Legal
Privacy Policy
How A & N Co Ltd collects, uses and looks after personal information when you enquire about products, apply for a trade account or order from us — and what you can ask us to do about it.
- Last updated
- Applies to
- anco.ltd
Working draft — prepared for review, not yet legal advice
This document was drafted for A and N Co Limited as part of building this website. It reflects how the business actually trades, but it has not been checked by a solicitor. Please have it reviewed and approved by the company’s legal adviser before it is published or relied upon.
Who we are
A and N Co Limited, trading as A & N Co Ltd, is the controller of the personal information described in this notice. We are a food-service wholesaler based in Manchester, Manchester, supplying trade customers — chicken shops, burger and kebab shops, pizza shops, takeaways, cafés, restaurants, convenience stores, bakeries and caterers — across the North West, Yorkshire, the Midlands, Cheshire and North Wales.
“Personal information” means information about an identifiable living person. In our case that is almost always business contact details: the name, number and email address of the person who orders for a business, rather than information about anyone’s private life.
- Controller
- A and N Co Limited
- Trading address
- Supreme Business Park, Manchester M19 3HG, United Kingdom
- VAT registration
- 218 954 284
- info@anco.ltd
- Telephone
- +44 7794 446867
The information we collect
We collect what we need to answer a trade enquiry, open an account, supply goods and keep proper records — and nothing beyond that.
Information you give us through this website
- Enquiry form
- Your name, your business name, email address, telephone number, the subject you choose and the message you write. If you have added products to an enquiry list, the product codes on that list are sent with your message.
- Trade account application
- Business name, contact name, business type, email address, telephone number, business address, postcode, an estimated weekly order band and any notes you add.
Both forms include a hidden field that people never see and automated scripts usually fill in. It exists only to discard spam, and we do not use it to identify you.
Information you give us another way
Most of our trade is done by telephone and WhatsApp. When you call, message or email us, or when one of our team takes an order from you, we keep a record of the contact details and the order so we can pick, deliver and invoice it. Delivery notes and invoices carry the business name, delivery address and the name of whoever signs for the goods.
Information collected automatically
Like any website, this site is served by a hosting provider that keeps technical logs — IP address, browser type, the pages requested and the time of the request — for security and diagnostics. We do not run analytics, advertising or tracking tools on this site, so we do not build a profile of your visit.
Please do not send us sensitive information
Why we use it, and our lawful basis
UK GDPR requires us to have a lawful basis for every use of personal information. Ours are set out below.
- Contract (Article 6(1)(b)) — Responding to your enquiry, quoting you, opening and running your trade account, taking and picking orders, delivering to you, invoicing and dealing with queries about a delivery. This covers steps taken at your request before any contract is agreed as well as the contract itself.
- Legitimate interests (Article 6(1)(f)) — Knowing who to speak to at each business we supply, administering accounts and credit, following up unpaid invoices, preventing fraud and misuse, keeping this website secure and reliable, and understanding which lines our customers want so we stock the right range. We have weighed these interests against your rights and consider them proportionate because the information involved is ordinary business contact detail.
- Legal obligation (Article 6(1)(c)) — Keeping VAT, accounting and tax records, and keeping the traceability records a food business is required to hold so a product can be traced one step forward and one step back.
- Consent (Article 6(1)(a)) — Only where you have asked us to send you something, such as a new-lines update. You can withdraw consent at any time and it will not affect anything done beforehand.
We do not make decisions about you by automated means, and we do not profile you.
Marketing
We do not operate a marketing mailing list. The forms on this site are used to answer your enquiry and open your account — sending one does not add you to a list.
If that changes, we will only send business-to-business marketing where we are allowed to under the Privacy and Electronic Communications Regulations, every message will say who it is from, and every message will carry a one-click way to stop receiving them. Telling us to stop will never affect the service you get on your account.
Where your information is held
Our records are held in the UK. Some of the services we rely on — website hosting and our email, which is provided by Microsoft — may store or process data on servers outside the UK.
Where personal information is transferred outside the UK, we rely on UK adequacy regulations covering the destination country or, where none applies, on the Information Commissioner’s International Data Transfer Agreement or its Addendum to the EU standard contractual clauses, together with any additional safeguards those require.
How long we keep it
We keep personal information only as long as we need it for the purpose it was collected for, or as long as the law requires.
- Enquiries that do not become accounts
- 12 months from our last contact with you, then deleted.
- Trade account records
- For as long as the account is open, and for 6 years after the last transaction on it.
- Invoices, orders and accounting records
- 6 years after the end of the financial year they relate to, which is the period HMRC requires for VAT records.
- Delivery and traceability records
- In line with our food-safety record keeping, so a supplied product can be traced if it is ever recalled.
- Website server logs
- Held briefly by our hosting provider for security and diagnostics, then overwritten.
Keeping information secure
This site is served over an encrypted connection (HTTPS). Access to customer records is limited to the people who need it to do their job, accounts are password protected, and we review who has access when someone joins or leaves.
No transmission over the internet can be guaranteed to be completely secure, so anything you send us online is sent at your own risk. If a personal data breach occurs that is likely to risk your rights and freedoms, we will report it to the Information Commissioner’s Office within 72 hours of becoming aware of it and tell you directly where the law requires us to.
Your rights
Under UK GDPR you have the following rights over the personal information we hold about you. Some of them apply only in particular circumstances — for example, we cannot delete records we are legally required to keep.
- Access — ask for a copy of the personal information we hold about you.
- Rectification — have inaccurate information corrected or completed.
- Erasure — ask us to delete information where we no longer have a reason to keep it.
- Restriction — ask us to pause using information while a dispute about it is resolved.
- Portability — receive information you gave us in a common machine-readable format.
- Objection — object to processing we carry out on the basis of legitimate interests.
- Withdraw consent — where we relied on your consent, withdraw it at any time.
To use any of these rights, email info@anco.ltd or write to us at the address above. We may ask you to confirm who you are before we act. We will respond within one month, and will tell you if we need longer because the request is complex. There is no charge unless a request is manifestly unfounded or excessive.
Complaints and the ICO
If you are unhappy with how we have handled your information, please tell us first — we would rather put it right. If you are still not satisfied, you can complain to the Information Commissioner’s Office, which is the UK’s supervisory authority for data protection.
- Information Commissioner's Office
- Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
- Helpline
- 0303 123 1113
- Website
- ico.org.uk
Changes to this notice
We will update this page whenever the way we handle personal information changes, and the date at the top of the page will change with it. If a change materially affects account customers, we will tell them directly rather than relying on this page alone.
This notice was last updated on 18 September 2026. Earlier versions are available on request.
To settle before publication
Open points for A & N Co Ltd and its legal adviser. They are listed here rather than quietly assumed.
- Confirm whether the company needs to pay the ICO data-protection fee and register as a controller, and add the registration number to clause 1 if so.
- Name the website host and the email provider once hosting is settled, so the transfer wording in clause 6 is specific rather than general.
- Decide where website enquiries and trade account applications should be delivered — sales inbox, a shared mailbox or a CRM — and check that the retention periods in clause 7 match what that system does.
- Check the retention periods against the company's own bookkeeping and food-safety record keeping before publishing.
- Appoint one person as the point of contact for data protection requests so a request is never missed.
Questions about this document?
Ask us directly — someone in the sales office will point you to the right person.
A and N Co Limited, Supreme Business Park, Manchester M19 3HGVAT registration 218 954 284 · Email info@anco.ltd