Privacy Policy (v1.1)

What is Protoworks' privacy policy?

Protoworks is committed to protecting your privacy and complying with data protection laws in the United Kingdom, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what personal data Protoworks collects, how it is used, and your rights. Last updated: 02 March 2026.

What personal data does Protoworks collect?

Protoworks may collect personal data when you:

Submit an enquiry via the Protoworks contact form or email
Call Protoworks or communicate through messaging platforms
Access the Protoworks website (e.g. IP address, browser type)

This data may include your name, contact details, technical identifiers, or other information you choose to share.

How is personal data used?

Personal data is only used to:

Respond to your enquiries or support requests
Manage active projects and deliver services
Maintain security and prevent abuse
Comply with legal obligations

Protoworks does not use your data for marketing without your explicit consent.

What is the lawful basis for processing?

Under UK GDPR, Protoworks must have a lawful basis to process your data. Processing relies on the following:

Contract: Processing is necessary to fulfill a contract with you or to take steps prior to entering a contract (e.g., providing quotes, delivering services).
Consent: Where you have made an active agreement to allow Protoworks to process your data (e.g., submitting a contact form).
Legitimate Interests: Where processing is necessary for the legitimate business interests of Protoworks, provided those interests are not overridden by your rights (e.g., maintaining website security).
Legal Obligation: Where processing is required to comply with the law (e.g., tax records).

Is personal data shared?

Protoworks does not sell or rent your personal data. It may share it with trusted service providers (e.g. email hosting, cloud storage) only when necessary to provide its services, and always under strict confidentiality obligations. Protoworks will never share your data for marketing purposes without your consent.

How long is personal data kept?

Protoworks only retains your personal data for as long as necessary to fulfil the purpose for which it was collected. For active projects, data is retained for the duration of the project and may be archived after completion for reference or tax/legal compliance.

What are your rights?

Under the UK GDPR, you have rights including:

The right to access your personal data
The right to correct or update inaccurate data
The right to request erasure (where legally permitted)
The right to restrict or object to processing

To exercise these rights, please contact Protoworks via [email protected].

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (ico.org.uk), if you believe Protoworks has not handled your personal data correctly. Protoworks would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please make contact in the first instance.

How is personal data secured?

Protoworks uses appropriate technical and organisational measures to protect your data, including secure hosting, access controls, and data minimisation. While no system is 100% secure, Protoworks takes your privacy seriously and works to prevent unauthorised access.

Who is the data controller?

The data controller responsible for your personal data is John Taylor trading as Protoworks. The registered office address is: Loading address.... If you have any questions or concerns about how your data is handled, please contact Protoworks directly via [email protected].

Changes to this policy

Protoworks may update this privacy policy from time to time to reflect changes in the law or how it operates. If changes are significant, a notice will be posted on the website.

Cookies

For information on how Protoworks uses cookies, please see the Cookie Policy.