LEGAL
Privacy Notice
Last updated: 21 July 2026
We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended, including by the Data (Use and Access) Act 2025.
1. About this notice
This privacy notice explains how The House of Amritsar collects and uses personal information when you visit TheHouseOfAmritsar.com, contact us, submit an enquiry, participate in our research or surveys, or otherwise interact with us. It also explains your data protection rights and how to make a complaint.
We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended, including by the Data (Use and Access) Act 2025.
2. Who we are
Ionida Limited trading as The House of Amritsar is the controller responsible for the personal information described in this notice.
Registered or principal address: 46 St Helens Road, Solihull, B91 2DA
Privacy and data protection email: trade@thehouseofamritsar.com
Data protection complaints route: trade@thehouseofamritsar.com
We have not appointed a data protection officer because our current processing does not require one. We have, however, assigned responsibility for privacy and data protection to the contact above.
3. The personal information we collect
The information we collect depends on how you interact with us. It may include:
- Contact and identity information: your name, email address, telephone number, business name, role and postal address where you choose to provide them.
- Enquiry and correspondence information: the content of messages, trade enquiries, meeting requests, feedback and other communications with us.
- Research and survey information: your answers, preferences, opinions, professional background and any other information you choose to provide in a survey or interview.
- Marketing preferences: whether you have asked to receive or stop receiving updates and the record of that choice.
- Technical and usage information: IP address, browser and device information, pages viewed, referring source, approximate location derived from IP, security events and website interaction data, depending on your cookie choices and our configuration.
- Consent and preference records: records showing the privacy or cookie choices you made and when they were made.
- Rights and complaint information: information needed to identify you, investigate a data protection complaint or respond to a request about your information.
Please do not provide health information, biometric information, information about racial or ethnic origin, religious beliefs, sexual orientation, political opinions or other special category information unless we specifically ask for it and explain why it is needed.
4. How we collect information
- Directly from you when you complete a form, answer a survey, email us, request a meeting, join an event or otherwise communicate with us.
- Automatically from your browser or device through server logs and permitted cookies or similar technologies.
- From service providers that operate forms, surveys, email, website hosting, security or analytics on our behalf.
- From public professional sources, such as a business website or LinkedIn profile, where relevant to a genuine trade enquiry or business relationship.
5. How and why we use personal information
We only use personal information where we have a lawful basis. The table below describes our processing activities.
| Activity | Information used | Purpose | Lawful basis | Proposed retention |
|---|---|---|---|---|
| Responding to enquiries and arranging discussions | Contact, identity and correspondence information | To answer your request, arrange a meeting, discuss a possible trade relationship or take steps you ask us to take before a contract. | Steps requested before a contract; and our legitimate interests in operating the business and responding to genuine enquiries. | Normally 24 months after the last meaningful contact, unless a contract begins or a longer period is needed for a dispute. |
| Trade relationship management | Business contact details, role, communications and relationship history | To manage prospective and existing business relationships, follow up agreed actions and maintain appropriate records. | Contract or steps before a contract; legitimate interests in managing business relationships. | For the relationship and normally 6 years after it ends where records may be relevant to legal or tax matters. |
| Voluntary research, surveys and feedback | Survey responses, opinions, contact details if requested and research records | To understand interest in the proposed collection, improve concepts and analyse market feedback. | Consent where participation or follow-up depends on consent; otherwise legitimate interests in product and market research, subject to your rights. | Identifiable responses: normally 12 months after the relevant research project closes. Anonymised or aggregated findings may be retained indefinitely. |
| Sending optional news and marketing | Contact details, business details, preferences and engagement | To send updates about the collection, launches, events or trade opportunities that you asked to receive or that we are otherwise permitted to send. | Consent where PECR requires it. Legitimate interests may apply to certain corporate business contacts where PECR permits, with a clear opt-out. | Until you unsubscribe, withdraw consent or object; inactive records should be reviewed after 24 months. A minimal suppression record may be retained to respect your opt-out. |
| Operating, protecting and diagnosing the website | Technical, device, log, security and consent information | To deliver the site, prevent misuse, investigate errors, maintain security and record your preferences. | Legitimate interests in providing a secure and reliable website; legal obligation where applicable. | Security and diagnostic logs: normally 90 days, unless needed longer to investigate an incident or establish legal claims. |
| Website analytics | Usage, device, referral and interaction data | To understand aggregate website use and improve content, navigation and performance. | Consent where required by PECR and the UK GDPR. We will only rely on the PECR statistical-purpose exception if the deployment meets every condition and provides a simple, free way to object. | Normally no more than 14 months for identifiable or pseudonymous analytics data; aggregated statistics may be retained longer. |
| Handling rights requests and complaints | Identity, contact, request, complaint and investigation information | To verify requests, investigate concerns, keep people informed, provide outcomes and demonstrate compliance. | Legal obligation and legitimate interests in resolving and documenting issues. | Normally 6 years after closure, depending on the nature of the issue and any legal limitation period. |
| Legal and regulatory compliance | Relevant information from the categories above | To comply with law, protect rights, respond to lawful requests and establish, exercise or defend legal claims. | Legal obligation; legitimate interests; and, where relevant, establishment, exercise or defence of legal claims. | For as long as required by the applicable obligation or claim, normally up to 6 years unless a different period applies. |
6. Cookies and similar technologies
The website uses necessary technologies to provide core functions, and optionally uses Google Analytics (GA4) to understand aggregate website use. Google Analytics is only loaded if you accept it via the cookie banner shown on your first visit.
