Policy
Privacy, NDA and data handling
What we collect when you contact us, where it is stored, who can see it and how long it stays. Written plainly, because a policy nobody reads protects nobody.
What the enquiry form collects
The fields you fill in: name, work email, company, role, country, phone if you give one, and the description of your requirement. Alongside them we record the time of submission, the page you submitted from, your browser time zone, your user agent string and a one-way hash of your IP address. The hash is used to rate-limit abuse; the raw address is not stored.
Why we hold it
- To answer your enquiry and quote the work.
- To keep a record of what was asked and what we committed to, which is a contractual obligation once a programme starts.
- To detect and block automated abuse of the form.
We do not sell data, do not share it with advertising networks, and do not add you to a marketing list from a form submission. If we later want to send you something unrelated to your enquiry, we will ask first.
Where it lives
Submissions are stored in a Cloudflare D1 database attached to this site, replicated within Cloudflare’s network. Access is restricted to the engineering and trade compliance staff handling enquiries, through an authenticated internal endpoint that logs every read. The site itself sets no advertising or analytics cookies.
How long we keep it
| Record | Retention |
|---|---|
| Enquiry that did not become a programme | 24 months from last contact |
| Enquiry that became a programme | Life of the programme plus 7 years, for trade and quality audit |
| Drawings and technical files | Purged 90 days after a programme closes, unless a longer period is agreed |
| Rate-limiting hashes | 30 days |
Technical files and the NDA
Drawings, models and specifications are not accepted through this form. A mutual NDA is signed first; ours runs to two pages and is a standard mutual instrument with a five-year term, and we are equally happy to sign yours. Files are then exchanged through an access-logged repository, released to a producing plant only as the specific views an operation needs, and never shared with a plant outside the programme they were supplied for. Partner factories sign a back-to-back confidentiality undertaking covering your part numbers.
Your rights over the data
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it where no contractual or statutory retention applies. Write to [email protected] and we will respond within 30 days. If you are in the EEA or the UK and are not satisfied with our response, you may complain to your national supervisory authority.