Privacy Policy

This privacy policy explains how Ashgrove Group Ltd, trading as No Ordinary Paper (“we”, “us”, “our”) collects and uses personal information when you visit noordinarypaper.com (the “site”), contact us, or buy from us. We are committed to protecting your privacy and handling your information openly and lawfully.

1. Who we are

Ashgrove Group Ltd is the data controller for the personal information described in this policy. We are a company registered in Scotland (company number SC829097), with our registered office at Damhead Way, Dales Industrial Estate, Peterhead, AB42 3QQ, Scotland. Our VAT number is GB 482278074.

If you have any questions about this policy or how we use your information, please contact us:

• Email: hello@noordinarypaper.com
• Post: No Ordinary Paper, Ashgrove Group Ltd, Damhead Way, Dales Industrial Estate, Peterhead, AB42 3QQ, Scotland
• Phone: 01224 091000

2. The information we collect

Information you give us

• Enquiries: when you use the contact form on our site, or email or call us, we collect your name, company (if given), email address, and anything you include in your message.
• Orders and accounts: if you order from us or open a trade account, we collect details needed to supply you, such as your name, delivery and billing address, phone number, organisation (for example a school), and order history. Card payments are handled by our payment provider; we do not see or store your full card details.
• Marketing preferences: if you ask to hear from us, we record your consent and your preferences.

Information we collect automatically

• Technical information: such as your IP address, browser type and version, device type, operating system and the pages you visit, collected through our website hosting and security systems.
• Cookies: see section 8 below.

We do not knowingly collect information from children. Our site is aimed at businesses, schools and adult consumers.

3. How we use your information, and our lawful basis

UK data protection law requires us to have a lawful basis for each way we use your information.

What we use it for	Lawful basis
Replying to your enquiry, samples or quote request	Our legitimate interests in responding to people who contact us, or taking steps at your request before entering a contract
Processing and delivering orders, invoicing and after-sales support	Performance of a contract with you
Keeping business and accounting records	Legal obligation
Sending you news, offers and product updates by email	Your consent (for individuals), or our legitimate interests for existing business customers (you can opt out at any time)
Running, securing and improving our site, and preventing fraud or misuse	Our legitimate interests in operating a safe, working website
Measuring how our site is used (if analytics cookies are enabled)	Your consent

Every marketing email includes a link to unsubscribe, or you can email hello@noordinarypaper.com at any time.

4. Who we share it with

We never sell your personal information. We share it only where needed, with:

• Service providers who help us run our business, such as our website host, email and IT providers, payment processors, couriers and delivery partners, and accountants. They may only use your information on our instructions.
• Other companies in our group, where needed to supply or support our products.
• Buyers of our business, if we sell or restructure all or part of our business, on the basis that they keep using it in line with this policy.
• Authorities and advisers, where we are required by law, to protect our rights, or to prevent fraud and credit risk.

5. International transfers

Some of our service providers may store or process information outside the UK. Where this happens we make sure appropriate safeguards are in place, such as a UK adequacy decision or the UK International Data Transfer Agreement or Addendum.

6. How long we keep it

• Enquiries: up to 2 years after our last contact, unless they lead to an order.
• Orders, invoices and account records: 6 years after the end of the financial year they relate to, as required for tax and accounting purposes.
• Marketing: until you unsubscribe or withdraw consent. We keep a short record that you opted out so we don’t contact you again.
• Technical logs: for a limited period set by our hosting and security providers, normally no more than 12 months.

7. Keeping it secure

We use appropriate technical and organisational measures to protect your information, including encrypted (HTTPS) connections and access controls. No method of sending information over the internet is completely secure, but once we receive your information we take care to protect it.

8. Cookies

Cookies are small text files placed on your device when you visit a website. We use:

• Strictly necessary cookies, which the site needs to work and stay secure (for example to protect forms from spam). These don’t need your consent.
• Analytics cookies (only if we enable them), which help us understand how visitors use the site so we can improve it. We will only set these with your consent, which you can change at any time.

Our site may also load fonts or content from third-party services, which may receive your IP address so the content can be shown. You can block or delete cookies in your browser settings, although some parts of the site may not then work properly.

9. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information;
• ask us to restrict or stop using your information, or object to how we use it (including for direct marketing, which we will always stop);
• ask for your information in a portable format;
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, email hello@noordinarypaper.com. There is normally no fee, and we will respond within one month.

10. Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

11. Links to other websites

Our site may link to other websites, including our online shop partners. We are not responsible for their privacy practices, so please read their privacy policies.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. Where changes are significant, we will let you know where appropriate.

Last updated: 28 September 2026