Legal
Privacy Policy
Last updated: 28 October 2026
This Privacy Policy explains how we collect, use and protect personal information when you visit rippadiggersuk.co.uk, contact us, or buy machinery or attachments from us.
1. Who we are
The website is operated by Matthew Miller, a sole trader trading as Rippa Machinery UK. In this Policy, “we”, “us” and “our” mean Matthew Miller trading as Rippa Machinery UK.
We are the data controller responsible for deciding how and why your personal information is used.
Contact details
- Email: rippamachineryuk@gmail.com
- Postal address: The Old Factory, Henry Street, Langholm, DG13 0AR
- Telephone: +44 (0)13873 51901
If you have a question or wish to exercise your privacy rights, contact us using the details above.
2. Personal information we collect
Depending on how you interact with us, we may collect:
- Identity and contact details: your name, email address, telephone number and billing address.
- Delivery information: delivery address, access or delivery instructions and relevant contact details.
- Order information: machinery or attachments you enquire about or buy, order details, prices, deposit and payment status, delivery details and communications about your order.
- Payment information: payment information is handled by our payment processor. We do not store full payment card details on our website. The payment processor may provide us with limited information, such as payment confirmation, transaction reference and partial card details.
- Enquiry and communication information: the content of messages you send us, including information you choose to provide by email, telephone, website form or other communication channel.
- Website and device information: technical information such as IP address, browser type, device information, pages visited, time and date of visits, and information about how you use the website. This may be collected through server logs, cookies or similar technologies.
Please do not send us sensitive personal information unless it is necessary for your enquiry and you are comfortable doing so. We do not intentionally request special category personal information.
3. How and why we use your information
We use personal information for the purposes below and rely on the relevant lawful basis under the UK GDPR.
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and providing quotations | Taking steps at your request before entering into a contract, or our legitimate interests in responding to business enquiries |
| Processing and fulfilling orders, taking deposits, arranging delivery and providing after-sales support | Performance of a contract with you |
| Processing payments and keeping transaction records | Performance of a contract and compliance with our legal obligations |
| Keeping tax, accounting and other required business records | Compliance with a legal obligation |
| Operating, maintaining and securing the website, preventing fraud and diagnosing technical issues | Our legitimate interests in running a secure and effective business website |
| Sending marketing emails | Your consent, where required by law. Where the law permits us to contact existing customers about similar products or services without consent, we may rely on that permission and will always provide an easy way to opt out |
| Using non-essential cookies or similar technologies | Your consent |
| Handling complaints, enforcing our agreements and establishing or defending legal claims | Our legitimate interests in protecting and managing our business and legal rights |
Where we rely on legitimate interests, we consider your rights and interests and use your information only where those interests are not overridden by your privacy rights.
You can withdraw consent at any time where we rely on consent. This will not affect processing carried out before you withdrew it.
4. Marketing
We may send you marketing emails about our machinery, attachments, offers or services where you have consented or where applicable law allows us to contact you as an existing customer about similar products or services.
You can stop marketing emails at any time by using the unsubscribe link in the email or contacting us at rippamachineryuk@gmail.com. We will continue to send necessary service messages about an order or enquiry where needed.
We keep a minimal record of your marketing preference or opt-out so that we can respect your choice.
5. Cookies and similar technologies
Our website may use cookies and similar technologies. Some are necessary for the website to function, such as remembering basic settings or supporting security. Other cookies, including analytics or advertising cookies, are not essential.
We will ask for your consent before using non-essential cookies where required by law. You can change or withdraw your cookie choices using the website’s cookie settings tool, if available, or through your browser settings. Blocking some cookies may affect how the website works.
The cookies and similar technologies actually used on the website, their providers, purposes and expiry periods are listed in our Cookie Notice, and cookie choices can be changed at any time through the website’s cookie settings tool.
6. Who we share information with
We may share relevant information with service providers who help us run our business, including:
- payment processors, to process payments securely;
- delivery and transport companies, to deliver machinery and attachments;
- website hosting, website support and IT providers;
- accountants and professional advisers; and
- public authorities, regulators, courts or law enforcement bodies where we are legally required to do so or where necessary to protect our legal rights.
We require service providers who process personal information for us to protect it and use it only for the services they provide. We do not sell your personal information.
[Add the names of the website host, payment processor and other key providers, where applicable.]
7. International transfers
We aim to use service providers that process personal information in the UK or the European Economic Area (EEA). Some providers may process information in other countries. If personal information is transferred outside the UK or EEA, we will use an appropriate legal safeguard where required, such as an adequacy regulation or an approved data transfer agreement, and take any additional steps required by law.
You can contact us for further information about relevant international transfers and safeguards.
8. How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including to meet legal, accounting and reporting requirements.
Our usual retention periods are:
- Order, invoice, payment and tax records: generally up to six years after the end of the relevant accounting or tax period, or longer if the law requires or a legal matter is ongoing.
- General enquiries that do not result in an order: generally 12 months after our last contact with you.
- Customer service, warranty and complaint records: for as long as needed to deal with the matter and for a reasonable period afterwards, taking account of applicable legal requirements and potential claims.
- Marketing information: until you unsubscribe or withdraw consent. We may retain limited information on a suppression list so we can continue to respect your opt-out.
- Website logs and cookie information: for the period needed for security, operation or the stated cookie purpose, as set out in the relevant cookie information.
We may keep information for longer where necessary to comply with a legal obligation or establish, exercise or defend a legal claim. When information is no longer required, we will securely delete it or anonymise it.
9. How we protect your information
We use reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, alteration or disclosure. These measures may include access controls, secure systems and using service providers that are expected to protect information appropriately.
No website, electronic transmission or storage system can be guaranteed to be completely secure. Please contact us promptly if you believe your information has been accessed or used without authorisation.
10. Your rights
Depending on the circumstances and subject to legal exceptions, you have the right to:
- Access your personal information and receive a copy.
- Correct information that is inaccurate or incomplete.
- Request erasure of your information.
- Request restriction of how we use your information.
- Object to processing based on our legitimate interests, including direct marketing.
- Receive or request transfer of certain information in a portable format, where the right applies.
- Withdraw consent where we rely on consent. Withdrawal does not affect processing carried out before withdrawal.
To exercise a right, contact us at rippamachineryuk@gmail.com or use the postal address in section 1. We may need to verify your identity before responding. We will respond within the time required by law; in some cases, the response period may be extended where the law allows.
You may also complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:
- Website: ico.org.uk/make-a-complaint
- Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would welcome the opportunity to address your concerns first, so please consider contacting us before making a complaint.
11. Automated decisions
We do not make decisions about you solely by automated means that have legal or similarly significant effects.
12. Third-party websites
Our website may contain links to websites operated by other organisations. Those websites have their own privacy policies, and we are not responsible for their content or privacy practices. Please read their policies before providing personal information.
13. Changes to this Policy
We may update this Policy from time to time. The latest version will be published on rippadiggersuk.co.uk with the updated date shown at the top.