- Technologies that require consent, including Google Analytics, are not set or accessed before you make an affirmative choice via the cookie banner.
- You can reject optional technologies as easily as you can accept them, and change your choice at any time through the permanent “Cookie settings” link in the site footer.
- If we rely on the PECR statistical-purpose or appearance exception, we will provide clear information and a simple, free way to object. We will not use that exception for advertising, individual tracking or unrelated purposes.
- Your browser may also allow you to block or delete cookies, although this can affect site functionality.
7. Marketing communications
A reply to an enquiry or information you specifically request is not treated as optional marketing. We will only send promotional electronic communications where permitted by PECR and data protection law. Marketing consent will be separate, specific and optional where consent is required.
You can unsubscribe using the link in a marketing email or contact us at any time. If you object to direct marketing, we will stop using your information for that purpose. We may keep a minimal suppression record so that we continue to respect your choice.
8. Sharing personal information
We do not sell personal information. We do not share it with third parties for their own unrelated marketing.
We may disclose information where necessary to:
- Website hosting, content delivery, technical support and security providers.
- Form, survey, customer relationship, email delivery and appointment providers.
- Analytics providers, such as Google Analytics, but only in accordance with your cookie choices and the configured purpose.
- Professional advisers such as lawyers, accountants and insurers.
- Public authorities, regulators, courts or law enforcement where disclosure is required or permitted by law.
- A purchaser, investor or successor in connection with a genuine business reorganisation, subject to appropriate confidentiality and data protection controls.
Development and technical partner: TickMark, who build and maintain this website on our behalf.
Where a supplier processes personal information on our behalf, we require it to process the information only on documented instructions, keep it secure and assist us with our legal obligations.
9. International transfers
Some suppliers may store personal information or allow support access from countries outside the United Kingdom, including India and, where Google Analytics is used with your consent, the United States. Before making a restricted transfer, we check that it is covered by UK adequacy regulations, appropriate safeguards such as the UK International Data Transfer Agreement or UK Addendum, or another lawful exception. Where appropriate safeguards are used, we carry out the required assessment of the protection available after transfer.
You may contact us to request further information about the safeguards used for a relevant transfer.
10. Keeping information secure
We use proportionate technical and organisational measures intended to protect personal information from accidental loss, misuse, alteration, unauthorised access or disclosure. Measures may include access controls, multi-factor authentication, encrypted transmission, secure supplier configuration, backups, staff or contractor confidentiality, vulnerability updates and incident procedures.
No internet transmission or storage system can be guaranteed to be completely secure. If a personal data breach occurs, we will assess it promptly and notify affected people and the Information Commissioner’s Office where the law requires us to do so.
11. How long we keep information
The proposed periods in section 5 are our default retention periods. We may retain information for a shorter or longer period where necessary, taking account of the purpose, amount and sensitivity of the information, legal and regulatory requirements, security needs and relevant limitation periods. When information is no longer required, we will delete or anonymise it securely.
12. Your data protection rights
Depending on the circumstances and lawful basis, you may have the right to:
- Ask for access to your personal information and receive a copy.
- Ask us to correct inaccurate or incomplete information.
- Ask us to erase information in certain circumstances.
- Ask us to restrict how information is used in certain circumstances.
- Object to processing based on legitimate interests. You have an absolute right to object to direct marketing.
- Receive information you provided in a portable format where the right applies.
- Withdraw consent at any time where processing is based on consent, without affecting earlier lawful processing.
- Ask for safeguards where a significant decision is made solely by automated means. We do not currently use personal information to make such decisions.
To exercise a right, contact the privacy email in section 2. We may need to verify your identity. Rights are subject to legal conditions and exemptions, and we will explain if a request cannot be met in full.
13. Data protection complaints
You may complain directly to us if you believe we have not handled your personal information properly. You can use the complaint route stated in section 2. We will:
- Provide a clear way for you to make a data protection complaint.
- Acknowledge receipt within 30 days.
- Take appropriate steps to investigate and respond without undue delay.
- Keep you informed where the investigation is continuing or delayed.
- Tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office. We would appreciate the opportunity to address your concern first, but you are not required to contact us before approaching the ICO.
Information Commissioner’s Office – Make a complaint · Telephone: 0303 123 1113
14. Children
The website and proposed products are not directed at children, and we do not knowingly collect personal information from children through the website. If an online service or activity is introduced that is likely to be used by children, we will assess and implement the additional protections required before launch.
15. Third-party websites and social platforms
The website may link to third-party websites or social platforms. Those organisations control their own processing and privacy practices. Please review their notices before providing personal information to them.
16. Changes to this notice
We may update this notice when our activities, suppliers or legal obligations change. We will publish the revised notice, update the date at the top and, where a change materially affects how we use information, take reasonable steps to bring it to the attention of affected people before the new use begins.
17. Contact us
Privacy contact: S Bains
Email: trade@thehouseofamritsar.com
Postal address: 46 St Helens Road, Solihull, B91 2DA

