Privacy Policy
Last updated: 17 August 2026
This Privacy Policy explains how NCR Forms, operated by Ripley Printers UK Ltd (“we”, “us”, “our”), collects and uses personal data in connection with our business-to-business printing services.
It applies to the NCR Forms website and to communications you have with us, including enquiries, quote requests, orders, email correspondence and business-to-business marketing.
1. WHO WE ARE AND HOW TO CONTACT US
Data controller
NCR Forms is operated by:
Ripley Printers UK Ltd
Unit F Salcombe Court
Meadow Lane Industrial Estate
Alfreton
Derbyshire
DE55 7EG
United Kingdom
Ripley Printers UK Ltd is the data controller for personal data processed through NCR Forms.
If you have any questions about this Privacy Policy, how we use your personal data, or if you want to exercise any of your data protection rights, you can contact us at:
Email: hello@ncrforms.co.uk
Post: Ripley Printers UK Ltd, Unit F Salcombe Court, Meadow Lane Industrial Estate, Alfreton, Derbyshire, DE55 7EG, United Kingdom
2. WHOSE DATA WE PROCESS
We primarily process personal data relating to contacts at existing and prospective business customers, people requesting prices or information from us, visitors to our website, and people we contact in connection with relevant business-to-business marketing.
Although NCR Forms operates primarily business-to-business, information that identifies an individual — such as a person’s name, work email address or direct telephone number — is still personal data and is handled in accordance with UK data protection law.
3. PERSONAL DATA WE COLLECT
3.1 Information you give us
You may provide information directly to us when you request a quote, complete a contact form, upload artwork or an existing form, communicate with us by email or telephone, place an order, make a payment, or otherwise deal with us.
This may include your name, job title, company name, business address, delivery address, email address, telephone number, information about your role, printing requirements, quantities and specifications, artwork and uploaded files, order information, and communications with us.
If you send us existing artwork, a scan, photograph or example form, that file may contain personal information about other people. Wherever practical, we ask that unnecessary real personal information is removed or redacted before files are sent to us.
We do not ask customers to provide special category personal data, such as health information, religious beliefs or other particularly sensitive information. If such information appears unnecessarily in an example form or artwork, we may ask you to provide a redacted version.
Payments may be processed using a third-party payment provider such as Stripe. Payment providers process payment information through their own secure systems. We may receive information such as payment status, transaction reference and related order information rather than your full payment card details.
3.2 Information collected when you use our website
When you visit our website, certain technical information may be collected automatically. This can include your IP address or approximate location, browser and device information, pages visited, how you arrived at the site, campaign information contained in links, website interactions and your cookie or consent preferences.
Our use of analytics and similar technologies is explained in section 7.
3.3 Information obtained from third-party and public business sources
For relevant business-to-business sales and marketing, we may obtain professional contact information from sources including Apollo.io, company websites, professional networking services such as LinkedIn, business directories, publicly available business information and referrals.
The information obtained may include your name, job title, employer, business email address, business telephone number, business location, industry and other information relating to your professional role.
When we use personal data obtained from another source, we provide access to appropriate privacy information in accordance with applicable data protection requirements.
4. HOW WE USE PERSONAL DATA AND OUR LEGAL BASES
We only process personal data where we have a lawful basis under UK data protection law.
Enquiries, quotes and orders
We use information to understand your requirements, prepare quotations, communicate about proposed work, process orders, produce your NCR forms and arrange delivery.
Our legal basis is normally taking steps at your request before entering into a contract or performing a contract with you or your business.
Customer service and relationship management
We use information to answer questions, resolve problems, discuss artwork or specifications, manage existing orders and support ongoing customer relationships.
Our legal basis is performance of a contract where applicable and our legitimate interests in operating our business and providing effective customer service.
Business-to-business sales and marketing
We may use relevant professional contact information to introduce NCR Forms and our printing services to businesses that we reasonably believe may have a legitimate requirement for them.
Where appropriate, we rely on our legitimate interests in promoting our services and developing our business, having considered the interests and rights of the individuals concerned.
We also comply with the applicable rules governing electronic marketing under the Privacy and Electronic Communications Regulations (“PECR”). Where consent is required, we will only send marketing where we have an appropriate basis to do so.
You can object to direct marketing at any time.
Website operation, security and improvement
We use information to operate and secure our website, diagnose problems, prevent misuse and understand how the website is being used.
Our legal basis for essential website operation and security is our legitimate interests in operating and protecting our business.
For non-essential cookies or similar technologies, we use consent where required.
Analytics
We use website analytics to understand how visitors find and use the NCR Forms website and to help improve our pages, content and quote journey.
Where analytics technologies require consent, they are controlled through our cookie consent system.
Payments, accounting and business administration
We process information where necessary to accept payments, maintain financial and order records, prevent fraud, manage our business and comply with accounting, tax and other legal obligations.
Our legal bases include performance of a contract, legitimate interests and compliance with legal obligations.
5. WHO WE SHARE PERSONAL DATA WITH
We use trusted service providers to help operate NCR Forms and may share personal data with them where necessary.
