Privacy Policy

What information we collect

YESSS collects data to operate effectively and provide you the best experiences with our products. You provide some of this data directly when interacting with us, such as when you submit your details to create a YESSS customer account or contact us with a query. We get some of it by recording how you interact with our products by, for example, using technologies like cookies. We also receive some data from third parties, as explained below under "Information from other sources".

You have control over what data we collect. When asked to provide personal data, you may decline. However, if you choose not to provide data that is necessary to provide goods or service, we may not be able to provide the goods or service.

The type and amount of data we collect depends on your relationship with us.

Name and contact data: We collect your first and last name, email address, postal address, phone number and other similar contact data such as delivery address. If you are a contact at one of our trade customers or suppliers, we also collect your job title and business contact details.

Credentials: We collect passwords, password hints and similar security information used for authentication and account access.

Demographic data: We collect data about you such as your age, where we need it, for example to confirm you are 18 or over when you open an account or to carry out credit checks.

Payment data: We collect data necessary to process your payment if you make purchases, such as your card number, card type, expiry date and cardholder name. Card payments are processed in line with the Payment Card Industry Data Security Standard (PCI DSS). We do not store your card security code (CVV). Full card numbers are encrypted or replaced with a token by our payment provider, so they are not held in readable form on our systems.

Purchases: We collect data about the quotes you request, the orders you place and purchases you make. If you have an account with us, we also hold information about your balance and any overdue payment.

Credit accounts: If you apply for a credit account, we will collect your information to make searches with credit reference agencies and administer your account. You can find out more about this in the Credit checks section of How we share your data.

Location data: The mobile version of our Website will collect information about your location if location services are enabled on your mobile phone to help you locate your nearest YESSS branch. If your location services are not turned on, we will not collect any information about your location and you will need to manually input a postcode to find your nearest branch.

Your interactions with us: We collect the content of messages, e-mails, letters or phone calls you send us, such as feedback and product reviews you write, or questions and information you provide for customer support. When you contact us, phone conversations may be monitored and recorded for training, quality and record-keeping purposes.

Information on what you view, click on and access by way of our marketing emails and text messages (SMS or MMS), websites and mobile apps. We also gather this kind of information when you use our in-store WIFI networks to access the internet. We may collect the time and geographic location of your device when you do so. For websites, this information may also include where you came to our site from, and where you went when you left it. We also track how often you visit and use our websites and mobile apps. We do this via email and website cookies and similar tracking technology built into our mobile apps. Where the law requires it, we ask for your consent before using non-essential cookies and similar technologies. Our Cookie Policy (www.yesss.co.uk/cookies) explains this in more detail and how to change your choices.

Technical information about the devices you use to access our websites and mobile apps. We also collect this detail when you use our in-store WIFI networks to access the internet. We specifically save each device's unique identifying codes (MAC address or IMEI number), device model, device name, relevant IP address, operating system and version, web browser and version, and geographic location.

CCTV: If you enter our branches or other YESSS buildings, your image may be captured by our security cameras. All of our CCTV facilities are handled directly by YESSS. We will regularly delete CCTV footage, unless it is being used to investigate an alleged crime or an incident, in which case it may be retained for up to 2 years following the conclusion of any investigation.

Information from other sources: We receive some information about you from third parties, including credit reference agencies and fraud prevention agencies (when you apply for or hold a credit account), Companies House and other public registers, trade references you give us, our payment providers, and your employer where you are named as a contact or authorised buyer on a trade account.

Payments taken through our Clover point-of-sale system

We use Clover point-of-sale (POS) devices and software, provided by Fiserv, to take card and other payments in our branches and for telephone and delivery orders. This section explains the personal data processed through Clover. It applies alongside the rest of this policy.

Our role and Fiserv's role: YESSS is the data controller for our customers' personal data processed through Clover. This means we decide why and how it is used. Fiserv (and the group companies that provide the Clover service) acts as our data processor when it provides the POS software, devices and related services to us, and only uses the data on our instructions. Fiserv also acts as an independent data controller where it processes payment data for its own purposes as a regulated payment services provider, for example to authorise and settle card transactions, prevent fraud, and meet anti-money laundering and card scheme rules. Fiserv's privacy notice explains how it uses personal data. See https://www.fiserv.com/en/about-fiserv/privacy-notice.html

What data is processed through Clover:

Payment and transaction data

For each card payment or refund, we store:

Card details: card brand (for example Visa or Mastercard), the last four digits of the card number, how the card was presented (chip, contactless or manually keyed), the authorisation code, the payment reference, the card application identifier, and the cardholder verification result.

