Privacy policy

Who we are

Reelradarpurepixls Ltd (company number 15102947) is the data controller for this website. Our registered office is Unit 4, 19 Quay Side, Newcastle upon Tyne, NE1 3DE, United Kingdom. You can write to us at that address or email [email protected]. Our data protection contact is the Data Protection Officer at [email protected].

This site publishes editorial guides about vending machine selection, placement, payments, operations and care. It does not operate vending hardware or process card payments for machine sales through the pages themselves. If we later add a shop or a hosted account area, we will update this policy before that processing starts.

Personal data we collect

We collect three kinds of information, and we try to keep each of them small.

Information you send us. If you email [email protected] or complete the contact form fields (name, email address, organisation, message), we receive the content of that message. The form on this static site is validated in your browser; if you then send the message by email, the copy lives in our inbound mailbox. Do not include payment card numbers, government identity numbers or health details. We do not need them to discuss a vending brief.

Technical logs. Our hosting environment may record standard server logs such as IP address, date and time, requested URL, referrer and a general browser identifier. These logs exist to keep the site available, to diagnose faults and to understand abuse. They are not a marketing profile.

Cookies and similar storage. We store your cookie choice in the browser (localStorage key cookie-choice, and, if set, the essential rr_pref cookie). If you allow analytics or functional cookies, we may also set rr_metrics or rr_ui as described in the cookie policy. We do not use advertising networks on these pages.

How we use data and the legal bases

We use contact details to reply to you, to keep a record of what was asked, and to defend the company if a dispute arises about what was promised. For UK GDPR and EU GDPR, that processing is usually legitimate interests (responding to a professional enquiry) or contract if we have agreed paid advisory work. You can object to legitimate interests; if you do, we will stop unless we have a compelling ground or a legal claim to meet.

We use logs to operate and secure the website (legitimate interests in keeping a publication online). We use essential storage to remember your cookie choice (legitimate interests and, where required, compliance with the Privacy and Electronic Communications Regulations). Analytics and functional cookies run only with consent, which you can withdraw with the same banner controls or by writing to the DPO.

We do not sell personal information, and we do not use the content of your vending questions to train public models. We do not run automated decisions that produce legal effects about you.

Cookies

Essential storage remembers whether you accepted, rejected or customised cookies so the banner does not nag on every page load. Analytics cookies, if enabled, help us see which guides are opened in aggregate. Functional cookies, if enabled, may remember interface choices such as a collapsed preference panel. Details, durations and browser opt-out links sit in the cookie policy. Consent is stored locally on your device; clearing site data will make the banner return, which is expected.

Third-party processors

We use service providers who process data on our instructions:

• Website hosting and content delivery, which may see IP addresses in server logs.
• Email hosting for hello@ and dpo@ inboxes.
• Professional advisers (accountants or solicitors) if a matter requires them, under confidentiality duties.

Placeholder image URLs on some pages are requested from picsum.photos, which may receive the image request from your browser. That is a third-party connection for media, not a joint marketing programme. If you block third-party content, the layout still works with the remaining CSS. We do not load social media pixels. If we add a processor, we will look for an appropriate data processing agreement and, for restricted transfers, a lawful transfer tool such as an adequacy regulation or standard contractual clauses.

Retention

Enquiry emails are kept for up to 24 months after the last meaningful reply, unless a longer period is required for a live contract, a legal claim, or tax records. Server logs are rotated on a shorter cycle by the host, typically in weeks rather than years. Cookie choice storage remains until you clear it or until the cookie expiry in the cookie policy. We do not keep a separate marketing list because we do not operate one from this site.

When we no longer need data, we delete or irreversibly anonymise it from systems we control. Backups expire on their own cycle. You should not send us data you would not want sitting in an inbox for that enquiry window.

International transfers

We are established in the United Kingdom. Hosting or email providers may process data in the UK, the European Economic Area, or other countries. Where a transfer is restricted, we rely on adequacy decisions where they exist or on standard contractual clauses plus a transfer assessment. You can ask the DPO for a summary of the current transfer tools.

Your rights under UK GDPR and EU GDPR

Subject to the usual legal limits, you can request access to your personal data, correction, erasure, restriction, and portability of data you provided to us. You can object to processing based on legitimate interests. You can withdraw consent for optional cookies without affecting the lawfulness of processing before the withdrawal. You may also complain to the Information Commissioner’s Office in the UK at ico.org.uk, or to your local EU supervisory authority if you are in the EEA. We would rather fix a problem first; write to the DPO and we will respond without playing hide-and-seek.

California privacy rights (CCPA / CPRA)

If you are a California resident, you may request that we disclose the categories of personal information we collected about you, the categories of sources, the business or commercial purpose, the categories of third parties to whom we disclosed information, and the specific pieces we hold. You may request deletion or correction, subject to statutory exceptions. We do not sell or share personal information as those terms are used in California law for cross-context behavioural advertising. We will not discriminate against you for exercising these rights. You may use an authorised agent as the statute allows, and we may need to verify identity before we release or delete data. Submit requests to [email protected].

Children

The site is written for operators and facilities professionals. We do not knowingly collect personal data from children. If you believe a child has sent us personal information, contact the DPO and we will delete it from systems we control.

Changes

We will update this policy when our processing changes. The current version is the one published at this URL. Material changes will be reflected in the page text; we do not hide them in a changelog nobody reads. Last updated 15 March 2026.