Privacy Policy

This policy explains how Ridgeline Tubes Limited collects, uses, and protects personal information when you visit ridgelinetubes.com, request a sample, ask us a technical question, sign up for our newsletter, or otherwise contact us. It is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use and Access) Act 2025, and the Privacy and Electronic Communications Regulations (PECR).

We have tried to write this in plain English. If anything is unclear, email sales@ridgelinetubes.com with “Privacy” in the subject line and we will explain it.

1. Who we are

Ridgeline Tubes Limited (registered in England and Wales, company number 15830887) is the data controller for the personal information described in this policy.

• Registered office: Sunnybank, Giantswood Lane, Somerford Booths, Cheshire, CW12 2JR, United Kingdom
• Email (privacy queries): sales@ridgelinetubes.com (please put “Privacy” in the subject line)
• ICO registration: Ridgeline Tubes Limited is registered with the UK Information Commissioner’s Office.

We are not required to appoint a Data Protection Officer. Privacy queries are handled by our management team via the contact details above.

2. What information we collect and when

2.1 Information you give us

You give us personal information when you complete a form on our website, email us, call us, or interact with us at a trade event. This typically includes:

• Your first name and last name
• Your work email address
• The company you work for
• Your role or job title
• Your phone number (where you choose to give it)
• Information about your project: application type, pipe sizes, location, timing
• Any other information you choose to include in a message to us

The website currently uses the following forms. Each form indicates which fields are required.

• Sample request (offcut and full project)
• CPD session request
• General contact form
• Heat-pump pressure-loss calculator access

2.2 Information we collect automatically

When you visit the website, we automatically collect some technical information about your visit. This is collected through cookies and similar technologies (see section 6). It includes:

• Your IP address (truncated where the analytics tool supports it)
• The type of device, browser, and operating system you are using
• The pages you visit, the order you visit them in, and how long you spend on each
• The website that referred you to us, if any
• An anonymous identifier that lets us recognise a returning visitor across pages

2.3 Information from other sources

Occasionally we receive personal information from third parties, for example when a colleague at your company refers you to us, when a merchant or distributor passes us a lead, or when we look up publicly available business contact details on a company website, Companies House, or LinkedIn. Where we obtain your data from a source other than you directly, we will tell you about that processing within a reasonable period, unless an exemption applies.

3. How we use your information and our lawful basis

UK GDPR requires us to have a “lawful basis” for each purpose we process your data for. For each main purpose below, we explain what we use the information for and which lawful basis applies.

3.1 Responding to your enquiry, sample request, or quote request

If you contact us through a form, email, or phone call, we use your details to respond, follow up on your project, send the sample or quote you asked for, and answer technical questions.

• Lawful basis: performance of a contract or steps taken at your request to enter into a contract (UK GDPR Article 6(1)(b)), and our legitimate interest in responding to business enquiries from prospective customers (Article 6(1)(f)).

3.2 Sales follow-up

After your initial enquiry, a member of our team may contact you by email or phone to discuss your project, share technical information, or check whether the product you received is suitable.

• Lawful basis: our legitimate interest in following up on commercial enquiries and developing customer relationships (Article 6(1)(f)). You can ask us to stop sales follow-up at any time and we will.

3.3 Marketing emails and newsletters

Where you have opted in, we send occasional emails about Ridgeline products, certifications, case studies, technical updates, training opportunities, and trade events. We do not buy or rent marketing lists.

• Lawful basis: your consent (Article 6(1)(a) and PECR Regulation 22). If you contacted us using a corporate email address (limited company, LLP, or similar), we may also rely on legitimate interest in business-to-business marketing under PECR. Either way you can withdraw your consent or object at any time using the “unsubscribe” link in any email or by emailing us.

3.4 Fulfilling sample, calculator, or CPD requests

To send a sample, supply pressure-loss screening results, or arrange a CPD session, we use your contact details and your project information.

• Lawful basis: performance of a contract or steps taken at your request to enter into a contract (Article 6(1)(b)). Where you are not yet a customer, our legitimate interest in responding to product enquiries (Article 6(1)(f)).

3.5 Website analytics and site improvement

We use a small set of analytics tools to understand how visitors use the site, which pages are most useful, and where the site needs improvement. We do not use analytics to identify you personally as a website visitor.

• Lawful basis: your consent through our cookie banner (Article 6(1)(a) and PECR Regulation 6). You can change your cookie settings at any time using the cookie preferences link in the website footer.

3.6 Online advertising and retargeting

We use advertising platforms to show Ridgeline ads to relevant audiences and to people who have visited our site. Where these platforms set cookies or use tracking pixels on our site, this is conditional on your consent.

• Lawful basis: your consent through our cookie banner (Article 6(1)(a) and PECR Regulation 6). You can withdraw consent at any time.

