GDPR & Privacy Policy.

Data Controller

The data controller responsible for your personal data is:

What We Collect

We only collect personal data that you voluntarily provide to us, or that is necessary for the delivery of our services. This may include:

• Name and job title
• Company or organisation name
• Email address and phone number
• Project briefs and correspondence
• Billing and invoicing details

We do not collect or process any special category data (such as health, racial or ethnic origin, political opinions, etc.).

How We Use Your Data

We use the personal data you provide for the following purposes:

• To respond to enquiries and provide quotes
• To manage and deliver signage projects
• To process payments and maintain financial records
• To communicate updates about your project

Legal Basis for Processing

Under the UK GDPR, we process personal data based on one or more of the following lawful bases:

• Contractual necessity — to fulfil our contract with you, such as designing, manufacturing and installing signage.
• Consent — where you have explicitly agreed to receive marketing communications or for analytics cookies.
• Legitimate interests — where processing is necessary for our legitimate business interests (e.g. internal record keeping) and your rights do not override those interests.
• Legal obligation — to comply with applicable law, such as tax and accounting requirements.

Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy, or as required by law:

• Project records: 7 years (for warranty and legal compliance).
• Marketing consent: Until you withdraw consent.
• Analytical data: 26 months.

When data is no longer needed, it is securely deleted or anonymised.

Cookies

Our website uses cookies to improve your experience. The cookies we use include:

• Essential cookies — necessary for the website to function (e.g. remembering form inputs).
• Analytics cookies — help us understand how visitors interact with our website. These are only placed with your consent.

You can manage or withdraw cookie consent at any time via your browser settings.

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. This includes:

• Encrypted data transmission (TLS/SSL)
• Access controls and role-based permissions
• Regular security reviews and updates
• Secure, UK-based cloud infrastructure

While we take every reasonable precaution, no internet transmission is ever 100% secure. If you have concerns, contact us directly.

Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

• Right to access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your data in certain circumstances.
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, please contact us using the details below. We will respond within one calendar month.

Contact Us

If you have any questions about this privacy policy, or wish to exercise your rights, please contact:

We may update this policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page.

Last updated: June 2026