Privacy notice

Last updated 9 November 2026

This notice explains what personal information PSC Metals collects through this website, and when we reply to you by phone, WhatsApp or email: what we do with it, who else sees it, how long we keep it, and your rights.

Who we are

The controller of your information is Daniel Pascaru trading as PSC Metals, 25 Strand Street, Liverpool. Email dp@pscmetals.co.uk or ring 07864 385434 about anything in this notice.

What we collect and why

The collection form

• What: your name, phone number, the postcode where the metal is, the metals you tick, a rough amount and any message you write. We also record the page you sent it from, the time, and the code of the advert or link that brought you to the site, if the web address carried one.
• We need your name, your phone number and the postcode so we can ring you back about a collection. Without them we can't reply. Everything else is optional.
• Why: to ring you back, give you a price and arrange a collection; and to know which adverts and links bring enquiries.
• Lawful basis: taking steps at your request before we buy your metal (UK GDPR Article 6(1)(b)); for the advert or link code, our legitimate interest in knowing which advertising works (Article 6(1)(f)).

The postcode check

• When you check a postcode on the map, or send the collection form, our server sends the postcode, and nothing else, to postcodes.io, a public postcode lookup service, which returns the council area. That tells us whether we collect there.
• postcodes.io answers from open data. Source: Office for National Statistics licensed under the Open Government Licence v.3.0. Contains OS data © Crown copyright and database right 2026. Contains Royal Mail data © Royal Mail copyright and database right 2026.
• Lawful basis: our legitimate interest in telling you whether we collect at that postcode (Article 6(1)(f)); when you send the form, as for the form.

The button counter

• When you tap a call, WhatsApp or directions button, our server records which button it was, which page it was on, the time, and the advert or link code if there was one.
• It records nothing that identifies you or your device: no name, no phone number, no IP address. Because it holds nothing about you, it isn't personal information. We describe it here so you know it happens.
• Why: to count which pages and adverts lead to calls, so we spend on what works.

WhatsApp

• A WhatsApp button on this site only opens WhatsApp; the site sends nothing to WhatsApp.
• If you message us, we see your WhatsApp name and number, your messages and any photos you send. Photos can show people, places or car registrations, and can carry the place where they were taken, so please send only the metal.
• Why and lawful basis: as for the form. WhatsApp is provided to people in the UK by WhatsApp LLC (part of Meta), which handles your messages under its own privacy policy.

Replies by phone or email

• When we ring you back, or you ring or email us: your phone number or email address, what you tell us, and the notes we make about your metal and any collection.
• Why and lawful basis: as for the form.

Visiting the website

• The site sets no cookies. It has no tracking pixels and no third-party scripts, fonts, maps or videos. Your browser talks only to this website until you tap a link that opens WhatsApp or Google Maps.
• Our host, Cloudflare, receives your IP address and basic request details to deliver the pages and protect the site from attack, as any web host does. Cloudflare may also ask your browser to keep a short network error reporting policy, used only to report failed connections. We don't store your IP address ourselves.
• Why and lawful basis: to deliver the pages and protect the site and the form from attack and abuse. This is our legitimate interest in running a safe website (UK GDPR Article 6(1)(f)). Our server also uses your IP address for a few minutes, in memory only, to limit repeated requests. It doesn't record or keep it.

Who we share it with

We don't sell your information or use it for marketing. The people at PSC Metals who reply to you see it, and so do the service providers we use to run the website and answer enquiries:

• Cloudflare, Inc., which hosts the website and runs the code that handles the form, the postcode check and the button counter.
• Google, which stores form enquiries and the button counter in a Google Sheet, and runs our email, which receives the message about each enquiry and any email you send us.
• Anthropic, whose AI assistant, Claude, reads enquiries and emails and helps us answer them.
• postcodes.io, which receives only a postcode, with nothing to link it to you.

Cloudflare and Google are based in the United States and may process your information there. Both take part in the UK Extension to the EU-US Data Privacy Framework, which UK law treats as giving adequate protection (the Data Protection (Adequacy) (United States of America) Regulations 2023). Anthropic provides Claude to people in the UK through Anthropic Ireland, Limited, and Ireland is also treated as adequate under UK law. Where Anthropic moves information outside the UK and the EEA, it relies on UK adequacy regulations or standard contractual clauses approved for the UK. Ask us at dp@pscmetals.co.uk for details or a copy of these safeguards.

How long we keep it

• Form enquiries, call notes, WhatsApp chats and emails: 12 months from your last contact, then deleted.
• Button counter records: 24 months.

Your rights

You have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct it if it's wrong;
• ask us to delete it;
• ask us to stop or limit using it;
• object to our using it for our legitimate interests;
• ask for information you gave us in a form you can take elsewhere, where that applies.

Some rights have limits where the law requires us to keep records. To use any of these rights, email dp@pscmetals.co.uk or ring 07864 385434. We reply within one month.

We don't make decisions about you by automated means alone. The postcode check only tells you whether we collect at your postcode; if you send the form, we ring you either way.

Complaints

If you're unhappy with how we've used your information, tell us first at dp@pscmetals.co.uk. We'll acknowledge your complaint within 30 days and tell you what we're doing about it.

You can also complain to the UK data protection regulator, the Information Commission (still known as the ICO), which took over from the Information Commissioner on 30 September 2026: ico.org.uk/make-a-complaint.

Changes

If we change how we use your information, we'll update this notice and its date.