Privacy Notice

Last updated: 25 September 2026

This notice explains how Mighty Packaging Ltd (“we”) uses personal data under the UK GDPR and the Data Protection Act 2018. We are the controller for the data described here. Mighty Packaging Ltd is registered inScotland (company number SC892586), registered office 72 Wallace Street, Glasgow G5 8DU.

What we collect

Contact details you give us: name, company, email, phone number and address.
What you ask us about: enquiries, quote requests and order details.
Account data if you open a trade account: login details, orders, invoices and payments.
Technical data: IP address and browser details, kept in server logs for security.

Why we use it and our lawful basis

To reply to enquiries and prepare quotes — legitimate interests, or steps before a contract.
To supply goods and run your account — performance of a contract.
To keep accounting and VAT records — legal obligation.
To keep our website secure and prevent fraud — legitimate interests.

We don’t sell your data and we don’t send marketing emails unless you have agreed to receive them.

Who we share it with

Service providers that help us run the business, such as our hosting provider, email provider, payment provider, couriers and accountants. They may only use your data to provide their service to us. Our systems are hosted in the UK.

How long we keep it

Enquiries that don’t lead to an order: up to 2 years. Customer and transaction records: 6 years after the end of the financial year they relate to, as required for tax purposes.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to restrict it. Email info@mightypackaging.com. If you’re unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk.