Privacy Policy

Last updated: 13-10-2025

This Privacy Policy explains how Aldridge Fabrications (AF) (“we”, “us”, “our”) collects, uses, shares and protects your personal information when you visit our website, contact us, or use our services.

1. Who we are (Data Controller)

Aldridge Fabrications (AF)
Mount Road, Burntwood, Staffordshire, WS7 0AX
Foxfield Works, Whitehurst Lane, Dilhorne, ST10 2PG
Email: [EMAIL] | Tel: [PHONE]
If you have questions about this policy, contact us at the above details.

2. The information we collect

Identification & contact data: name, company, role, email, phone, postal address.
Commercial data: enquiries, quotes, orders, invoices, payments, delivery details.
Technical data: IP address, device/browser type, pages viewed, referring URLs, and cookie identifiers (see Cookies Policy).
Communications: emails, forms, calls, and related correspondence.
Recruitment data (if you apply): CV, cover letter, qualifications and references.

3. How we collect it

Directly from you (website forms, email, phone, events, in person).
Automatically via our website (cookies, analytics—see Cookies Policy).
From third parties where lawful (e.g. referrals, contractors, credit checks, logistics partners).

4. Why we use your data (lawful bases)

Contract: to respond to enquiries, provide quotes, fulfil orders, manage delivery and after-sales.
Legal obligation: tax, accounting, product traceability and regulatory compliance.
Legitimate interests: running and improving our business and website, preventing fraud/abuse, customer service, B2B relationship management.
Consent: where required for non-essential cookies/marketing. You can withdraw consent at any time.

5. How we use your data

Provide and improve our services, quotations, and customer support.
Manage accounts, payments, deliveries, and warranties.
Maintain security, diagnose issues, and analyse site performance.
Send service messages. Marketing is sent only in line with PECR/GDPR rules (you can opt out).

6. Sharing your data

We share data only as necessary with trusted providers, for example:

IT/hosting, website, and analytics providers.
Payment processors and accountants.
Carriers, logistics and warehousing partners.
Professional advisers and insurers.
Authorities where required by law.

We require recipients to protect your data and use it only for the stated purposes.

7. International transfers

Where data is transferred outside the UK (e.g. to cloud or analytics providers), we use appropriate safeguards such as UK Addendum/IDTA or other recognised transfer mechanisms.

8. Retention

Enquiries/leads: typically 12–24 months after last contact.
Contract/order records: typically 6–7 years (accounting/legal).
Technical logs/analytics: typically 12–26 months (see Cookies Policy).
Recruitment: typically 6 months if unsuccessful (unless you consent to a longer period).

9. Your rights

You have the right to request access, correction, deletion, restriction, objection, and data portability. You can also withdraw consent where processing relies on consent.

To exercise these rights, contact: [EMAIL]. We may need to verify your identity.

10. Marketing

We may send B2B updates or service information in line with PECR. You can opt out at any time via the message footer or by contacting us.

11. Security

We implement technical and organisational measures to protect personal data (e.g. access controls, encryption in transit where applicable, least-privilege access). No method is 100% secure; we continually review our measures.

12. Complaints

If you’re unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/.

13. Changes to this policy

We may update this policy from time to time. The updated version will be posted here with a new “Last updated” date.

This policy applies to our website and B2B operations. It does not constitute legal advice.