, which may be used to deliver online advertising, by following the settings on your browser as explained above.

We recommend you routinely review the privacy notices and preference settings that are available to you on any social media platforms.

More about cookies

A cookie is a small text file containing small amounts of information which is downloaded to / stored on your computer (or other internet enabled devices, such as a smartphone or tablet) when you visit a website.

Cookies may collect personal information about you. Cookies help us remember information about your visit to our website, like your country, language and other settings. Cookies allow us to understand who has seen which webpages and advertisements, to determine how frequently particular pages are visited and to determine the most popular areas of our website. They can also help us to operate our website more efficiently and make your next visit easier.

For more information about how our cookies work and information about how to manage your cookie settings please visit our Cookie Policy below.

Transferring information internationally

Fundamentals First is an international business. As a result, your personal information may be transferred and stored in countries outside the EU, including EEMEA, Latin America, North America & Asia Pacific, that are subject to different standards of data protection.

We will take appropriate steps to ensure that transfers of personal information are in accordance with applicable law and carefully managed to protect your privacy rights and interests and that transfers are limited to countries which are recognised as providing an adequate level of legal protection or where we can be satisfied that alternative arrangements are in place to protect your privacy rights. To this end, where we transfer your personal information outside of Fundamentals First (for example to third parties who help provide our products and services), we obtain contractual commitments from them to protect your personal information.

You have a right to contact us for more information about the safeguards we have put in place (including a copy of relevant contractual commitments) to ensure the adequate protection of your personal information when this is transferred as mentioned above.

How we protect and store your information


We have implemented and maintain appropriate technical and organisational security measures, policies and procedures designed to reduce the risk of accidental destruction or loss, or the unauthorised disclosure or access to such information appropriate to the nature of the information concerned.

Measures we take include:

  • placing confidentiality requirements on our staff members and service providers;
  • destroying or permanently anonymising personal information if it is no longer needed for the purposes for which it was collected;
  • following strict security procedures in the storage and disclosure of your personal information to prevent unauthorised access to it;
  • using secure communication transmission protocols

As the security of information depends in part on the security of the computer you use to communicate with us and the security you use to protect your User IDs and passwords, please take appropriate measures to protect this information.

Storing your personal information

We will store your personal information for as long as is reasonably necessary for the purposes for which it was collected, as explained in this privacy notice. Where your information is no longer needed, we will ensure that it is disposed of in a secure manner. In some circumstances we may store your personal information for longer periods of time, for instance where we are required to do so in accordance with legal, regulatory, tax, accounting requirements.

In specific circumstances we may store your personal information for longer periods of time so that we have an accurate record of your dealings with us in the event of any complaints or challenges, or if we reasonably believe there is a prospect of litigation relating to your personal information or dealings.

Your legal rights to data privacy

You have rights to protect your interest of privacy in the data that you provide to Fundamentals First.  Those rights will depend upon the federal, provincial, state or local laws and regulations that apply to you, as the data subject, and Fundamentals First, as the party receiving, using, processing and/or storing such data (collectively, “Applicable Laws”).   Fundamentals First cannot provide you with legal advice, and you should seek legal counsel to ensure that you fully understand how to protect your rights and how to enforce them, your rights under Applicable Laws may include:

  • Requesting access to personal information we store and process about you
  • Rectification or deletion of personal information
  • Restriction of processing your personal information
  • Transfer of your personal information
  • Objection to processing your personal information
  • Requesting a copy of personal information safeguards used
  • Lodging a complaint with your local supervisory authority
  • Receiving timely notices of any data breaches

If you wish to access any of the above-mentioned rights, or other rights that you may have under Applicable Laws, we may ask you for additional information to confirm your identity and for security purposes, in particular before disclosing personal information to you. We reserve the right to charge a fee where permitted by Applicable Laws, for instance if your request is manifestly unfounded or excessive.

You can exercise your rights by contacting us. Subject to legal and other permissible considerations, we will make every reasonable effort to honour your request promptly or inform you if we require further information in order to fulfil your request.

We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.