Transaction details: the amount and VAT amount, Clover's payment and refund identifiers, the transaction status and any error message returned, and the date and time of the transaction.

Location details: the branch where the payment was taken, and the Clover merchant ID and terminal serial number used.

Related documents: the sales order, invoice, return or customer account the payment relates to.

Purchased goods: We send Clover only the payment amount and VAT amount. We do not send itemised orders or product data through the Clover API. When a receipt is printed on the Clover terminal, Yesss Software creates the receipt image and sends it to the terminal to print. This image includes the items purchased (product code, quantity and price), the totals, and the branch's contact details.

Customer data

We do not send customer email addresses or phone numbers to Clover, and we do not use Clover's e-receipt, customer or marketing features. A printed receipt may show the customer's name and, for account payments, their account number. Email receipts are sent by Yesss Software, using the email address held on the customer's account, not through Clover. We do not collect marketing preferences or loyalty data through the Clover integration.

Personnel data

We do not read or store Clover employee records, clock-in or clock-out times, shifts or tips. Each transaction is linked to the Yesss staff member who processed it, using their internal Yesss user ID, so that we can audit and reconcile payments.

How we use it and our lawful bases: We use this data to take payment and issue receipts (to perform our contract with you); to process refunds, handle chargebacks and resolve disputes, prevent and detect fraud, and report on branch performance (our legitimate interests); to keep accounting and tax records (legal obligation); to send you an e-receipt where you ask for one (contract); to send marketing only where you have agreed or the law otherwise allows (consent or legitimate interests, see "Communications" below); and to manage staff rotas and pay (employment contract and legal obligation).

Security: Card data captured by Clover devices is encrypted at the point of entry and is processed in line with PCI DSS. We do not see or store full card numbers or security codes.

Why we process your information

There are several grounds on which we may collect and use your data, depending on your relationship with us.

Because you have agreed: We rely on your consent for some activities, for example sending marketing emails or texts to individual customers where the law requires consent, or using non-essential cookies. Where we rely on consent, you can withdraw it at any time.

Because we need it to execute or take steps to enter into a contract with you: If you are one of our customers, we collect or use your personal data because it is necessary for the performance of a contract you are a party to, for instance to deliver goods you have ordered or to take payment through our Clover point-of-sale system. We may also collect your information because you requested us to take steps prior to entering into a contract with us, for instance when you ask us to give you a quote.

Because it is in our legitimate interest: We also sometimes process your information in pursuit of our legitimate interests to:

• carry out direct marketing activities and send you communications in that regard;
• improve our business and operate it efficiently;
• prevent fraud and other crime;
• assess credit applications, manage credit risk and recover debts owed to us;
• share information within the YESSS Group for internal administrative purposes; and
• ensure general safety and security, including the security of our networks and IT systems.

When we process your information on that basis, we always make sure that we balance our interest in having the information with your rights and reasonable expectations. The law recognises some of these activities, such as preventing crime, direct marketing, intra-group administration and keeping networks and systems secure, as examples of processing that may be carried out in an organisation's legitimate interests. You can ask us for more information about the balancing test we have carried out.

Because we need it to comply with the law: We must process some information to meet our legal obligations, for example keeping accounting and tax records, carrying out anti-money laundering checks, and responding to lawful requests from authorities.

Automated decisions: When you apply for a credit account, we may use automated scoring from credit reference agencies to help assess your application. Every decision is reviewed by a member of our credit team. If we ever make a decision about you that has a legal or similarly significant effect based solely on automated processing, we will tell you, and you have the right to make representations, to ask for a person to review the decision, and to challenge it.

What we do with it

YESSS uses the data we collect to operate our business and provide the goods and services we offer. We also use it to send communications, including promotional communications and to serve our legitimate business purposes.

Providing and improving our goods and services: We use data to provide the goods and services we offer, improve them, and perform essential business operations.

Providing our goods and services: We use your data to process your transactions with us, e.g. the purchase of goods, and to provide our goods and services to you.

