This privacy policy explains how FormStrata Ltd ("we", "us", "our") collects, uses, stores, and protects your personal data. We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
FormStrata Ltd is a precision component manufacturing and design business registered in England and Wales.
- Company name: FormStrata Ltd
- Company number: 17228453
- Director: Keith Croston
- Email: [email protected]
- Website: www.formstrata.co.uk
FormStrata Ltd is the data controller for the personal data we collect and process.
2. What data we collect
We collect personal data in the following circumstances:
- Quote requests — when you submit a quote request via our website, we collect your name, company name, email address, phone number, and details of your enquiry
- Business communications — when you contact us by email or phone, we may retain records of those communications
- Orders and invoicing — when you place an order, we collect and retain your name, company name, contact details, delivery address, and payment information (bank transfer reference only — we do not store card details)
- Site visits — where we visit your premises, we may record contact names and site details for safety and operational purposes
We do not collect sensitive personal data (such as health, ethnicity, or financial account details beyond what is necessary to process payment).
3. How we use your data
We use your personal data for the following purposes:
- To respond to your quote request or enquiry
- To produce and deliver quotes, invoices, and order documentation
- To communicate with you about your order or project
- To maintain business records as required by law (including HMRC requirements)
- To comply with legal and regulatory obligations
We do not use your personal data for marketing purposes without your consent. We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Legal basis for processing
We process your personal data on the following legal bases under UK GDPR:
- Contract — processing is necessary to fulfil a contract with you or to take steps at your request before entering into a contract
- Legal obligation — processing is necessary to comply with a legal obligation, including HMRC record-keeping requirements
- Legitimate interests — processing is necessary for our legitimate business interests, such as responding to enquiries and maintaining client relationships, where these are not overridden by your rights
5. How long we keep your data
We retain personal data for the following periods:
- Enquiries that do not result in an order — up to 12 months from the date of enquiry
- Order and invoicing records — 6 years from the end of the relevant financial year, in line with HMRC requirements
- Quality and inspection records — minimum 3 years, in line with our quality management system
After these periods, personal data is securely deleted or anonymised.
6. Who we share your data with
We do not sell or share your personal data with third parties except in the following limited circumstances:
- Professional advisors — such as accountants or legal advisors, where necessary
- Legal requirement — where we are required to disclose information by law, court order, or regulatory authority
We do not transfer your personal data outside of the UK.
7. Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access — you can request a copy of the personal data we hold about you
- Right to rectification — you can ask us to correct inaccurate or incomplete data
- Right to erasure — you can ask us to delete your personal data, subject to our legal obligations to retain certain records
- Right to restrict processing — you can ask us to limit how we use your data in certain circumstances
- Right to object — you can object to processing based on legitimate interests
- Right to data portability — you can request your data in a structured, commonly used format
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
8. Cookies and website data
Our website (www.formstrata.co.uk) does not use tracking cookies or analytics services that collect personal data. The website contact form collects the information you submit solely for the purpose of responding to your enquiry.
We do not use third-party advertising cookies or share browsing data with any third parties.
9. Data security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include secure email communications, password-protected systems, and limiting access to personal data to the director only.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and inform affected individuals as required by law.
10. Complaints
If you have concerns about how we handle your personal data, please contact us in the first instance at [email protected] and we will do our best to resolve your concern.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: www.ico.org.uk
- Helpline: 0303 123 1113
11. Changes to this policy
We may update this privacy policy from time to time. The current version is always available at www.formstrata.co.uk/privacy.html. The effective date at the top of this page indicates when the policy was last updated.
12. Contact
For any queries about this privacy policy or how we handle your data, please contact:
FormStrata Ltd
North West England
Email: [email protected]
Phone: 07413 937 288
Company No. 17228453