Privacy & Data Protection Policy

The data controller responsible for the processing of your information under this policy is:

• Company Name: PETRA TRADING & CONTRACTING LTD
• Company Registration Number: 16660036 (Registered in England & Wales)
• Registered Office: 61 Bridge Street, Kington, Herefordshire, HR5 3DJ, United Kingdom
• Designated Data Compliance Officer: info@petratrading.co.uk

We are registered and operate in strict compliance with the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

We collect and process commercial and business contact information necessary to provide international procurement, sourcing, and material quotation services:

• Commercial RFQ & BOQ Data: Bills of Quantities (BOQ), material take-offs (MTO), technical drawings (.dwg, .pdf), engineering specifications, and delivery destination details submitted through our forms.
• Business Contact Information: Professional name, corporate email address, corporate telephone/WhatsApp number, company name, and job title.
• Technical & Telemetry Data: IP address, browser type, referring URL, session timestamps, and interaction events recorded strictly for security, anti-spam validation (PetraAntiSpam), and platform performance.

Legal Basis: We process this data pursuant to Article 6(1)(b) of UK GDPR (performance of a contract or taking pre-contractual steps at your request) and Article 6(1)(f) (our legitimate commercial interests in evaluating procurement scopes and preventing fraud).

All project specifications, architectural drawings, tender schedules, and client BOQ documents submitted to PETRA are treated as strictly confidential commercial property. We do not sell, rent, or trade your data or technical drawings to any third-party marketing entities.

Technical data is disclosed solely to vetted manufacturing mills, testing laboratories, and certified inspection bodies (e.g., SGS, Bureau Veritas) strictly as required to obtain mill test certificates and firm commercial pricing for your project.

Because PETRA coordinates cross-border supply chains connecting UK/EU mills with project sites across the GCC (Qatar, Saudi Arabia, UAE, Oman, Kuwait, Bahrain) and Africa, data may occasionally be transferred to overseas logistics coordinators and freight forwarding partners strictly to fulfill Incoterms delivery requirements.

Where cross-border transfers occur, we implement appropriate contractual safeguards conforming to standard data protection clauses approved by the UK Information Commissioner's Office (ICO).

Commercial quotations and engineering transmittals are retained for seven (7) years to comply with statutory UK accounting, VAT, and corporate record-keeping requirements under the UK Companies Act 2006. Technical drawings and non-contractual inquiries are archived securely or purged when no longer required.

We employ cryptographic HTTPS/TLS 1.3 transport encryption, firewalled server infrastructure, and strict role-based access controls to prevent unauthorized access or disclosure.

Under UK data protection law, you have the right to:

• Request access to your personal data held in our commercial registry.
• Request rectification of inaccurate corporate or contact records.
• Request erasure of records, subject to statutory accounting and tax retention duties.
• Object to or restrict the processing of your data under specific statutory conditions.

To exercise any of these rights, please contact our compliance desk in writing at info@petratrading.co.uk. We respond to verified requests within thirty (30) days without charge.