Privacy policy

Last updated: 19 April 2026

This policy explains how Butyros Limited (trading as Valen & Co, company number 15765404, registered in England at 124 City Road, London EC1V 2NX, VAT 495192946) handles personal data collected through the Valen & Co trade portal.

1. Data controller

Butyros Limited is the data controller for the personal data described in this policy. You can contact us about data matters at jack@valentrading.com or by post at the registered address above.

2. What we collect

Account details — company name, contact name, email, phone, delivery address, Companies House and VAT numbers (provided on application and in account updates).
Transactional data — orders, invoices, payments, shipment and delivery records.
Portal behaviour — for signed-in users only, we record page views, searches, filters applied, product clicks, cart activity, and quote activity. For anonymous visitors we only record session-level events (session start / end, login attempts) that are strictly necessary to operate the service.
Technical data — IP address, browser type, viewport size, session identifier. We do not use third-party advertising cookies.

3. Why we process it (lawful basis under UK GDPR)

To fulfil the contract of supply with your business (Art. 6(1)(b)): account administration, order fulfilment, invoicing, delivery.
Our legitimate interests (Art. 6(1)(f)): operating and improving the portal, fraud prevention, and AI-driven pricing and catalogue optimisation that keeps our trade offer competitive. You can object to this processing at any time.
Legal obligations (Art. 6(1)(c)): VAT and financial records retained for HMRC, anti-money-laundering checks where applicable.

4. Automated decision-making

We operate software-driven systems that assist with running the portal — for example, computing landed cost, choosing optimal shipping routes, repricing on external sales channels, ranking product recommendations, and flagging unusual order patterns for review.

These systems do not make final decisions with legal or similarly significant effects on you — such as account approval, credit limit changes, or account suspension — without human review. A person reviews and signs off on any material decision about your account. You have the right to request a human review of any automated decision that affects you, to ask for an explanation of how it was reached, and to contest it. Email jack@valentrading.com.

5. Who we share it with

Service providers we rely on to run the portal: Supabase (database, authentication), Vercel (hosting), Resend or similar (transactional email). All are contractually bound to process the data only on our instructions.
Carriers (couriers, pallet networks, freight forwarders) for the limited data needed to deliver your order.
Payment processors where relevant to a specific payment.
Authorities where we are required by law (HMRC, law enforcement with a valid request).

We do not sell your personal data, do not use it for third-party advertising, and do not share it for any purpose outside what is described above.

6. International transfers

Some of our service providers may process data outside the UK, including in the EU and the US. Where this happens we rely on adequacy decisions or the UK International Data Transfer Agreement (IDTA) to ensure comparable protection.

7. How long we keep it

Order, invoice and VAT records — 6 years from the end of the accounting period, as required by HMRC.
Portal behaviour analytics — 2 years, after which they are aggregated or deleted.
Account records — for the duration of the account plus any legal retention period that applies.

8. Your rights

You have the following rights under UK GDPR:

Access — get a copy of the personal data we hold about you.
Rectification — have inaccurate data corrected.
Erasure — ask us to delete your personal data (subject to legal retention requirements such as HMRC).
Portability — receive your data in a portable format.
Restriction and objection — limit or object to certain processing, including legitimate-interest processing for analytics.
Complaint— lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email jack@valentrading.com — we will respond within one calendar month.

9. Cookies and tracking

We use a single first-party session cookie to keep you signed in and to remember your currency preference. We do not use third-party advertising or cross-site tracking cookies. We do capture portal behaviour events for signed-in users; see section 2. You can clear this data via your browser settings at any time.

10. Changes to this policy

We may update this policy to reflect changes in our processing or the law. Material changes will be notified by email to registered users; the revised policy will always carry a new "last updated" date.

11. Contact

Butyros Limited · 124 City Road, London EC1V 2NX · VAT 495192946
Email: jack@valentrading.com
Phone: +44 7727 648560