3.7 Compliance with law and protecting our business

We may use your information to comply with our legal obligations, to enforce our terms, to protect our business and our customers from fraud or abuse, and to defend against legal claims.

• Lawful basis: legal obligation (Article 6(1)(c)) where the law requires us to process the data, or our legitimate interest in running our business safely and lawfully (Article 6(1)(f)).

4. Who we share your information with

We do not sell your personal information. We share it only where it is necessary for the purposes described above. The main categories of recipient are:

4.1 Service providers acting on our behalf

These are companies we use to run the business. They process personal data on our instructions under a written contract that meets the requirements of UK GDPR Article 28.

• HubSpot Inc. Our customer relationship management (CRM), marketing email, web forms, and lead capture platform. HubSpot stores form submissions, contact records, email engagement data, and website analytics generated by our HubSpot tracking code.
• Our website hosting provider, which hosts the ridgelinetubes.com site and stores standard server logs.
• Site performance, security, and consent-management plugins running on the site to provide caching, security, and cookie-consent functionality.
• Email and productivity providers used by our team to read and reply to messages.
• Sample fulfilment partners, such as couriers, where they need your address to deliver a sample to you.
• Professional advisors, such as accountants, auditors, and legal advisors, where required.

4.2 Group companies

We may share your information within our group of companies where this is needed to respond to your enquiry or to manage the commercial relationship.

4.3 When the law requires us to share

We may share information with regulators, tax authorities, law enforcement, or the courts where we are legally required to.

4.4 In the event of a sale or restructure

If Ridgeline Tubes Limited or any part of its business is sold, restructured, or transferred, your personal information may be shared with the buyer or potential buyer under appropriate confidentiality terms.

5. International transfers

Some of our service providers are based outside the United Kingdom. The main transfer is to HubSpot Inc., based in the United States, which processes contact records, form submissions, and website analytics on our behalf.

We rely on the UK-US Data Bridge for this transfer. The UK-US Data Bridge is an extension to the EU-US Data Privacy Framework that came into force on 12 October 2023. It allows UK organisations to send personal data to US organisations that have self-certified to both the EU-US Data Privacy Framework and the UK Extension. HubSpot Inc. has self-certified to both and remains an active participant; you can verify the certification on the official Data Privacy Framework list at dataprivacyframework.gov.

Where any other service provider is outside the UK and is not covered by an adequacy decision or the UK-US Data Bridge, we use the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional safeguards appropriate to the transfer. You can ask us for a copy of the transfer mechanism we rely on for any specific provider.

6. Cookies and similar technologies

A cookie is a small text file that a website places on your device when you visit. We also use similar technologies such as pixels, tracking scripts, and local storage. We refer to all of these as “cookies” in this section.

When you first visit ridgelinetubes.com you will see a cookie banner. We only set strictly necessary cookies before you give us a choice. Functional, analytics, and marketing cookies are only set if you opt in. You can change your choice at any time using the cookie preferences link in the website footer.

6.1 Strictly necessary cookies

These cookies make the site work. They cannot be switched off. They include session and security cookies set by the website, a cookie set by the caching layer to deliver cached pages, and a cookie that records your cookie preferences so we do not have to ask you again on every page.

Lawful basis: not consent. PECR exempts cookies that are strictly necessary to provide a service you have requested.

6.2 Functionality cookies

These remember choices you make, such as preferred language or region, so we can give you a more personalised experience. They are set only if you opt in.

6.3 Analytics cookies

These help us understand how visitors use the site. We use HubSpot’s website analytics to count visits, track which pages are popular, and measure how marketing campaigns are performing. The HubSpot cookies set in this category include:

• __hstc (HubSpot main analytics cookie, typically expires after 6 months)
• hubspotutk (HubSpot anonymous visitor token, typically expires after 6 months)
• __hssc (HubSpot session cookie, typically expires after 30 minutes)
• __hssrc (HubSpot session cookie set when a session ends)
• messagesUtk (set if you interact with the HubSpot chat widget)

Lawful basis: your consent.

6.4 Marketing and advertising cookies

These are used by advertising platforms to show you relevant Ridgeline ads on other sites, to measure ad effectiveness, and to avoid showing you the same ad repeatedly. Where we run advertising on Meta (Facebook and Instagram), we use the Meta Pixel and the Meta Conversions API, which may use cookies and pixels including _fbp and _fbc. We may run similar tracking on LinkedIn and Google Ads where campaigns are active.

Lawful basis: your consent.

6.5 Third-party content

Pages on this site may load assets from third-party services such as Google Fonts. These services may receive your IP address and basic technical information about your request to deliver the asset. Where these requests involve setting non-essential cookies, they are governed by our cookie banner.

6.6 How to manage cookies

You can manage your cookie choices using the cookie preferences link in the website footer. You can also manage cookies directly in your browser settings, including blocking all cookies or deleting cookies that have already been set. Be aware that blocking strictly necessary cookies may stop parts of the site working properly.

