Privacy policy

Last updated 30 June 2026

This policy explains how Hurstbourne Forge Ltd collects, uses, shares and protects your personal data when you visit this website, contact us or buy from us, and the rights you have under the UK GDPR and the Data Protection Act 2018.

1. Who is responsible for your data

The data controller is Hurstbourne Forge Ltd, Unit 4 Brunel Gate, West Portway, Andover SP10 3SL. We are registered with the UK Information Commissioner's Office (ICO) under registration reference ICO:00011522553. For any data-protection question, email [email protected] or write to us at that address marked "Data Protection".

2. What personal data we collect

• Identity & contact data — name, business name, email, phone, billing and delivery address.
• Order & transaction data — what you bought or enquired about, order history, and records of correspondence with us.
• Files you send us — drawings, specifications and any details you include when requesting a quote.
• Payment data — we do not store full card details; payments are handled by our payment provider. We retain only the outcome and a reference.
• Technical & usage data — IP address, device/browser type, and (only with your consent) analytics about how you use the site. See our cookie policy.

3. How and why we use it

We use your personal data to take and fulfil orders, provide quotes, deliver goods and services, take payment, provide support, keep records we are legally required to keep (such as tax and VAT records), prevent fraud, and — where you have agreed or where the law allows — to send you relevant updates.

4. Our lawful bases

5. Who we share it with

We share personal data only as needed to run our business, with: payment processors; delivery and carrier partners; software and IT providers who host or support our systems; and professional advisers, where appropriate. We may disclose data where required by law. We do not sell your personal data. Where a provider processes data on our behalf, they do so under a contract that requires them to protect it and use it only as we instruct.

6. How long we keep it

We keep personal data only for as long as needed for the purpose it was collected, then delete or anonymise it. In particular:

• Order and transaction records: retained for 6 years after the end of the relevant tax year, to meet HMRC / accounting requirements.
• Enquiries and quotes that don't lead to an order: typically up to 24 months, then deleted.
• Marketing-consent records: until you withdraw consent, plus a short period to evidence the choice.
• Website analytics: only collected with consent and held for a limited period as set out in our cookie policy.

7. International transfers

We aim to keep personal data within the UK or the European Economic Area. Where a provider processes data outside the UK/EEA, we ensure an appropriate safeguard is in place (such as UK adequacy regulations or the International Data Transfer Agreement / Addendum).

8. How we protect it

We use appropriate technical and organisational measures — including encryption in transit (HTTPS), access controls and reputable hosting — to protect personal data against loss, misuse and unauthorised access. No transmission over the internet is completely secure, but we take security seriously and review our measures.

9. Your rights & how to make a request (DSAR)

Under data-protection law you have the right to: be informed; access a copy of your data; have inaccurate data corrected; have data erased; restrict or object to processing; data portability; and to withdraw consent at any time where we rely on it. To exercise any of these rights, including making a Subject Access Request (DSAR), contact our data-protection contact:

We will respond within one month. There is normally no charge. We may ask you to verify your identity before we act on a request.

10. Cookies

We use only essential cookies and storage by default, and non-essential cookies only with your consent. Full details are in our cookie policy.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date above shows when it last changed; significant changes will be highlighted on this page.

12. Contact & complaints

If you have any concern about how we handle your data, please contact us first so we can put things right. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113.