Paramount Plates Ltd · Effective from 4 April 2025 · Last updated 6 October 2026

This policy explains how Paramount Plates Ltd uses personal information when you visit paramountplates.co.uk, order from us, send us documents or contact us. It also covers your customer account at account.paramountplates.com. "We", "us" and "our" mean Paramount Plates Ltd. "You" means anyone whose information we use.

1. Who we are

Paramount Plates Ltd is the controller of your personal information. We are a company registered in England and Wales (company number 16366988). Our registered office is 42 Moorside, Spennymoor, County Durham, DL16 7EA. We are registered with the DVLA as a Registered Number Plate Supplier (RNPS).

For anything about your personal information, email info@paramountplates.co.uk, call 0191 367 3451 (Monday to Saturday, 8:00am to 4:30pm) or write to us at the address above.

2. The information we collect

Information you give us

• Order details: your name, email address, phone number, delivery and billing addresses, what you ordered, and the plate details you choose (registration number, style, badges and spacing).
• Payment details: you pay through Shopify Payments, PayPal, Klarna, Apple Pay, Google Pay or Shop Pay. We never see or store your full card number.
• Verification documents: before we can make road-legal plates, the law requires us to see proof of your identity and proof that you are entitled to the registration. This means images or copies of documents such as a driving licence, passport, V5C logbook or certificate of entitlement. They can show your name, address, date of birth, photograph and document numbers.
• Your customer account: your email address and the sign-in codes we send you, and your order history.
• Messages: what you send us through our contact form, by email, by phone or on WhatsApp.
• Marketing choices: whether you have asked to receive our emails.

Information collected automatically

• Technical information: your IP address, browser and device type. This is needed to show you the website securely.
• Cookies and similar technologies: some are essential and always on. Others are used for analytics and advertising only if you accept them in our cookie banner. Our Cookie Policy lists every one.

Information from other sources

• Royal Mail tells us when your parcel has been delivered.
• Payment providers tell us whether a payment succeeded and whether it was flagged as a fraud risk.
• If you accept advertising cookies, Google, Meta and TikTok give us reports on how our adverts performed. These reports are about groups of people, not about you individually.

3. How we use your information and our legal reasons

Data protection law only lets us use your information when we have a lawful basis. These are ours:

Where we rely on legitimate interests, we have checked that they are not outweighed by your rights. You can ask us for details.

We do not make decisions about you by automated means alone that have legal or similarly significant effects. Payment providers check payments automatically for fraud. If a payment is flagged, a person at Paramount Plates reviews it before we cancel an order.

4. Your verification documents

As a Registered Number Plate Supplier we must check who you are and that you are entitled to the registration before we make your plates. You can send your documents through our upload page, by email to documents@paramountplates.co.uk, or by post.

• Where they go: documents sent through the upload page are stored in our Google Workspace account, which only authorised Paramount Plates staff can access.
• What we keep: once we have checked your documents, we record what the law requires: your name and address, the registration number, the type of each document and its reference number. We also keep copies of the documents themselves with that record, however you sent them to us.
• How long: we keep the record and the document copies for 3 years, in line with the record-keeping period for Registered Number Plate Suppliers. After 3 years they are deleted automatically. Paper copies are stored securely and destroyed at the same time.
• Who can see them: only our staff, to check your order. We must show the sales record to the police, the DVLA, the DVSA or Trading Standards if they ask to inspect it.

5. Who we share your information with

We share information only with these organisations, and only as much as they need:

• Shopify, which runs our website, checkout and customer accounts and processes card payments through Shopify Payments.
• Payment providers: PayPal, Klarna, Apple Pay, Google Pay and Shop Pay, when you choose them at checkout. They also use your information for their own fraud prevention and legal duties.
• Royal Mail, to deliver your order and send you tracking updates.
• Google, which hosts our document storage and email (Google Workspace) and, if you accept the cookies, provides Google Analytics, Google Ads and Google Merchant Center.
• Meta (Facebook and Instagram), if you accept marketing cookies (the Meta Pixel), and WhatsApp if you choose to message us there.
• TikTok, if you accept marketing cookies (the TikTok Pixel).
• Our professional advisers, such as our accountant and insurer, when they need it.
• Authorities: the police, the DVLA, the DVSA, Trading Standards, HMRC or a court, when the law requires.

When Google, Meta and TikTok receive information through advertising cookies, they also use it for their own purposes under their own privacy policies. That is why we ask for your consent first.

We do not sell your personal information. If we ever sell or restructure our business, the buyer could receive customer records, but only on the same terms as this policy.

6. International transfers

Some of these organisations store or access information outside the UK, mainly in the European Economic Area, Canada and the United States. When they do, the transfer is protected in one of these ways:

• UK adequacy regulations, for example for the EEA and Canada.
• The UK Extension to the EU–US Data Privacy Framework, where the US company is certified.
• The ICO's International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

You can ask us for details of the safeguard that applies.

7. How long we keep your information

8. Your rights

You have the right to:

• access a copy of your personal information
• correct information that is wrong or incomplete
• have information deleted when we no longer need it or have no lawful reason to keep it
• restrict how we use it in some circumstances
• object to uses based on our legitimate interests, and to direct marketing at any time
• move information you gave us to another organisation (data portability), where we use it based on contract or consent
• withdraw consent at any time, for example by changing your cookie settings or unsubscribing from emails. This does not affect what we did before you withdrew it.

Some rights are limited by law. For example, we cannot delete the RNPS sales record before the 3 years are up. If a limit applies, we will tell you which one.

To use your rights, email info@paramountplates.co.uk. We will reply within one month. If your request is complex, we can take up to two more months, and we will tell you if we need to.

9. Complaints

If you are unhappy with how we have handled your information, please tell us first at info@paramountplates.co.uk. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay.

You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

10. Cookies

When you first visit, our cookie banner asks whether you accept analytics and marketing cookies. Until you accept, we use only cookies that are essential for the website to work. You can change your choice at any time with the Change your cookie settings button on our Cookie Policy page, which is linked at the bottom of every page. That page lists every cookie, who sets it, what it does and how long it lasts. We check the website regularly and update the list when anything changes.

11. Security

Our website uses HTTPS encryption. Card payments are handled by PCI DSS-compliant payment providers. Verification documents are kept in an access-restricted account that only authorised staff can use. If a data breach is likely to put your rights at risk, we will tell you and the ICO as the law requires.

12. Children

You must be 18 or over to order from us. We do not knowingly collect information from anyone under 18. If you believe a child has sent us their information, contact us and we will delete it.

13. Changes to this policy

We will update this policy when our practices or the law change. The date at the top shows the latest version. If we make a significant change, we will tell you on the website or by email before it applies.