Privacy notice

Last updated: 24 September 2026. This notice is the public summary of the ETABS Privacy Policy (version 4.0, effective 11 September 2026), which is reviewed annually. It gives effect to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

E-Trading & Business Services Ltd ("ETABS", "we") builds and hosts TABS, a retail, trade counter and warehouse platform used by UK retailers ("clients"). Questions about this notice or about your personal data can be sent to privacy@etabsltd.co.uk.

2. Our two roles

As a controller. We decide how and why personal data is used for this website's visitors, for the business contacts at our clients, suppliers and advisers, and for the login identities of the client staff who use TABS. We process this data on the basis of our legitimate interest in running and supporting our service and meeting our legal obligations.

As a processor. The customers of our clients are not our customers. Where a client's customer data passes through or is held in that client's TABS system, the client is the controller and we are its processor. We process that data only on the client's documented instructions, under our service agreement, and only so the client can fulfil its orders. We never decide any purpose of our own for it.

3. What this website collects

• Contact and demo requests. When you use the form or email us we collect your name, company, telephone number, email address and message, and use them to respond to you and to arrange and follow up a demonstration. We keep enquiries for as long as the conversation is live and for a reasonable period afterwards.
• Google Analytics. We use Google Analytics to understand how visitors use the site. It sets cookies and records anonymised usage statistics such as pages viewed and the type of device used. Google's own privacy policy describes its processing.
• Google reCAPTCHA. Our contact form is protected by reCAPTCHA, which sets cookies to distinguish people from automated submissions and is subject to Google's privacy policy and terms.
• Session cookies. Required for the website to function; they expire when you close your browser.

Your browser lets you manage and delete cookies; see its settings for details. This website does not carry third-party adverts, sponsored links or affiliate tracking.

4. Client contacts and TABS user accounts

For the staff of our clients, suppliers and professional advisers we hold names, business email addresses and telephone numbers so that we can run and support the service. For client staff who use TABS we hold their login identities. This data is kept for the life of the relationship and for as long as our legal obligations require, then securely deleted.

5. Your customers' personal data inside TABS

• Customer personal data is used solely to fulfil the order concerned, producing shipping labels, despatch documents and invoices, and to meet any legal, tax or regulatory obligation. We never use it for marketing, profiling, analysis or customer contact.
• Where a sales channel makes buyer details available on demand, TABS retrieves the buyer's name and address only at the moment a label or invoice is produced, uses them to create that document, and discards them. They are not written to disk, not displayed to operators, not logged and not retained. After fulfilment only the destination country and the outward part of the postcode are kept, for carrier routing, and these do not identify an individual.
• Where customer data arrives with an order from another channel, it is held within the client's own TABS system under the client's retention policy, protected by the same technical measures, and deleted on the client's instruction and at the end of the client relationship.
• Customer personal data is never copied to removable media, personal devices, email or messaging tools, and is never shared with anyone except as needed to fulfil the order (for example passing a delivery address to the client's chosen carrier) or as required by law.

6. How we protect personal data

• Encryption at rest on every server, workstation and backup device, and encryption in transit for all data.
• Access restricted to named individuals on a need-to-know basis, with unique accounts and multi-factor authentication, reviewed regularly.
• All personal data we hold stays within the United Kingdom. We do not transfer personal data outside the UK.
• Suspected or confirmed breaches are contained, investigated and notified to affected clients without undue delay, and to the Information Commissioner's Office within 72 hours where required.

7. How long we keep it

Personal data is kept only for as long as the purpose it was collected for requires, or as a legal obligation demands, and is then securely deleted. Customer personal data retrieved on demand from a sales channel is not retained at all. Other customer data is deleted on the client's instruction, at the end of the client relationship, or as the client's own retention policy requires.

8. Your rights

You have the right to be informed about how your personal data is used, and to ask for access to it, its correction or erasure, the restriction of or objection to its processing, and its portability where that applies. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

• Data we control (website enquiries, client contacts, TABS user accounts): we answer requests within one month of receipt, after verifying your identity.
• Data held for a client (a client's customers): the client is responsible as controller. If a request reaches us directly we first check whether we hold anything; for sales-channel customers whose details are retrieved on demand, we do not, and we will tell you so. Requests about data inside a client's system are passed to that client within two working days, and we help the client locate, export, correct or delete the data on its instruction.
• How to ask: email privacy@etabsltd.co.uk. No fee is charged unless a request is manifestly unfounded or excessive.

9. Sharing

We do not sell, rent or otherwise disclose personal data to third parties. Customer personal data is disclosed only to the extent needed to fulfil an order, such as to the client's chosen carrier for label creation, or where the law requires. Any supplier that processes personal data on our behalf is bound by written terms requiring equivalent protection and is assessed before engagement and annually thereafter.

10. Marketing emails

We send marketing emails only to people who have consented. Every message carries an unsubscribe link, and we act on it straight away. Marketing emails may record opens and clicks so that we know what is useful.

11. Changes to this notice

We review this notice at least once a year and whenever our processing, systems or legal obligations change. The date at the top shows the current version.