Privacy Policy
Last updated: 3 June 2026
Grantham Manufacturing Limited ("GMLUK", "we", "us") is a UK-registered paper packaging manufacturer based in Grantham, Lincolnshire. This policy explains what personal information we collect through this site, why we collect it, who we share it with, and the rights you have over it.
Who we are
GMLUK is the controller for personal data submitted via this site. You can contact us at hello@gmluk.com or by post at GMLUK, Alma Park Industrial Estate, Grantham, NG31 9SE, United Kingdom.
What we collect and why
We only collect information you actively give us through one of the forms on this site, plus a small amount of technical information needed to keep the site working and to understand how it is used.
Contact, quote and sample request forms: your name, email, company, message, and any product details you choose to share. We use these to reply to your enquiry and, where relevant, to send a quote or arrange a sample dispatch.
CO₂ calculator: the inputs you provide and the email address you give us if you ask for the PDF report. We use the email only to send the PDF and a single follow-up if you ask for one.
Anonymous site analytics: aggregate page-view counts and JavaScript error reports via PostHog, with no cookie or device storage and no persistent identifier. This runs from the moment a page loads under legitimate interest and is used to understand which pages help and to catch errors. See our Cookie Policy for the technical detail.
Persistent analytics (only with consent): if you accept the Analytics category in the cookie banner, PostHog upgrades to persistent storage so we can recognise return visits across sessions, capture which elements get clicked, and record session activity to improve the experience.
Advertising data (only with consent, and only once we enable it): if you accept the Advertising category we may load Google Ads measurement and similar tools to understand which campaigns work. No advertising tag is loaded today.
Essential technical data: IP address and request metadata processed by Cloudflare while serving the site. This is needed for security and to deliver pages and is not used to build a profile.
We do not process card or payment data on this site. Orders are agreed and invoiced outside of the website.
Lawful basis
Our lawful bases under UK GDPR are:
Legitimate interests — responding to business enquiries, fulfilling quote and sample requests, and running anonymous site analytics with no device storage to understand how the site is used.
Consent — persistent analytics (including session recording) and any future advertising tools. You give consent through the cookie banner and can withdraw it at any time.
Performance of a request you have made — sending you the calculator PDF when you ask for one.
Who processes your data on our behalf
We use a small number of established providers, each bound by their own data protection terms:
Cloudflare (United States, with EU data residency where available) — site hosting, edge caching, bot protection.
Storyblok (Germany / EU) — content management.
Resend (United States) — transactional email for replies and PDF delivery, under standard contractual clauses.
PostHog EU (Germany / EU) — analytics and error tracking. Runs anonymously from page load; identified analytics is enabled only after you accept the Analytics category in the cookie banner.
We do not sell personal data and we do not share it with anyone outside this list except where required by law.
How long we keep it
Enquiry, quote and sample correspondence is kept for up to 24 months from your last contact, so we can pick up follow-on conversations and answer queries. Calculator PDF requests are kept for 12 months. Aggregate analytics is kept for up to 12 months; session recordings, where consent has been given, are kept for 90 days. Anything you ask us to delete is deleted from active systems within 30 days.
Your rights
Under UK GDPR you can ask us to:
show you what data we hold about you
correct anything that is wrong
delete it, where we no longer need it for a lawful purpose
restrict or object to how we use it (including objecting to anonymous analytics)
receive a copy in a portable format
withdraw consent for persistent analytics or advertising at any time via the cookie banner, or by clearing site data for gmluk.com in your browser settings
Email hello@gmluk.com to exercise any of these. If you are unhappy with how we have responded you can raise a complaint with the Information Commissioner's Office (ico.org.uk).
Children
This is a B2B site aimed at businesses. We do not knowingly collect personal data from anyone under 16.
Changes
If we materially change how we use personal data we will update this page and refresh the "last updated" date below. Trivial wording fixes will not be flagged.