§ L.1Legal / Privacy Policy
Privacy policy,
written to be read.
Short version: the only personal information we collect is what you type into a form, we use it to price and schedule your request, we never sell it, and you can have it deleted by asking.
- Last updated
- 1 October 2025
- Data sold
- Never
- Retention
- 36 months
- Contact
- info@ibc-pickup.com
§ L.1.1What we collect
Two categories, and that is all.
| Category | What it includes | Why | Legal basis |
|---|---|---|---|
| Form submissions | Name, email, phone, company, city, state, postal code, quantity, product type, service, grade, message and the page you submitted from | To price, specify and schedule your request, and to reply to you | Our legitimate interest in responding to a business enquiry |
| Analytics | Pages viewed, referrer, approximate location from IP, device and browser type, interactions such as clicks and scroll depth, and a form-submission event | To understand which pages are useful and where the site is confusing | Our legitimate interest in operating and improving the site |
We do not collect payment details through this website, we do not operate a customer account system, and we do not ask for any special-category personal data.
§ L.1.2The detail
How each part works.
Form submissions
Every form on this site posts to our own server, which forwards the submission to our lead management system. The browser never communicates with that system directly, and the credentials for it exist only on the server.
Each submission carries a hidden Source Url field recording which page you submitted from. That is operational rather than tracking — it tells the person answering you which product or service you were reading about.
Forms also include a hidden field no human ever sees. If it is filled in, the submission is treated as automated and discarded. This is a spam control and it collects nothing about you.
Analytics
We use PostHog for product analytics, routed through our own subdomain. It records pageviews, referrers, device and browser information, approximate location derived from IP address, and interaction events such as clicks and scroll depth. One custom event is recorded when a contact form is submitted successfully.
Analytics profiles are only created for identified users, which in practice means we do not build a profile for anonymous visitors. We do not use analytics data for advertising, and we do not run advertising or retargeting pixels of any kind on this site.
Cookies and local storage
This site sets no advertising cookies. Our analytics provider sets first-party cookies or local storage entries to distinguish one visit from another. Blocking them with your browser settings or an extension does not affect any functionality on this site — every page, every link and every form works without them.
Who we share it with
- Our lead management provider, which stores and routes form submissions on our behalf.
- Our analytics provider, for the data described above.
- Our hosting provider, which processes web requests.
- Carriers, where a collection or delivery requires your site address and a contact number on the day.
That is the complete list. We do not sell personal information, we do not share it for advertising, and we do not provide it to data brokers.
- Retention — form submissions
- 36 months from last contact, then deleted
- Retention — analytics
- Per our provider's standard retention
- Retention — transaction records
- 7 years, where required for tax and compliance
- Transfers
- Processed in the United States
- Automated decisions
- None — a person reads every submission
- Children
- This site is not directed at anyone under 16
Your rights
Whatever jurisdiction you are in, we will honour the following on request, free of charge, within thirty days:
- A copy of the personal information we hold about you
- Correction of anything inaccurate
- Deletion, except where we must retain a transaction record
- A restriction on further processing
- Objection to processing based on legitimate interest
- Confirmation that we have not sold or shared your data
Email info@ibc-pickup.com with “Privacy request” in the subject line, or use the form at the top of this page.
§ L.1.3Security
How we protect it.
- All traffic to this site is served over HTTPS with HSTS enabled.
- A strict Content Security Policy restricts what the page may load and where it may send data.
- Credentials for our lead management system exist only in the server environment and are never included in anything sent to a browser.
- Form submissions are validated on the server before being forwarded, which rejects malformed and automated submissions.
- Access to submitted enquiries is limited to the staff who need it to answer you.
No system is perfect. If you believe you have found a security issue with this site, email info@ibc-pickup.com and we will respond.
Plain English
If any of this is unclear, that is our fault, not yours.
Ask and we will explain it. A privacy policy nobody can follow is not consent.
See also: terms of sale · accessibility