Customer support: We use your data to process any request for assistance you make and to provide other customer care and support services.

To check that you have (or are likely to have) the means to pay us for any products you order from us over the internet or via one of our mobile apps.

Legitimate business purposes: We use data to detect and prevent fraud, to resolve disputes and enforce our agreements. We also use it for our own legitimate business purposes including audit or internal training.

To provide you with our websites, mobile apps and in-store WIFI networks, which all require a certain amount of technical information to work properly. For example, our local store finder is most effective when we can tell where you are first.

To power our security measures and services so you can safely access our website and mobile apps. It also lets us do things such as recognise your username and password, as well as reset them if you happen to forget what they are.

Business Operations: We use data to develop business intelligence that enable us to operate efficiently, make informed decisions and report on the performance of our business. We also analyse your use of our websites, apps and your response to our communications to improve the goods and services we offer.

Communications: We use data we collect to deliver and personalise our communications with you. For example, we may contact you by email or other means to remind you about items left in your online shopping basket, update you on a request you have made, invite you to participate in a survey or tell you that you need to take action to keep your account active.

We also use your data to send you marketing communications about products, activities, promotions or other matters that we feel may be of interest or use to you. You can sign up for email subscriptions and choose whether you wish to receive promotional communications from YESSS by email, SMS, post and telephone. For information about managing email subscriptions and promotional communications please contact us at [email protected]

We will only send marketing emails or texts to individual customers (including sole traders and partnerships) where you have agreed, or where you have bought, or asked about buying, goods from us and we are telling you about similar goods, and you were given a simple way to opt out when we collected your details. We may send marketing to contacts at limited companies and other corporate customers on the basis of our legitimate interests. Every marketing message includes a simple way to opt out.

How we share your data

We share your personal data with your consent or as necessary to complete any transaction or provide any goods or service you have purchased. We may also share your details with suppliers or vendors we hire to carry out certain tasks on our behalf, and to exercise or defend our legal rights and fulfil our legal obligations. We do not sell your personal data.

Payment

When you provide payment data to make a purchase, we will share payment data with banks and other entities that process payment transactions or provide other financial services, including Fiserv, which provides our Clover point-of-sale and card payment services, and the card schemes (such as Visa and Mastercard), and for fraud prevention and credit risk reduction.

Vendors and Suppliers

We sometimes use third party vendors or suppliers to carry out certain activities, such as processing and sorting data, administering our Rewards scheme, monitoring usage of our website and issuing e-mails for us. These include providers of IT, cloud hosting and software services, point-of-sale and payment services, delivery and logistics, marketing and email platforms, and professional advisers. In such cases, we may share your contact details, sale data and other relevant information. Our partner companies must abide by our data privacy and security requirements, and are not allowed to use personal data they receive from us for any other purpose.

Sale data

We sometimes share sell out data with our suppliers to assist them in production planning. Where possible this data is aggregated so that it does not identify individuals. Where we share customer-level sales data with a manufacturer, for example to support a project price or rebate claim, we share only the business details needed for that purpose.

Credit checks

If you apply for a credit account, we will share your data with credit reference agencies, who will keep a record of your application and share information with other businesses. This will be for the customer who is applying and any guarantor. As part of this process, those credit reference agencies will search your business and personal credit records and those of persons financially linked to you. You can obtain more information on how these agencies process your data by referring to their Privacy Policy, which will be displayed on their website. We use various credit reference agencies. The Credit Reference Agency Information Notice (CRAIN), available on each agency's website, explains how the main agencies use and share personal data.

Credit checks are undertaken at the application stage and at other stages such as the reopening of a dormant credit account, where there is an application to increase the credit limit, or where there are concerns over the ongoing financial stability of the customer.

When you apply for a credit account, you warrant that you have sought and obtained consent from persons financially linked to you for their information to be provided as part of the credit search. If your application is successful, we will let credit agencies know of any change of address, payments made, account balance, defaults on payment, late payments, disputes, or debts. If you make further credit applications, YESSS or other organisations may use the information recorded on your personal or business credit file to assist in making decisions. We may share those details with other companies in our group, or with fraud and theft prevention agencies.

Debt recovery

We sometimes share information with debt collection agencies where payments were missed or the correct amount has not been paid.