7. How long we keep your information

We keep personal information only for as long as we need it. The main retention periods we apply are:

• Sales and customer records: up to 7 years from the end of the financial year in which the last transaction occurred. This aligns with our accounting record-keeping obligations.
• Sample, CPD, and quote requests that did not become customers: up to 24 months from the last meaningful contact, after which the record is reviewed and deleted or anonymised if no continuing relationship exists.
• Marketing-consented contacts: retained for as long as you remain subscribed, plus a reasonable period to honour any unsubscribe request and demonstrate compliance. If you remain unengaged for 24 months we will normally suppress and then delete the record.
• General website form submissions where no follow-up relationship develops: up to 6 months.
• Website analytics: aggregated reports may be retained indefinitely; cookie-level data follows the cookie expiry periods set out in section 6.
• Server and security logs: typically up to 90 days, longer if needed for a specific security investigation.
• Records we are legally required to keep (for example tax records, signed contracts, certifications): for the period required by law.

We review retention periods regularly and reduce them where the original purpose has been met. After a record’s retention period expires, we either delete it securely or anonymise it so it can no longer be linked back to you.

8. Your rights and how to exercise them

Under UK GDPR you have the following rights in respect of your personal information.

• The right to be informed. You have the right to be told what we do with your data; this policy is the main way we meet that right.
• The right of access. You can ask us for a copy of the personal information we hold about you. We will respond within one month. We may extend this by up to two further months for complex requests and will tell you if we do.
• The right to rectification. You can ask us to correct information that is inaccurate or incomplete.
• The right to erasure. You can ask us to delete personal information in certain circumstances, for example if we no longer need it for the original purpose.
• The right to restrict processing. You can ask us to limit how we use your data in certain circumstances, for example while we investigate an accuracy challenge.
• The right to data portability. Where we process your data on the basis of consent or contract and by automated means, you can ask us to give you a copy in a structured, commonly used, machine-readable format, or to send it directly to another controller where technically feasible.
• The right to object. You can object to us using your data for direct marketing at any time and we will stop. You can also object to processing based on our legitimate interest, and we will stop unless we have a compelling reason to continue that overrides your interests.
• Rights related to automated decision-making and profiling. We do not make decisions about you that produce legal or similarly significant effects using automated decision-making alone.
• The right to withdraw consent. Where we rely on consent (such as for marketing emails or non-essential cookies), you can withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.
• The right to complain to us directly about how we have handled your personal data. We will respond and explain what we will do.

To exercise any of these rights, please email sales@ridgelinetubes.com with “Privacy” in the subject line, or write to us at the registered office address in section 1. There is normally no charge. We may need to verify your identity before we respond.

9. Marketing communications

We send marketing emails only to people who have asked to receive them or who we are confident expect to hear from us under PECR’s business-to-business rules.

• If you are a sole trader, a partnership in England, Wales, or Northern Ireland, or any individual subscriber, we will only email you marketing material where you have given us consent or where the “soft opt-in” rule applies (you gave us your details during a sale or negotiation, we are marketing similar products, and you were given a clear chance to opt out at the start).
• If you contacted us using a limited company, LLP, partnership in Scotland, or other corporate email address, PECR allows us to send marketing email on the basis of legitimate interest. You still have the right to object at any time and we will stop straight away.

Every marketing email we send includes an unsubscribe link. You can also opt out by emailing sales@ridgelinetubes.com.

10. How to contact us about privacy

For any privacy question, request, or concern, please contact:

• Email: sales@ridgelinetubes.com (mark the subject line “Privacy”)
• Post: Privacy, Ridgeline Tubes Limited, Sunnybank, Giantswood Lane, Somerford Booths, Cheshire, CW12 2JR, United Kingdom

We will normally acknowledge a privacy request within five working days and respond fully within one month.

11. Complaints and the Information Commissioner’s Office

If you are not satisfied with how we have handled your personal data or a privacy request, you have the right to complain to the UK Information Commissioner’s Office (ICO), the UK’s data protection regulator. We would appreciate the chance to put things right first, so we ask that you contact us before escalating.

You can contact the ICO at:

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

12. Security

We take appropriate technical and organisational measures to protect personal information from accidental loss, unauthorised access, disclosure, alteration, and destruction. These include access controls on our CRM, encryption of data in transit, secure passwords, staff training, and contracts with service providers that require equivalent protection.

No system is perfectly secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where the risk is high, we will notify you directly without undue delay.

13. Children

Ridgeline Tubes is a business-to-business website aimed at professionals in the construction and heating sectors. It is not intended for children, and we do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time to reflect changes in our business, our service providers, or the law. We will update the effective date at the top of this policy and, where the changes are significant, we will draw your attention to them on the website or by email.

Last updated: 26 May 2026