Legal

Privacy policy

What we collect when you send us an enquiry, why we collect it, who else sees it, and how to get it back or have it deleted.

Last updated

Draft — not yet reviewed by a solicitor

The wording below is a structurally complete draft prepared during the build so that nothing is missing when it goes for review. It has not been checked by a qualified lawyer and must not be relied on as it stands. The sections marked [TO CONFIRM] need answers from the client before review: retention periods, named processors, and the international transfer mechanism.

Contents

  1. 1. Who we are
  2. 2. What we collect, and when
  3. 3. Why we use it, and our lawful basis
  4. 4. Who else sees it
  5. 5. How long we keep it
  6. 6. Your rights
  7. 7. How we protect it
  8. 8. Changes to this notice

1. Who we are

This notice explains what D&Z Sculptures does with personal data collected through this website. Our full legal name, registered address and contact details are at the end of this document and in the footer of every page.

[TO CONFIRM: company registration number, and whether a UK or EU representative is appointed under Art. 27 — required if we target UK or EU customers from outside those jurisdictions, which on the evidence of this website we do.]

2. What we collect, and when

We collect only what a commission needs.

  • When you request a quote — your name, email address, and optionally your phone number, company and role; plus the project details you give us: type, sector, material, height, quantity, timeline, budget band and site location.
  • When you attach drawings — the files themselves and their file names. Drawings frequently identify a site and sometimes a client, so we treat them as confidential rather than as ordinary attachments.
  • When you contact us — the same contact fields and your message.
  • When you download a gated file — your name, email address and optionally your company.
  • When you browse — analytics data, if you have consented to it. See the cookie policy.

Your saved enquiry list is not collected. It is held in your own browser's storage on your own device and is never transmitted to us unless you choose to send it with a quote request.

3. Why we use it, and our lawful basis

What forLawful basis
Replying to an enquiry and preparing a quotationSteps taken at your request before entering a contract (Art. 6(1)(b))
Delivering and supporting a commissionPerformance of a contract (Art. 6(1)(b))
Sending a gated file you asked forYour consent (Art. 6(1)(a))
Keeping records of quotations and ordersLegal obligation, and our legitimate interest in defending claims (Art. 6(1)(c), 6(1)(f))
Spam protection on our formsLegitimate interest in keeping the site usable (Art. 6(1)(f))
AnalyticsYour consent (Art. 6(1)(a), PECR reg. 6)

We do not use your details for marketing unless you have asked us to, and we do not sell or rent personal data to anybody.

4. Who else sees it

A small, fixed list of processors, each doing one job:

  • Our hosting and content platform, which stores the enquiry record.
  • Cloudflare, which serves this website.
  • Our email provider, which carries the notification and our reply.
  • Freight, customs and installation partners, but only for a live commission and only the details they need to deliver it.

[TO CONFIRM: named processors, and the transfer mechanism for each — UK IDTA, EU standard contractual clauses, or an adequacy decision. Our operations are in China, so international transfer wording is not optional and needs drafting properly.]

5. How long we keep it

[TO CONFIRM — these are placeholders and must be set by the client against their own accounting and warranty obligations:]

  • Enquiries that do not become orders — [24 months], then deleted.
  • Quotations and orders — [7 years] from completion, for tax and warranty purposes.
  • Uploaded drawings — deleted [12 months] after an enquiry closes unless the commission proceeds.
  • Analytics — as set in the cookie policy.

6. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to it. Where we rely on your consent you can withdraw it at any time, and withdrawing it does not affect anything done before you did.

There is no charge and no form. Write to the address at the end of this document and we will answer within one month.

If you are not satisfied with our answer you can complain to your national data protection authority — in the UK that is the Information Commissioner's Office, ico.org.uk.

7. How we protect it

The website is served over HTTPS. Form submissions travel to our server over an encrypted connection and are forwarded to our content platform over a signed, authenticated channel — they are never posted directly from your browser to a third party.

[TO CONFIRM: access control, encryption at rest, retention of uploaded drawings, and whether a breach notification procedure is documented.]

8. Changes to this notice

When this notice changes we update the date at the top. Where a change materially affects how we use data you have already given us, we will tell the people affected directly rather than rely on them re-reading the page.

How to contact us about this

Questions about this document, or a request to exercise a right under it, go to a person rather than a form:

projects@dzsculptures.com

Our registered company name and address are not published on this site yet. Email us and we will send them, in writing, with the document you need them for.

We answer within one month, which is the statutory limit for a data-subject request under UK and EU GDPR. Most are answered the same week.