Skip to main content
Privacy Notice

Jonathan Potts Ltd, trading as Potts Metals (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, store and share your personal information when you interact with us and how we protect any personal data that we may collect about you and informs you of your privacy rights and how the law protects you.

1. Who We Are
Business Name: Jonathan Potts Ltd, trading as Potts Metals

Company Registration No: 02386473
Registered Address: Unit 17 Marchington Industrial Estate, Stubby Lane,
Marchington, Uttoxeter, United Kingdom, ST14 8LP
Trading Address: Estate Rd 1, South Humberside Ind Est, Grimsby DN31 2TB
Contact Us:  01472 355946 | [email protected]
Data Controller: Rob Brough

2. What Personal Data We Collect
We may collect the following types of personal data:

Purpose / Activity Type of Data Lawful Basis for Processing
To comply with scrap metal regulations when purchasing and selling metal (a) Name (b) Address (c) Photo ID (d) Vehicle registration Legal obligation under the Scrap Metal Dealers Act 2013
CCTV monitoring for security and safety (a) Video footage of individuals onsite Legitimate interest (crime prevention and site safety)
To process payments and issue receipts (a) Bank/payment details (b) Contact details Contractual necessity
To respond to enquiries or provide quotes (a) Name (b) Email or phone Legitimate interest (business communication)
To maintain customer records (a) Name (b) ID copy (c) Transaction history Legal obligation / legitimate interest
Marketing communications (if opted in) (a) Name (b) Email or phone Consent

3. CCTV Usage
Our premises are monitored by CCTV for the safety of our staff, customers, and property. Footage is stored securely and retained for a limited period unless required for investigation of an incident.

4. How We Use Your Data
We only use your personal data where the law allows us to. Most commonly, we use it to:

  • Comply with legal obligations (e.g. identity checks under scrap metal laws)
  • Process payments and conduct our business
  • Communicate with you regarding your enquiry or transaction
  • Ensure site security through CCTV

5. Who We Share Your Data With
We only share your data when necessary and with trusted third parties such as:

  • Law enforcement agencies (when legally required)
  • Payment processors (e.g. banks)
  • Regulatory authorities
  • IT and security providers (for CCTV and data storage)
  • In-group service partner brands where requested by you as part of a service request

We do not sell or rent your data to third parties.

6. How Long We Keep Your Data
We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including to comply with legal, accounting, or reporting requirements. For example:

  • ID records: retained for up to 3 years (in line with scrap metal licensing regulations)
  • CCTV footage: typically retained for up to 30 days
  • Transaction records: retained for 6–7 years for HMRC compliance

7. Your Data Protection Rights
Under UK GDPR and PECR, you have the right to:

  • Access your personal data
  • Request correction of your data
  • Request erasure (in some cases)
  • Object to processing
  • Restrict processing
  • Withdraw consent (where we rely on consent)

To exercise these rights, please contact: [email protected]

8. How We Protect Your Data
We implement appropriate security measures including:

  • Secure ID and payment data storage
  • Restricted access to CCTV recordings
  • Staff training on data handling
  • Encryption and password-protected systems

9. Changes to This Policy
We may update this Privacy notice from time to time. The latest version will always be posted on our website or available on request.

10. How To Contact Us
Questions, comments and requests regarding this privacy notice are welcomed and should be addressed to [email protected]:

Compliance Officer

Jonathan Potts Ltd
Estate Road 1,
South Humberside Industrial Estate,
Grimsby DN31 2TB

If you would like to contact the Data Controller, email [email protected]

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk
This policy is under regular review. This policy was last reviewed on 8 July 2025.