SMP Group Privacy Policy
Last updated: 20 March 2026

SMP Group plc is a company registered with Companies House in England and Wales under company number 2627262, whose registered office and principal place of business is 2 Swan Road, Greenwich Peninsula, London, SE18 5TT, United Kingdom.

This Privacy Policy (the “Policy”) explains how SMP Group plc (“SMP Group”, “we”, “us”, “our”) collects, uses, and protects your personal information when you interact with us, including when you visit our websites, contact us, or use our services.

By using our websites or services, you acknowledge that you have read and understood this Policy.

1. Who we are and how to contact us

If you have any questions about this Policy or how we handle your personal data, please contact:

• Email: info@smpgroup.co.uk
• Postal address: 2 Swan Road, Greenwich Peninsula, London SE18 5TT
• Telephone: +44 20 8855 5535

If you are located in the UK or EEA, you also have the right to raise concerns with your local supervisory authority.

2. Scope of this Policy

This Policy applies to personal information we process when:

• You visit or use this website, operated by SMP Group (the “Website”).
• You contact us by email, phone, post, or via social media.
• You are a customer, supplier, prospective customer, or other business contact.
• You apply for a job with us or work with us as a contractor.

3. The personal data we collect

The types of personal data we may collect include:

• Identity and contact details: name, title, company, job role, postal address, email address, telephone number.
• Account and relationship data: details about products or services you have purchased or enquired about, account login details (if applicable), communication preferences, and correspondence history.
• Technical and usage data: IP address, browser type and version, device identifiers, operating system, time zone setting, referring URLs, pages viewed, and interactions with our Website.
• Marketing and communications data: your preferences in receiving marketing from us and your communication preferences.
• Recruitment data if you apply for a role: CV, work history, education, references, right-to-work information, and interview notes.

We only collect information that is adequate, relevant, and limited to what is necessary for the purposes described in this Policy.

4. How we collect your personal data

We collect personal data in the following ways:

• Directly from you: when you fill in forms on our Website, request a quotation, subscribe to marketing communications, attend our events, apply for a job, or contact us by any channel.
• Automatically: when you interact with our Website, certain technical data (such as IP address, browser type and pages viewed) is collected automatically using cookies and similar technologies.
• From third parties: such as business partners, event organisers, recruitment agencies, public sources, or where your employer provides your details as a contact person.

5. Purposes and legal bases for processing

We use your personal data for the purposes and on the legal bases set out below, in accordance with UK GDPR and EU GDPR.

• Providing and managing our services: to set up and manage your account, process orders, deliver products and services, and provide customer support (performance of a contract or steps taken at your request).
• Communicating with you: to respond to enquiries, send service messages, and manage our relationship with you (legitimate interest and/or performance of a contract).
• Marketing and business development: to send you information about products, services, events, or news that may be of interest, where permitted by law and in line with your preferences (consent or legitimate interest, with opt-out available).
• Operating and improving our Website: to administer the Website, analyse usage, troubleshoot, and improve our content and services (legitimate interest).
• Legal and regulatory compliance: to comply with legal obligations, respond to requests from authorities, and establish or defend legal claims (legal obligation or legitimate interests).
• Recruitment and HR: to assess candidates, make hiring decisions, and manage onboarding processes (performance of a contract, legitimate interests, legal obligations).

Where we rely on consent, you can withdraw it at any time by contacting us or using the unsubscribe mechanisms in our communications.

6. Cookies and similar technologies

Our Website may use cookies and similar technologies to:

• Enable core functionality (e.g. security, session management).
• Understand how visitors use the Website and improve performance.
• Support certain features such as embedded content or social media interactions.

You can control cookies through your browser settings and, where provided, our on-site cookie consent tools.

7. How we share your personal data

We may share your personal data with:

• Group companies: other entities within the SMP Group, where necessary for internal administration and to provide services.
• Service providers: trusted third-party vendors who provide services such as IT hosting, cloud storage, email delivery, analytics, printing, logistics, or payment processing, under appropriate data protection terms.
• Professional advisers: including lawyers, accountants, auditors, and insurers where necessary to obtain professional advice or manage business risks.
• Authorities and regulators: where required to comply with legal obligations, court orders, or to protect our rights or the rights of others.
• Prospective buyers or partners: in connection with any merger, acquisition, or corporate reorganisation, subject to confidentiality obligations.

We do not sell your personal data to third parties for their own direct marketing purposes.

8. International transfers

Some of our service providers may be located outside the UK and EEA, in countries that may not provide the same level of data protection.

Where this is the case, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the UK or EU authorities.
• Other appropriate measures permitted by data protection law.

You can contact us for more information about the specific safeguards we use.

9. Data retention

We keep your personal data only for as long as necessary to fulfil the purposes described in this Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements.

In general:

• Customer and supplier data is retained for the duration of the relationship and for a reasonable period thereafter to deal with queries, disputes, and legal obligations.
• Marketing data is retained until you opt out or until we determine it is no longer accurate or relevant.
• Recruitment data is typically retained for a limited period after the end of the recruitment process unless you become an employee or we have your consent to keep your details on file.

When data is no longer needed, it will be securely deleted or anonymised.

10. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.

Measures may include access controls, encryption, physical security, staff training, and regular review of our security practices.

11. Your rights

Depending on where you are located, you may have the following rights in relation to your personal data under UK and EU data protection law:

• Right of access: to obtain confirmation of whether we process your personal data and to receive a copy.
• Right to rectification: to have inaccurate or incomplete personal data corrected.
• Right to erasure: to request deletion of your personal data in certain circumstances.
• Right to restriction: to request that we restrict the processing of your personal data in certain situations.
• Right to object to object to processing based on legitimate interests, including profiling, and to direct marketing at any time.
• Right to data portability: to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
• Right to withdraw consent: where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us using the details in clause 1.  You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been infringed.

12. Children’s privacy

Our Website and services are not directed at children, and we do not knowingly collect personal data from anyone under the age of 16.

If you believe a child has provided personal data to us, please contact us so that we can delete it where appropriate.

13. Links to other websites

Our Website may contain links to third-party websites, plug-ins, or applications.

We are not responsible for the privacy practices of those third parties, and you are encouraged to read the privacy policies of every website you visit.

14. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.

If we make material changes, we will take appropriate steps to notify you, such as by posting a notice on our Website or contacting you directly where required by law.