YESSS Group

We share personal data among YESSS affiliates and subsidiaries, including our group companies, for example those in France, Germany, Holland, Italy, Luxembourg and Tunisia, which provide shared finance, credit control and administrative support. We may also disclose personal data as part of a corporate transaction such as a merger or acquisition.

Finally, we will access, transfer, disclose and preserve personal data when we have a good faith belief that doing so is:

1. allowed under applicable law;
2. necessary to respond to valid requests for information, including from law enforcement agencies;
3. necessary to protect our customers, for example to prevent fraud.

Mobile app platforms

Our mobile apps run on third party software platforms, for example, Apple's iOS platform which powers Apple's iPhone and Google's Android platform which powers Android-based smartphones. If you use any of our mobile apps, your usage of those apps is also subject to the relevant mobile app platform provider's terms and conditions and privacy policy. You should review their terms and conditions and privacy policy to ensure you understand what information (if any) they will gather on you, how they will use that information, and what you may be able to do if you are unhappy about it.

Your rights / access (UK and EEA privacy rights)

You have rights over how we use your data. These rights apply whether your data was collected online, in a branch, over the phone or through our Clover point-of-sale system.

Access: You have a right to know whether we hold personal information about you. Where this is the case, you may request a copy of your personal data we hold, as well as information about how it is being used. We will respond within one month of receiving your request, or of receiving any information we need to confirm your identity or clarify your request. We can extend this by up to two further months if your request is complex or you have made several requests, and we will tell you if we need to. We will carry out reasonable and proportionate searches for your information. Making a request is free. We may only charge a reasonable fee, or refuse, if a request is manifestly unfounded or excessive.

Rectification: Where information held about you is inaccurate or incomplete, you may request its rectification or completion.

Objection: You have a right to object to the use of your data for marketing purposes, and if you do we will stop. Additionally, where we have used your data in pursuit of our legitimate interests, you can ask us to stop (subject to conditions).

Restriction: You have a right to ask us to restrict our use of your personal data in some circumstances, for example whilst we investigate a complaint that the data we hold about you is inaccurate (subject to conditions).

Erasure: In certain circumstances, you may request that your information be erased (subject to conditions).

Data portability: Where we process information you have given us on the basis of your consent or a contract, and the processing is automated, you can ask us to give it to you in a structured, commonly used, machine-readable format, or to send it to another organisation.

Automated decisions: You have rights in relation to significant decisions made solely by automated means, as explained under "Automated decisions" above.

Withdrawal of consent: You are allowed to withdraw your consent to our use of your data at any time. If there is no other justification for the use of your data, we will stop using it.

Complaint: You have the right to complain to us and to the ICO. See "How to make a complaint" below.

To exercise any of these rights, or for further information on how your personal data is handled, please contact our Data Protection Officer at [email protected], or write to the Data Protection Officer, YESSS House, Foxbridge Way, Normanton Industrial Estate, Normanton, West Yorkshire, WF6 1TN.

How we verify your identity: To protect your information, we need to check that a request comes from you. We will normally ask you to confirm details we already hold, such as your account number, the email address or phone number on your account, or details of a recent transaction (for example the date, branch and amount of a card payment). If we cannot verify you this way, we may ask for a copy of photo ID and proof of address. We will only use this to confirm your identity and will delete it once we have done so. If someone makes a request on your behalf, we will need your written authority. We will not ask for more information than we need.

If you are in the European Economic Area, you have equivalent rights under the EU GDPR and can also complain to your local data protection authority (in France, the CNIL).

Your Communications Preferences

You can choose whether you wish to receive promotional communications from YESSS by email, SMS, postal mail and telephone. If you receive promotional email or SMS messages from us and would like to opt out, you can do so by following the instructions in those messages.

You can also manage your preferences regarding the receipt of promotional materials by signing into the My Account section of our Website and update contact information, manage contact preferences, or opt out of promotional materials. Please note we will process your request promptly, but in some cases you may need to allow up to 14 days for the changes to be effective.

If you are not signed up for an online YESSS account, you can manage your email contact preferences by contacting [email protected].

How to make a complaint

If you are unhappy with how we have used your personal data, please tell us. You can complain by email to [email protected], or in writing to the Data Protection Officer at the address above. You do not need to use a particular form or particular words.

