Privacy Policy (v1.1)
What is your privacy policy?
We are committed to protecting your privacy and complying with data protection laws in the United Kingdom, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what personal data we collect, how we use it, and your rights. Last updated: 02 March 2026.
What personal data do you collect?
- Submit an enquiry via our contact form or email
- Call us or communicate through messaging platforms
- Access our website (e.g. IP address, browser type)
How do you use my data?
- Respond to your enquiries or support requests
- Manage active projects and deliver services
- Maintain security and prevent abuse
- Comply with legal obligations
What is our lawful basis for processing?
Under UK GDPR, we must have a lawful basis to process your data. We rely on the following:
- Contract: Processing is necessary to fulfill a contract with you or to take steps prior to entering a contract (e.g., providing quotes, delivering services).
- Consent: Where you have made an active agreement to allow us to process your data (e.g., submitting a contact form).
- Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights (e.g., maintaining website security).
- Legal Obligation: Where processing is required to comply with the law (e.g., tax records).
Do you share my data with anyone?
We do not sell or rent your personal data. We may share it with trusted service providers (e.g. email hosting, cloud storage) only when necessary to provide our services, and always under strict confidentiality obligations. We will never share your data for marketing purposes without your consent.
How long do you keep my data?
We only retain your personal data for as long as necessary to fulfil the purpose for which it was collected. For active projects, data is retained for the duration of the project and may be archived after completion for reference or tax/legal compliance.
What are my rights?
- The right to access your personal data
- The right to correct or update inaccurate data
- The right to request erasure (where legally permitted)
- The right to restrict or object to processing
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (ico.org.uk), if you believe we have not handled your personal data correctly. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
How is my data secured?
We use appropriate technical and organisational measures to protect your data, including secure hosting, access controls, and data minimisation. While no system is 100% secure, we take your privacy seriously and work to prevent unauthorised access.
Who is the data controller?
The data controller responsible for your personal data is John Taylor trading as Protoworks. Our registered office address is: Loading address.... If you have any questions or concerns about how your data is handled, please contact us directly via Loading email....
Changes to this policy
We may update this privacy policy from time to time to reflect changes in the law or how we operate. If changes are significant, we will post a notice on the website.
Cookies
For information on how we use cookies, please see our Cookie Policy.
Privacy Policy (v1.1)
What is your privacy policy?
We are committed to protecting your privacy and complying with data protection laws in the United Kingdom, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what personal data we collect, how we use it, and your rights. Last updated: 02 March 2026.
What personal data do you collect?
- Submit an enquiry via our contact form or email
- Call us or communicate through messaging platforms
- Access our website (e.g. IP address, browser type)
How do you use my data?
- Respond to your enquiries or support requests
- Manage active projects and deliver services
- Maintain security and prevent abuse
- Comply with legal obligations
What is our lawful basis for processing?
Under UK GDPR, we must have a lawful basis to process your data. We rely on the following:
- Contract: Processing is necessary to fulfill a contract with you or to take steps prior to entering a contract (e.g., providing quotes, delivering services).
- Consent: Where you have made an active agreement to allow us to process your data (e.g., submitting a contact form).
- Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights (e.g., maintaining website security).
- Legal Obligation: Where processing is required to comply with the law (e.g., tax records).
Do you share my data with anyone?
We do not sell or rent your personal data. We may share it with trusted service providers (e.g. email hosting, cloud storage) only when necessary to provide our services, and always under strict confidentiality obligations. We will never share your data for marketing purposes without your consent.
How long do you keep my data?
We only retain your personal data for as long as necessary to fulfil the purpose for which it was collected. For active projects, data is retained for the duration of the project and may be archived after completion for reference or tax/legal compliance.
What are my rights?
- The right to access your personal data
- The right to correct or update inaccurate data
- The right to request erasure (where legally permitted)
- The right to restrict or object to processing
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (ico.org.uk), if you believe we have not handled your personal data correctly. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
How is my data secured?
We use appropriate technical and organisational measures to protect your data, including secure hosting, access controls, and data minimisation. While no system is 100% secure, we take your privacy seriously and work to prevent unauthorised access.
Who is the data controller?
The data controller responsible for your personal data is John Taylor trading as Protoworks. Our registered office address is: Loading address.... If you have any questions or concerns about how your data is handled, please contact us directly via Loading email....
Changes to this policy
We may update this privacy policy from time to time to reflect changes in the law or how we operate. If changes are significant, we will post a notice on the website.
Cookies
For information on how we use cookies, please see our Cookie Policy.