Right to access personal information

You have a right to request that we provide you with a copy of your personal information that we hold and you have the right to be informed of; (a) the source of your personal information; (b) the purposes, legal basis and methods of processing; (c) the data controller’s identity; and (d) the entities or categories of entities to whom your personal information may be transferred.

We are not required to comply with your request to erase personal information if the processing of your personal information is necessary:

  • for compliance with a legal obligation; or
  • for the establishment, exercise or defence of legal claims;

Right to restrict the processing of your personal information

You can ask us to restrict your personal information, but only where:

  • its accuracy is contested, to allow us to verify its accuracy; or
  • the processing is unlawful, but you do not want it erased; or
  • it is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise or defend legal claims; or
  • you have exercised the right to object, and verification of overriding grounds is pending.

We can continue to use your personal information following a request for restriction, where:

  • we have your consent; or
  • to establish, exercise or defend legal claims; or
  • to protect the rights of another natural or legal person.

Right to transfer your personal information

You can ask us to provide your personal information to you in a structured, commonly used, machine readable format, or you can ask to have it transferred directly to another data controller, but in each case only where:

  • the processing is based on your consent or on the performance of a contract with you; and
  • the processing is carried out by automated means.

Right to object to the processing of your personal information

You can object to any processing of your personal information which has our legitimate interests as its legal basis, if you believe your fundamental rights and freedoms outweigh our legitimate interests.

If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.

Right to object to how we use your personal information for direct marketing purposes

You can request that we change the way in which we contact you for marketing purposes. You can request that we do not transfer your personal information to unaffiliated third parties for the purposes of direct marketing or any other purposes.

Right to obtain a copy of personal information safeguards

You can ask to obtain a copy of, or reference to, the safeguards used to protect your personal information. We may redact certain details from the safeguards to protect security and commercial decisions.

Right to lodge a complaint with your local supervisory authority

You have a right to lodge a complaint with your local data protection supervisory authority if you have concerns about how we are processing your personal information.

We ask that you please attempt to resolve any issues with us first, although you have a right to contact your supervisory authority at any time.

Your California Privacy Rights

We do not respond to “Do Not Track” signals or similar mechanisms as contemplated by California AB-70.

Cookie Policy

Cookies implemented by Fundamentals First

The following table indicate the cookies implemented by Fundamentals First and their purpose.

_gaUsed to distinguish users
_gatUsed to distinguish users
_gidUsed to throttle response rate

Cookies from other companies & social networking websites

During your visit to the site you may notice some cookies that are not related to Fundamentals First. This happens when you visit a page with content embedded from a third party (e.g. YouTube videos) or use some of the links to social networking sites. These websites may place cookies on your computer.

Fundamentals First does not control how a third party uses their cookies. You should check these third-party websites’ privacy policies for more information about their cookies if you are concerned about this.

Turning cookies off

If you want to delete any cookies that are already on your computer or stop future cookies then we suggest reviewing information on

You will still be able to access our website, you may find certain features limited as a result.

Contact us

The primary point of contact for all issues arising from this privacy notice is the Data Protection Lead who can be contacted as follows:

+44 (0)113 320 6151

Fundamentals First Ltd
50 Beech Road,
North Yorkshire,

If you have any questions, concerns or complaints regarding our compliance with this privacy notice, the information we hold about you or if you wish to exercise your rights, we encourage you to first contact us. We will investigate and attempt to resolve complaints and disputes and make every reasonable effort to honour your wish to exercise your rights as quickly as possible, and in any event, within the timescales provided by data protection laws.


We may amend this privacy notice from time to time to keep it up to date with legal requirements and the way we operate our business and will place any updates on this webpage. This privacy notice was last updated on 01/11/2020. Please regularly check these pages for the latest version of this notice. If we make fundamental changes to this privacy notice, we will seek to inform you by notice on our website or email. By using the website or otherwise interacting with us after such changes have been made (and notice has been given, as applicable), you are deemed to have accepted such changes. Please refer back to this privacy policy on a regular basis.

Issue Date of Privacy Notice: 01/11/2020.

Contact Fundamentals First
× Contact Us