These include website hosting and email infrastructure providers, Google for services including Google Analytics and Google Tag Manager, Cookiebot by Usercentrics for cookie and consent management, Apollo.io for business-to-business prospecting and outreach, Stripe for payment processing, and other IT or technical service providers required to operate our website and communications.
We may also share information where necessary with delivery and logistics providers, accountants and other professional advisers, suppliers involved in fulfilling an order, and government bodies, regulators, courts or law enforcement agencies where required by law.
Service providers acting on our behalf are required to handle personal data appropriately and only for the permitted purposes.
We do not sell your personal data.
6. INTERNATIONAL TRANSFERS
Some of the technology and service providers we use may process or make personal data accessible outside the United Kingdom.
Where a transfer of personal data outside the UK is subject to UK GDPR international transfer rules, we use an appropriate transfer mechanism where required. This may include UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement (“IDTA”) or the UK Addendum to the European Commission’s Standard Contractual Clauses, together with any required transfer assessment.
Where another lawful transfer mechanism applies, we may rely on that mechanism as permitted by UK data protection law.
7. COOKIES AND SIMILAR TECHNOLOGIES
The NCR Forms website uses cookies and similar technologies for purposes including essential website functionality, security, remembering privacy choices and understanding how visitors use our website.
We use Cookiebot to manage cookie information and visitor choices.
We also use Google Tag Manager to manage website tags and Google Analytics 4 to help us understand website usage and improve the site.
Non-essential technologies are controlled in accordance with the choices made through our consent system, except where a technology can lawfully be used without consent under an applicable exemption.
You can change your cookie preferences using the cookie settings facility available on the website.
Cookiebot also provides a Cookie Declaration containing further information about the individual cookies and technologies detected on the website, their purposes and their duration.
You can also control or delete cookies using your browser settings, although blocking certain technologies may affect website functionality.
8. HOW LONG WE KEEP PERSONAL DATA
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting and reporting requirements.
Enquiry and quotation information may be retained while an enquiry remains active and for a reasonable period afterwards so that we can respond to follow-up enquiries and understand previous quotations.
Customer, order, invoice and financial information may be retained for longer periods where necessary to maintain business records and meet legal, tax or accounting requirements.
Business prospecting and marketing information is periodically reviewed. If you object to marketing, we may retain limited information on a suppression or do-not-contact list so that we can continue to respect your preference rather than inadvertently contacting you again.
Website analytics and consent information is retained in accordance with the settings and retention periods of the relevant analytics and consent tools.
We delete or anonymise information when we no longer have a reasonable need to retain it.
9. HOW WE PROTECT PERSONAL DATA
We use appropriate technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, disclosure or alteration.
These measures include secure systems, access controls and passwords, limiting access to people who require information for their work, appropriate maintenance and updating of systems, and the use of reputable service providers.
No internet-based system can be guaranteed to be completely secure. Where a personal data breach occurs, we will assess it and make any notifications required by data protection law.
10. YOUR DATA PROTECTION RIGHTS
Depending on the circumstances and the legal basis on which we process your information, UK data protection law gives you rights including access to your personal data, correction of inaccurate information, deletion in certain circumstances, restriction of processing in certain circumstances, objection to certain processing, and data portability in certain circumstances.
Where we rely on consent, you can withdraw that consent at any time. Withdrawal does not affect processing that was lawful before the consent was withdrawn.
Your right to object to direct marketing
You have the right to object to the use of your personal data for direct marketing at any time.
If you ask us to stop sending you marketing communications, we will do so. We may retain limited suppression information to ensure that your request continues to be respected.
To exercise your rights, contact us using the details in section 1. We may need to verify your identity before responding to a request.
You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).
We would appreciate the opportunity to address any concerns directly first, but you are not required to contact us before making a complaint to the ICO.
11. BUSINESS-TO-BUSINESS MARKETING
NCR Forms may contact relevant businesses and professional contacts about printing services that we reasonably believe may be relevant to their work.
For example, we may contact transport, logistics, fleet, operations or compliance professionals about NCR paperwork used within commercial transport operations.
Under PECR, the rules for electronic marketing differ depending on the type of business being contacted. Companies and certain other incorporated organisations are treated as corporate subscribers, while sole traders and certain partnerships receive different protections.
Where PECR does not require consent for an electronic marketing message, we may rely on legitimate interests as our UK GDPR lawful basis where appropriate.
Where PECR requires consent or another specific condition, we will comply with those requirements.
Marketing communications will identify the sender and provide a way to opt out. You can unsubscribe or object at any time, and we will maintain appropriate suppression records so that your preference is respected.
We may continue to send necessary non-marketing communications after an opt-out, such as messages relating to an enquiry, quotation, order, payment or other existing business relationship.
12. AUTOMATED DECISION-MAKING
We do not currently use solely automated decision-making that produces legal effects, or similarly significant effects, on individuals in connection with NCR Forms enquiries, quotations or orders.
13. LINKS TO OTHER WEBSITES
Our website and communications may contain links to third-party websites or services.
We are not responsible for the privacy practices of independent third parties. We recommend reviewing the relevant privacy information when visiting another website or using another service.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our business, technology, service providers or legal requirements.
The latest version will be published on the NCR Forms website and the date at the top of this page will show when it was last updated.