Privacy Notice

Last updated: March 2025

1. Who We Are

FOCO Workshop is a panel cutting and processing business based in Hooton, Cheshire. We provide board cutting, edgebanding, CNC routing, spray painting, and associated products and services to trade customers and the general public.

Our registered address is:

For the purposes of data protection law, FOCO Workshop is the data controller responsible for your personal data.

2. What Information We Collect

We may collect and process the following personal information:

• Your name and contact details (email address, phone number, postal address)
• Business name and trade information where relevant
• Details of your enquiry, order or project requirements
• Payment and billing information (processed securely via our payment provider)
• Communications you send us by email, phone or through our website contact form
• Website usage data collected via cookies (see Section 8)

3. How We Use Your Information

We use your personal information for the following purposes:

• To respond to your enquiries and provide quotes
• To process and fulfil orders and arrange delivery or collection
• To manage our customer relationship and communicate with you about your order
• To send you information about our services where you have asked us to, or where we have a legitimate interest in doing so
• To comply with our legal and regulatory obligations
• To improve our website and services

4. Our Legal Basis for Processing

We rely on the following legal bases to process your personal data under UK GDPR:

• Contract: processing is necessary to fulfil an order or take steps at your request before entering into a contract
• Legitimate interests: we have a legitimate business interest in processing data to respond to enquiries and market our services to existing customers
• Legal obligation: we may need to process data to comply with applicable law
• Consent: where we have asked for and received your consent, such as for marketing emails

5. Who We Share Your Information With

We do not sell your personal data. We may share it with:

• Delivery and logistics partners where we arrange delivery of your order
• Payment processors to handle transactions securely
• IT service providers who host or support our website and systems
• Professional advisers such as accountants or solicitors where necessary
• HMRC and other regulatory authorities where required by law

All third parties we share data with are required to handle it securely and in accordance with data protection law.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purpose it was collected, or as required by law. In general:

• Customer order and transaction records are retained for 7 years for tax and accounting purposes
• Enquiries that do not result in an order are deleted after 12 months
• Marketing consent records are kept until you withdraw consent

7. Your Rights

Under UK data protection law you have the following rights:

• Access: you can request a copy of the personal data we hold about you
• Rectification: you can ask us to correct inaccurate or incomplete data
• Erasure: you can ask us to delete your data in certain circumstances
• Restriction: you can ask us to restrict processing of your data in certain circumstances
• Portability: you can ask us to provide your data in a portable format
• Objection: you can object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the details in Section 1. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies — small text files placed on your device — to help the site function correctly and to understand how visitors use it. We use:

• Essential cookies: required for the website to function — no consent needed
• Analytics cookies: help us understand how visitors interact with our site (e.g. Google Analytics) — only set with your consent

You can manage or disable cookies in your browser settings at any time.

9. Data Security

We take reasonable technical and organisational steps to protect your personal data against unauthorised access, loss or destruction. Our website uses HTTPS encryption. Payment transactions are handled by our payment provider and we do not store full card details on our systems.

10. Changes to This Notice

We may update this privacy notice from time to time. The date at the top of this page shows when it was last revised. We encourage you to check back periodically.

11. Contact Us

If you have any questions about this privacy notice or how we handle your data, please get in touch: