Legal
Privacy Policy
Last updated: May 2026
ecolux ENGLAND, a trading name of IVEO GROUP, is committed to protecting and respecting your privacy. This policy explains how we collect, use, disclose and safeguard your information when you visit our website or place an order with us. Please read it carefully.
1. Who We Are
IVEO Group is registered in Birmingham, England. Our registered address is Unit 2, Speedwell Trading Estate, 108 Kings Rd, Tyseley, Birmingham B11 2AT, United Kingdom. IVEO Group is the parent company and central hub operating multiple brands including ecolux ENGLAND and MetaLED. If you have any questions about this privacy policy or our data practices, please contact us at [email protected].
2. Information We Collect
- Identity data — name, company name, job title
- Contact data — email address, telephone number, billing and delivery address
- Account data — username, password (hashed), account type and approval status
- Transaction data — details of orders, purchase orders and payments made
- Technical data — IP address, browser type and version, time zone, operating system
- Usage data — information about how you use our website and services
- Marketing data — your preferences in receiving marketing from us
3. How We Collect Your Information
- Direct interactions — when you register for an account, submit a partner application, place an order or contact us
- Automated technologies — cookies, server logs and similar tracking technologies as you interact with our website
- Third parties — analytics providers and payment processors
4. How We Use Your Information
- Register and manage your B2B account
- Process and fulfil your orders and purchase orders
- Manage our partner application and approval process
- Send you order confirmations, invoices and account notifications
- Respond to your enquiries and provide customer support
- Improve our website, products and services
- Comply with legal and regulatory obligations
- Send marketing communications where you have consented or where we have a legitimate interest
5. Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR:
Contract
Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Legitimate interests
Processing is necessary for our legitimate business interests, such as improving our services and preventing fraud, provided these are not overridden by your rights.
Legal obligation
Processing is necessary to comply with a legal obligation.
Consent
Where you have given us clear consent to process your data for a specific purpose, such as marketing communications.
6. Data Sharing
We do not sell your personal data. We may share your data with trusted third parties who assist us in operating our website and conducting our business, including:
- IT and hosting service providers
- Payment processors and financial institutions
- Logistics and delivery partners
- Professional advisers including lawyers and accountants
- Regulatory authorities where required by law
All third parties are required to respect the security of your personal data and to treat it in accordance with the law.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting or reporting requirements. Account data is retained for the duration of your account and for up to 7 years after closure for legal and tax purposes. Transaction records are retained for 7 years in accordance with HMRC requirements.
8. Cookies
Our website uses cookies and similar tracking technologies to distinguish you from other users and to improve your experience. We use:
- Strictly necessary cookies — required for the website to function, including session authentication
- Analytical cookies — to understand how visitors interact with our website
- Functional cookies — to remember your preferences
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.
9. Your Rights
Under UK GDPR, you have the right to:
- Request access to your personal data
- Request correction of inaccurate or incomplete data
- Request erasure of your personal data in certain circumstances
- Object to or restrict our processing of your data
- Request transfer of your data to another party (data portability)
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
10. Security
We have implemented appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. All passwords are stored using industry-standard hashing. Access to personal data is restricted to authorised personnel only. While we take all reasonable steps to protect your data, no transmission over the internet is completely secure. Any transmission is at your own risk.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.
12. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
13. Contact Us
If you have any questions, concerns or requests regarding this privacy policy or our data practices, please contact us: IVEO GROUP Unit 2, Speedwell Trading Estate, 108 Kings Rd, Tyseley, Birmingham B11 2AT, United Kingdom Email: [email protected] Phone: 0121 403 3663