1. Who We Are
This Privacy Policy applies to Dalloway Precision Engineering Ltd, a company registered in England and Wales (Company No. 05465746), whose registered address is Unit 1, Premier Business Centre, Attwood Street, Lye, West Midlands, DY9 8RU.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Dalloway Precision Engineering Ltd is the Data Controller.
If you have any questions about this policy or how we handle your data, please contact us:
- Email: morgan@dalloways.com
- Phone: +44 (0) 7943 534473
- Post: Dalloway Precision Engineering Ltd, Unit 1, Premier Business Centre, Attwood Street, Lye, West Midlands, DY9 8RU
2. What Personal Data We Collect
We collect personal data only when you voluntarily submit it to us. The data we may collect includes:
2.1 Contact and Quotation Form
When you submit an enquiry or request a quote via our website, we collect:
- Full name
- Company name (if provided)
- Email address
- Telephone number (if provided)
- Project details, technical specifications, and any other information you include in your message
- Any technical drawings or CAD files you attach or subsequently send to us
2.2 Technical Data
Our website does not use analytics, tracking scripts, or advertising cookies. The only technical storage we use is a single item of browser localStorage to remember whether you have dismissed our cookie consent banner. This is essential to prevent the banner from reappearing on every page visit and does not identify you individually.
Our website is hosted on Netlify, whose servers may automatically log standard web server access data (IP address, browser type, page visited, time of access) as part of normal infrastructure operation. This is Netlify's standard logging and is governed by Netlify's Privacy Policy. We do not actively collect or review this server-level data.
3. How and Why We Use Your Data
We use the personal data you provide for the following purposes and on the following legal bases under UK GDPR:
| Purpose | Data Used | Legal Basis (UK GDPR Art. 6) |
|---|---|---|
| Responding to your enquiry or quotation request | Name, email, phone, project details | Art. 6(1)(b) — steps prior to entering a contract |
| Providing and managing engineering services and manufacturing orders | Name, company, contact details, technical specifications | Art. 6(1)(b) — performance of a contract |
| Maintaining records of transactions and correspondence for legal and accounting obligations | Name, company, contact details, order records | Art. 6(1)(c) — compliance with a legal obligation |
| Following up on previous enquiries where you have expressed interest | Name, email, previous enquiry details | Art. 6(1)(f) — legitimate interests (business development) |
| Measuring website usage and improving our site (Google Analytics) | General site interaction data (pages visited, time on page, device type, location at country level only) | Art. 6(1)(a) — your explicit consent (via cookie banner) |
We do not use your personal data for automated decision-making or profiling.
3.1 Google Analytics
If you consent to analytics via our cookie banner, Google Analytics will collect data about your browsing behaviour on our website. This includes pages visited, time spent on each page, links clicked, device type, and approximate location (country/region level only, not precise). Google Analytics does not link this data to your name or email address unless you voluntarily provide them on a form.
Your IP address is automatically anonymised by Google Analytics (the last octet is masked) before data is stored. Google processes this data under its own Privacy Policy.
4. Technical Drawings and CAD Files
Any technical drawings, CAD models, or design specifications you share with us are treated as commercially confidential information. We treat all such files with the same level of care as personal data — they are stored securely, not shared with third parties, and deleted from our systems upon project completion unless you specifically request us to retain them.
Where requested, we are happy to enter into a mutual Non-Disclosure Agreement (NDA) before receiving any technical documentation.
5. How We Store and Protect Your Data
Enquiries submitted via our website form are processed and stored by Netlify Forms, a service of Netlify Inc. (2325 3rd Street, Suite 215, San Francisco, CA 94107, USA). As a US-based service, data submitted via our form may be transferred to and stored on servers in the United States. Netlify participates in appropriate data transfer mechanisms.
Email correspondence is stored on our business email systems, which are protected by standard commercial email security measures including encryption in transit.
We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
6. How Long We Keep Your Data
We retain personal data for as long as necessary to fulfil the purposes for which it was collected:
- Enquiries that do not result in an order: Up to 12 months from the date of the last communication.
- Orders and contractual records: 7 years from the date of completion, in accordance with HMRC requirements for financial record-keeping.
- Technical drawings and CAD files: Deleted promptly upon project completion unless you request otherwise in writing. We will confirm deletion on request.
After the applicable retention period, data is securely deleted or anonymised.
7. Who We Share Your Data With
We do not sell, rent, or trade your personal data. We only share personal data in the following limited circumstances:
- Netlify Inc. — our website hosting and form processing provider, acting as a data processor on our behalf. Your enquiry data is transmitted to and stored by Netlify's infrastructure.
- Google Inc. — if you consent to analytics via our cookie banner, Google Analytics will receive anonymised data about your website usage. Google acts as a data processor under the appropriate data transfer agreements. See Clause 3.1 above.
- Legal obligations: Where we are required to disclose data by law, a court order, or a regulatory authority.
- Professional advisors: Our accountants, auditors, or legal advisors, where strictly necessary and subject to confidentiality obligations.
We never share your technical drawings, specifications, or project information with any third party without your explicit written consent.
8. International Transfers
Your data may be transferred to and stored on servers operated by Netlify Inc. in the United States. This transfer is made under appropriate safeguards in accordance with UK GDPR requirements for international data transfers.
9. Your Rights Under UK GDPR
You have the following rights in relation to the personal data we hold about you:
- Right of Access: You can request a copy of the personal data we hold about you (Subject Access Request).
- Right to Rectification: You can ask us to correct inaccurate or incomplete personal data.
- Right to Erasure: You can ask us to delete your personal data in certain circumstances (the "right to be forgotten").
- Right to Restriction: You can ask us to restrict the processing of your personal data in certain circumstances.
- Right to Data Portability: Where processing is based on consent or contract, and carried out by automated means, you can ask us to provide your data in a structured, machine-readable format.
- Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.
To exercise any of these rights, please contact us at morgan@dalloways.com. We will respond within one calendar month. There is no charge for making a request.
10. Right to Lodge a Complaint
If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection:
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would always appreciate the opportunity to address your concerns directly before you contact the ICO.
11. Third-Party Links
Our website may contain links to third-party websites (for example, our machine tool suppliers). This Privacy Policy applies only to our website. We are not responsible for the privacy practices of any third-party sites and recommend you read their policies before submitting personal data to them.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last reviewed" date at the top of this page will be updated whenever we make material changes. We encourage you to review this page periodically. Continued use of our website following changes constitutes acceptance of the updated policy.
13. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:
Unit 1, Premier Business Centre, Attwood Street, Lye, West Midlands, DY9 8RU
Email: morgan@dalloways.com
Tel: +44 (0) 7943 534473