We will acknowledge your complaint within 30 days, look into it without undue delay, keep you informed of progress, and tell you the outcome.

If you are not satisfied with our response, you can complain to the Information Commission (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Children's privacy

Our goods and services are intended for trade customers and adults. Our websites, apps and Clover payment services are not directed at children, and we do not knowingly collect personal data from children under 13 (or under 16 where local law in the European Economic Area sets a higher age). You must be 18 or over to open a YESSS account. If we learn that we have collected a child's personal data without appropriate consent from a parent or guardian, we will delete it promptly. If you think we may hold information about a child, please contact our Data Protection Officer.

How long we keep your information

YESSS retains personal data for as long as necessary to provide you with the goods and services you have requested, to operate our business, or for other essential purposes such as complying with our legal obligations, resolving disputes and enforcing our agreements. How long we keep data for depends on what it is used for, so retention periods will vary for different types of data.

The criteria below are good indicators of how we decide how long to keep data for:

• How long is the personal data needed to provide the goods and services and operate our business? This includes such things as maintaining good business and financial records. This is the general rule that establishes the baseline for most data retention periods.
• Is YESSS subject to a legal, contractual or similar obligation to retain the data? This includes cases where the law prescribes we should keep information for a given period of time, or where data must be preserved during an investigation, for current or potential litigation or contractual purposes. Some data must also be kept for audit purposes.
• Have you provided consent for a longer retention period? If so, we will retain data in accordance with your consent.

As a guide, the minimum period that information relating to an account will be required to be kept is 6 years from the last transaction.

International transfers

In some cases, we may need to transfer your information outside the UK because we (or a third party or vendor we use) store it on systems that are hosted abroad, or because we need to share it with companies that are based outside the UK, including our group companies and our payment and IT service providers.

Where this is the case, we will always ensure that your information is safe and only sent to organisations providing adequate safeguards, such as:

• organisations in countries the UK Government has approved as providing an adequate level of protection under UK adequacy regulations, which include the countries of the European Economic Area such as France;
• organisations bound by contracts approved for UK transfers, namely the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, both issued by the ICO;
• US organisations certified under the EU-US Data Privacy Framework that have signed up to its UK Extension (the "UK-US Data Bridge").

Where we rely on the IDTA or the UK Addendum, we assess, acting reasonably and proportionately, whether the protection your data will receive in the destination country is not materially lower than in the UK, and we put extra safeguards in place where needed. Our payment services provider Fiserv and some of our IT providers may process data in the United States. Our group support team in Tunisia, which is not covered by UK adequacy regulations, accesses personal data under the IDTA.

You can ask our Data Protection Officer for more information or a copy of the relevant safeguards.

We may also transfer your data abroad if we have a legal obligation to do so.

Changes to this Policy

This Policy was last updated on 30.09.2026. If we change our Privacy Policy, we will update the changes on this website. We may also place notices on other pages of the website so you check our current policy at any time. If we make significant changes, we will tell you directly where appropriate, for example by email. Our Cookie Policy is available separately at www.yesss.co.uk/cookies.

Who we are and how to contact us

The registered names and numbers for our main UK trading companies are YESSS 'A' Electrical Limited (Company Registration Number 07656807) and YESSS 'B' Electrical Limited (Company Registration Number 07650325). We are a limited company incorporated in England and Wales and our registered office address is:

We are the 'data controller' of the information you provide us with, including information about our customers processed through our Clover point-of-sale system. This term is a legal phrase used to describe the person or entity that controls the way information is used and processed.

Our Data Protection Officer can be contacted at [email protected], or by writing to the address above.

We are registered with the Information Commission (ICO) in the UK. Our registration number is ZA017620.

Where to go if you want more information about your privacy rights

The Information Commission (known as the ICO) regulates data protection and privacy matters in the UK. They make a lot of information accessible to consumers on their website and they ensure that the registered details of all data controllers such as ourselves are available publicly. You can access them here: https://ico.org.uk/for-the-public/.

You can make a complaint to the ICO at any time about the way we use your information. However, we hope that you would consider raising any issue or complaint you have with us first, as described under "How to make a complaint". Your satisfaction is extremely important to us, and we will always do our very best to solve any problems you may have.