01 Who we are
FOCO Workshop Ltd ("FOCO", "we", "us", "our") is a company registered in England and Wales. Our registered address is Unit 9, Hooton Works, Hooton Road, Hooton, CH66 7NB. We are the data controller for the personal data described in this notice.
We operate a precision panel-cutting, edge-banding and CNC routing service for trade professionals and the general public across the North West of England and beyond. This notice explains how we collect and use your personal data when you visit our website, submit a cut list or quote request, or otherwise interact with us.
For questions about this notice, contact us at info@focoworkshop.co.uk.
02 Data we collect
We collect the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Identity | First name, last name, company name | You provide it |
| Contact | Email address, telephone number, delivery address | You provide it |
| Order data | Cut-list specifications, board selections, edge-banding requirements, quantities | You provide it |
| Transaction | Invoice amounts, payment method (not card numbers — processed by payment provider), VAT number | You and our payment processor |
| Communications | Emails, messages, enquiries you send us | You provide it |
| Technical | IP address, browser type, pages visited, referring URL, timestamps | Automatically collected |
We do not collect any special category data (health, political views, etc.) and do not knowingly collect data from children under 16.
03 How we use your data
We use your personal data to:
- Process and fulfil your cut-list orders, issue quotes and raise invoices
- Communicate with you about your order status, lead times and delivery
- Set up and manage trade accounts
- Respond to general enquiries and sample requests
- Send transactional emails (order confirmations, invoices, dispatch notifications)
- Improve our website and services by analysing aggregated usage data
- Comply with legal obligations, including VAT records and anti-fraud checks
- Pursue or defend legal claims where necessary
We do not use your data for automated decision-making or profiling. We do not sell your data to third parties.
04 Legal basis for processing
We process your personal data on the following legal grounds under UK GDPR:
- Contract performance — to process your orders and provide our services
- Legal obligation — to comply with tax, accounting and regulatory requirements
- Legitimate interests — to operate our business, improve our services and communicate with you about relevant offers, where this does not override your rights
- Consent — where we ask for it specifically, such as marketing emails (you can withdraw consent at any time)
06 How long we keep your data
| Data type | Retention period | Reason |
|---|---|---|
| Order and invoice records | 7 years from transaction date | HMRC / tax compliance |
| Trade account data | Duration of account + 3 years after closure | Contractual and legal claims |
| General enquiry emails | 2 years from last contact | Legitimate business interest |
| Website analytics | 26 months (rolling) | Service improvement |
| Marketing consent records | Until consent is withdrawn + 1 year | Audit trail of consent |
After the retention period expires, we securely delete or anonymise your data.
07 Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — request deletion of your data where there is no lawful reason to keep it
- Restriction — ask us to restrict processing while a dispute is resolved
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — at any time, without affecting the lawfulness of prior processing
To exercise any right, contact us at info@focoworkshop.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
09 Security
We take appropriate technical and organisational measures to protect your personal data against accidental loss, disclosure or unauthorised access. Our website uses HTTPS encryption. Access to customer data is restricted to authorised staff on a need-to-know basis.
Despite these measures, no internet transmission is completely secure. If you believe your data has been compromised, please contact us immediately at info@focoworkshop.co.uk.
10 Changes to this notice
We may update this Privacy Notice from time to time. The "Last updated" date at the top of this page will reflect any changes. For significant changes we will notify active customers by email. Continued use of our services after changes are published constitutes acceptance of the updated notice.
11 Contact us
FOCO Workshop Ltd
Unit 9, Hooton Works
Hooton Road, Hooton
CH66 7NB