Privacy Policy

Plain-language summary: the website does not store enquiry answers in a database or browser storage. The enquiry builder prepares a draft on your device. You choose whether to open it in your email app, copy it to your clipboard or download a text file. Personal information you send by email is used to assess enquiries, provide quotations and deliver agreed work.

Who is responsible for your information

The data controller is the individual sole trader operating as SOLIDSTEAD Engineering Design. Privacy questions, rights requests and data-protection complaints can be sent to hello@solidstead.co.uk. The contracting trader's identity and the address for formal notices will be included in applicable quotation, agreement and invoice documentation.

Information collected

Information may include your name, email address, company, project description, dimensions, intended use, preferred timescale, budget, correspondence and files you choose to send, such as photographs, sketches, drawings, PDFs or CAD data. Hosting and security providers may also process technical data such as IP addresses, browser information, request times and security logs.

Why information is used and the lawful bases

• Enquiries and quotations: to take steps at your request before a contract and for legitimate interests in responding to genuine enquiries.
• Project delivery: to perform an agreed contract.
• Records, tax and disputes: to comply with legal obligations and for legitimate interests in maintaining appropriate business records and protecting legal rights.
• Website security: for legitimate interests in operating and protecting the website, email and project information.

Who information may be shared with

Information may be shared only where necessary with website, email, file-storage and IT providers; professional advisers; payment or accounting providers if later used; and external manufacturing or logistics suppliers if a specific quotation or production request makes this necessary. Only the information reasonably required for that purpose should be shared.

International processing

Some technology providers may process information outside the UK. Where this occurs, SOLIDSTEAD should use providers and contractual safeguards appropriate under UK data-protection law, such as adequacy regulations or approved transfer safeguards.

How long information is kept

Enquiries that do not proceed should normally be reviewed for deletion within 12 months. Project, quotation, contract, accounting and related correspondence may be retained for up to seven years after the relevant project or transaction, or longer where a legal obligation, dispute, warranty or safety record requires it. Hosting and security logs follow the provider's operational retention periods.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict personal information, object to certain processing, and receive portable information. You also have the right to object to processing based on legitimate interests. Email the address above to make a request. Identity may need to be verified before information is released.

Complaints

Please use the complaints procedure so the concern can be logged, investigated and answered. You may also complain to the UK Information Commissioner's Office at ico.org.uk.

Automated decision-making and AI

The website does not currently use automated decision-making, profiling or an AI chatbot to assess enquiries, decide whether work is accepted or set prices. Project suitability and quotations require human review.

Children

The services are not directed at children. A parent or guardian should make contact for any project involving a person under 18.

Security and sensitive files

Reasonable technical and organisational measures should be used to protect information. Do not send highly sensitive, export-controlled, classified or confidential information until suitable handling and, where needed, a confidentiality agreement have been discussed.

Changes

This notice will be updated before introducing analytics, advertising, online payments, hosted uploads, customer accounts, newsletters or materially different data uses.