Privacy notice.

Last updated 20 August 2026

Who we are

Tallon Trading is a trading name of Butyros Limited. Butyros Limited is the controller of personal data collected through this site. Our registered office is 60 Cheapside, London EC2V 6AX. Company number 16497512. You can contact us about privacy at hello@tallontrading.co or by writing to the registered office.

Information we collect

Depending on how you use the site, we collect your name, business and contact details, trading postcode, company and VAT details, account login details, enquiries, marketing choice, quotation and order information, saved lists and account activity. Passwords are stored as one-way password hashes, not as readable passwords.

If you upload a document for price matching, you must confirm that you are authorised to share it. Tallon stores the exact original upload and a structured comparison in private storage for up to 30 days to provide and support that price match. Uploaded documents cannot be compared without this acknowledgement. Pasted lines create no original file for Tallon to store. CSV, Excel and text-based PDF files are parsed by Tallon. Photographs and scanned PDFs are sent securely to a specialist document-reading provider to transcribe the printed product data. Under the provider's standard commercial terms, it may separately retain inputs and outputs for up to 30 days. We may retain an account comparison, offer or quotation record needed to provide the service and maintain your account record.

Why we use it

We use personal data to respond to enquiries, assess trade applications, create and secure accounts, prepare quotations, process accepted business, provide account records, prevent misuse, meet legal and accounting duties and improve our trade service.

Our lawful bases are taking steps at your request before a contract and performing a contract, our legitimate interests in operating and securing a business-to-business wholesale service, compliance with legal obligations and, for optional marketing, your consent. You can withdraw marketing consent at any time by emailing us.

Sharing and international processing

We share personal data only where needed with service providers that host and support the site, professional advisers, payment, fulfilment and delivery providers used for accepted business, and public authorities where the law requires it. We do not sell personal data.

Some service providers may process data outside the UK. Where this happens, we rely on an applicable adequacy regulation or approved contractual safeguards. Contact us if you would like more information about the safeguards relevant to your data.

Retention and security

We keep data only for as long as needed for the purpose collected, the life of an account or trading relationship, legal and accounting requirements, security and the handling of claims. The exact period depends on the record and those requirements. Expired sign-in sessions are removed, and necessary session cookies expire after eight hours.

We use access controls, encrypted HTTPS connections, one-way password hashing and private server storage. No internet service can guarantee absolute security, so please contact us promptly if you believe your account has been compromised.

Cookies and analytics

The customer portal uses strictly necessary tt_session and tt_csrf cookies for sign-in and request security. Optional analytics is currently disabled while we verify provider safeguards. If we enable it, analytics will stay off until you choose Allow analytics. The site remains fully usable without analytics, and you can reject it just as easily from the same choice panel.

With your permission, an analytics provider will help us understand which pages, navigation choices and searches help trade buyers. The words you type into catalogue search never leave the page. The provider receives random anonymous journey and session identifiers, safe public route names and a tightly limited set of interaction outcomes. Session replay and autocapture are disabled. Analytics does not send personal details, form or invoice content, commercial values, full postcodes, full URLs or commercially sensitive product or trading information. Referrers are reduced to broad classes, campaign parameters are not retained, and routes containing customer references are rejected. We enable this optional service only when a reviewed provider retention setting is in place.

Global Privacy Control and Do Not Track keep analytics off even if a choice was previously saved. You can reject or clear your analytics choice at any time through Privacy settings. Doing so stops collection and removes the queued session events held by your browser. Settings require JavaScript; without JavaScript optional analytics does not run. Necessary authentication and request-security cookies are separate and are never read by analytics.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict your personal data, object to processing, receive portable data and withdraw consent. These rights are not absolute. To exercise a right, email hello@tallontrading.co. We may need to verify your identity.

Your right to object: you can object at any time to direct marketing and, in some circumstances, to processing based on legitimate interests.

Complaints and changes

Please contact us first so we can try to resolve a concern. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

We will update this notice when our processing changes and publish the revised date on this page.