1. Who we are
Pure Zeolite Limited (“Pure Zeolite”, “we”, “us”) is the controller responsible for personal information collected through this website. Our company number is 17082552. We are registered in England and Wales and our registered office is 59 The Mount, Shrewsbury, England, SY3 8PL.
2. Information we collect
When you use an enquiry, sample or documentation form, we may collect your name, company, email address, optional telephone number, preferred product or grade, application, expected quantity, delivery location and anything you include in your message.
If you consent to analytics, we collect a randomly generated in-memory visit identifier, pages viewed, page title, broad device category, country code where available, referring website domain, campaign parameters and selected CTA or form-completion events. We do not send form contents or contact details to analytics. Pure Zeolite does not use advertising or third-party analytics cookies and respects browser Do Not Track and Global Privacy Control signals.
When you make or change a privacy choice, we store a random Consent ID, the choice, relevant notice and banner versions, a timestamp and country code where available. We do not retain your full IP address in the consent or analytics records.
For form and administrator security and rate limiting, a short-lived pseudonymous hash derived from the connection address may be retained for approximately 15 minutes. The private administration service also processes the authorised administrator email address, password hash, encrypted authenticator secret, one-time recovery-code hashes, session and trusted-device tokens in hashed form, device category labels and important security events. Hosting and security providers may process technical logs needed to deliver and protect the website.
3. Why we use it and our lawful bases
We use enquiry details to respond, assess suitable mineral and grade options, prepare samples or quotations, check availability and delivery requirements, maintain business records and protect the website from misuse.
Depending on the context, our lawful bases are steps taken at your request before a contract, performance of a contract, compliance with legal obligations and our legitimate interests in responding to B2B enquiries, maintaining secure business systems and keeping appropriate records. Optional analytics operates only after your choice and is used to understand and improve the website. We do not sell personal information or use it for automated decision-making.
4. Who receives it
Access is limited to Pure Zeolite personnel and service providers supporting website hosting, database operation, communications, security and professional advice. Providers act under appropriate contractual and confidentiality controls. We may also disclose information where required by law or to establish, exercise or defend legal claims.
5. International transfers
Some technology providers may process information outside the UK. Where that happens, we require an appropriate UK transfer mechanism or another safeguard recognised under UK data-protection law.
6. How long we keep it
Website enquiry, sample and document-request records are normally retained for up to 24 months so that Pure Zeolite can respond and maintain a useful history of the discussion. Consent and privacy activity records are normally retained for up to 24 months. Administrator and security activity is normally retained for up to 12 months; administrator sessions expire after 8 hours and trusted-device records after no more than 30 days unless revoked earlier. Short-lived form and sign-in rate-limit records expire after approximately 15 minutes. If an enquiry leads to a quotation, order, contract or legal obligation, relevant business records may be kept for up to six years or longer where the law requires. Data that is no longer required is deleted or anonymised.
7. Security
Forms submit directly to the Pure Zeolite website backend over HTTPS. Private administration is protected by server-side authentication, a strong password policy, authenticator-app verification, expiring and revocable sessions, request-verification tokens, secure HTTP-only cookies, rate limiting and audit events. Passwords, session tokens and recovery codes are not stored in plain text. We use access controls, data minimisation and technical safeguards intended to prevent unauthorised access, alteration or loss. No internet service can guarantee absolute security.
8. Your rights and complaints
Depending on the circumstances, you may ask for access to, correction or deletion of your personal information, restriction or objection to its use, or a portable copy.
To exercise a right or make a data-protection complaint, email info@purezeolite.co.uk with enough detail for us to investigate. We may need to verify your identity. We will acknowledge a complaint within 30 days and respond without undue delay. If you remain dissatisfied, you may complain to the UK Information Commissioner’s Office through the ICO complaints service.
9. Changes to this notice
We may update this notice when our services, systems or legal obligations change. The current version and update date will remain available on this page.