Privacy Policy

UK & EU Steel Quota Trackers · Last updated 3 August 2026

Who we are

The Free Steel Quota Tracker (UK) and the EU Steel Quota Tracker are operated by TrueNorth Engineering Ltd, Manchester, United Kingdom ("we", "us"). This policy covers both. We are the data controller for personal data collected through them. Contact: sales@tneltd.com · +44 7757 174 197.

The EU tracker is aimed at businesses importing into the EU, so where you are in the EU we process your data under the EU GDPR as well as the UK GDPR; the rights and contact routes below are the same either way, and you may also complain to your own national supervisory authority.

What we collect and why

Browsing the tracker requires no account and no personal data. If you sign up for quota alerts, we collect:

• Name, company and email address — to deliver your alert emails and know who we're talking to.
• Phone number (optional) — only used for SMS alerts, and only if you separately consent to SMS.
• Steel categories you watch, alert threshold, and grades you mention — so alerts cover what you actually buy. Some of this is pre-filled from what you searched on the page; you can edit it before submitting.
• Your consent choices and submission time — to evidence consent.

Legal basis and the email stream

Our alert emails are one communication stream: quota alerts plus occasional updates about relevant TrueNorth Engineering services. We process your data for this on the basis of your consent (UK GDPR Art. 6(1)(a)), given by ticking the consent box — which is required, because the alerts and the updates are the same stream. We confirm your signup by email first (double opt-in). You can withdraw consent at any time via the unsubscribe link in every email or by emailing us; unsubscribing ends the entire stream.

SMS alerts require a separate, optional consent (PECR). We will not text you without it, and you can withdraw it independently.

Where your data goes

• Form submissions go directly to Zoho CRM (Zoho Corporation, EU data centres — crm.zoho.eu), our customer relationship management processor. Zoho also supplies the anti-spam security code on the signup form; that check is loaded only once you start filling the form in, not when you arrive on the page.
• The live quota balances on the page are fetched by your own browser directly from HMRC's UK Trade Tariff API (UK tracker) or from a data file on our own web space, rebuilt nightly from EU customs sources (EU tracker) — no personal data passes through us for that.
• Fonts and all other page assets are served from our own web space. No third party is contacted simply because you loaded the page.
• We do not sell your data or share it with third parties for their marketing.

International transfers

Zoho CRM stores our data in EU data centres. Where you consent to analytics or advertising, Google LLC and LinkedIn Corporation process data in the United States, relying on the EU–US Data Privacy Framework and its UK Extension (both companies are certified), supported by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in the relevant processor terms. Ask us at sales@tneltd.com for a copy of the safeguards. If you choose "Essential only", no data leaves the UK/EEA as a result of your visit.

Cookies & analytics

The tracker works fully without cookies, and nothing is stored on your device or sent to a third party until you have made a choice on the banner. You get three options, presented equally:

• Essential only — nothing is set except the record of that choice, plus a short-lived cache of quota balances in your browser's session storage so the page doesn't re-query the source on every click. That cache holds no personal data and is cleared when you close the tab.
• Analytics only — Google Analytics 4 for measurement (pages, searches, signups), plus Zoho's web-form analytics, which records how the signup form is filled in so we can see where it confuses people. Advertising storage and ad personalisation stay switched off, and the LinkedIn Insight Tag is not loaded.
• Accept all — analytics as above, plus advertising: with Google signals, Google may use the data to build advertising audiences, and the LinkedIn Insight Tag lets us reach past visitors of this tracker with TrueNorth content on LinkedIn.

Your choice is stored with the date it was made and we ask again after 12 months. You can change or withdraw it at any time using the "Cookie choices" link in the footer of the tracker or at the bottom of this page — withdrawing deletes the analytics and advertising cookies already set and stops the tags immediately.

Zoho's anti-spam security code on the signup form sets a session cookie (crmcsr, zalb_…) when you start using the form. That is strictly necessary to stop automated signups, so it does not require consent — but it is not loaded unless you actually use the form.

Retention

We keep your details while your alert subscription is active. If you unsubscribe, or after 24 months without any engagement, we delete or anonymise your record unless we need it to evidence past consent or for legal obligations.

Your rights

You can ask us for access to, correction of, or deletion of your personal data; ask us to restrict processing; request portability; and withdraw consent at any time. Email sales@tneltd.com and we'll respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

Changes

If we change this policy we'll update this page and the date above. Material changes affecting your alerts will be flagged in the alert emails themselves.