Last updated: 6 October 2026

This policy explains how Complete Fabrication Ltd collects, uses and protects personal data when you visit compfab.co.uk, ask us for a quote, buy from us or work with us. We use plain language where we can. Please also read our Cookie Policy and Terms and Conditions.

1. Who we are

Complete Fabrication Ltd (trading as Complete Fabrication or CompFab) is the controller of your personal data. We are a company registered in England and Wales, company number 03528752, VAT number GB750778408. Our registered office is 4b Lion Works, Station Road, Whittlesford, Cambridge, Cambridgeshire CB22 4WL, and we trade from the same premises (Unit 4B Lion Works, Station Rd E).

If you have a question about this policy or your data, contact us at Info@compfab.co.uk or on +44 1223 836837. We have not appointed a Data Protection Officer, because the law does not require us to. Data protection questions go to the same contact.

2. What personal data we collect

Who	What we collect	Where it comes from
People who contact us or ask for a quote	Name, job title, company, email address, phone number, the content of your message, and any CAD files, drawings or briefs you send	You, by email, phone or the website forms
Customers	The details above, plus delivery and invoice addresses, order history, and payment and account details needed to invoice you	You, and your company
Suppliers and partners	Contact details and the business information needed to place and pay for orders	You, and your company
Website visitors	Your IP address, device and browser type, the pages you view, how you arrived at the site and how long you stay. We collect this only through cookies that you accept, as described in our Cookie Policy	Your browser, through Google Analytics
Visitors to our workshop	Your name, company and contact details when you sign in	You

Sometimes we receive your business contact details from your employer, from a colleague who is dealing with us, or from public sources such as your company website or a business directory.

We do not knowingly collect data about children, and we do not ask for special category data (such as health information). Please do not include it in files or messages you send to us.

3. How and why we use your data

What we do	Our lawful basis under UK GDPR
Reply to enquiries, prepare quotes and discuss your project	Steps taken at your request before entering a contract, and our legitimate interest in responding to business enquiries
Make your parts, deliver them, invoice you and take payment	Performance of our contract with you
Keep accounting, tax and company records	Legal obligation
Run, secure and improve the business and the website, and keep records of our dealings with customers	Our legitimate interests in running and protecting our business. We balance these against your rights and do not use your data in ways you would not reasonably expect
Measure how the website is used through analytics cookies	Your consent. You can refuse or withdraw it at any time
Send you news or marketing by email, if we ever do	Your consent, or our legitimate interest in contacting business contacts, in line with the Privacy and Electronic Communications Regulations 2003 (PECR). We will say who we are in every message and give you an easy way to opt out
Establish, exercise or defend legal claims	Our legitimate interests, and legal obligation where it applies

If you do not give us the information we need, for example the files for a quote or your delivery address, we may not be able to give you a quote or make your order.

We do not sell your personal data, and we do not use it for automated decision-making or profiling that has legal or similarly significant effects on you.

4. Who we share your data with

We share personal data only where we need to, and only with organisations that handle it under a contract or other safeguards:

Website and hosting: Webflow, which hosts the website and processes form submissions.
Analytics and maps: Google, for Google Analytics (with your consent) and the Google Maps embed on our contact page.
IT, email and file storage providers that we use to run the business.
Accountants, bookkeepers and professional advisers.
Couriers and carriers, who receive your delivery name, address and phone number.
Suppliers and subcontractors, such as a specialist finisher or plater, who receive only the information needed for the job. Where a project is confidential, we use them only under a non-disclosure agreement.
Authorities, such as HMRC, the police or courts, where the law requires it.
A buyer or successor, if our business is sold or restructured, under the same protections.

We do not share your files or project details with other customers.

5. Sending data outside the UK

Some of the providers above, including Webflow and Google, are based in or use servers in the United States and other countries. Where personal data leaves the UK, we rely on a UK adequacy arrangement (for example the UK-US data bridge for certified companies), the UK International Data Transfer Agreement or Addendum, or another safeguard approved under UK data protection law. You can ask us for details by contacting us.

6. How long we keep your data

Type of data	How long we keep it
Enquiries and quotes that do not lead to an order	Up to 2 years after our last contact
Customer records, orders, invoices and payment records	6 years after the end of the financial year, to meet tax and accounting rules and to deal with any claim
CAD files and project data you supply	For the life of the project, then as agreed with you (see our Terms and Conditions), or until you ask us to delete them, unless we must keep them by law
Website analytics data	No longer than 14 months
Workshop visitor records	Up to 12 months

When the period ends, we delete or anonymise the data.

7. Keeping your data and designs secure

We protect personal data and customer files with access controls, secure storage and staff who understand that confidentiality matters. Non-disclosure agreements run through much of our work, and we are happy to sign yours before you send anything. No system is completely secure, so please tell us at once if you think your data has been put at risk.

8. Cookies and analytics

We use cookies to understand how people use the site. Analytics cookies are set only if you accept them. Our Cookie Policy lists each cookie, what it does and how to change your choice.

9. Links to other websites

Our site links to other websites, including social media pages and Google Maps. We are not responsible for their content or privacy practices, so please read their policies.

10. Your rights

Under UK data protection law you have the right to:

be told how we use your data (this policy does that);
ask for a copy of the personal data we hold about you;
ask us to correct data that is wrong or incomplete;
ask us to delete your data, in some circumstances;
ask us to restrict how we use your data, in some circumstances;
object to our use of your data where we rely on legitimate interests, and to direct marketing at any time;
ask for your data in a portable format, where we use it under a contract or with your consent; and
withdraw your consent at any time, where we rely on it. This does not affect what we did before you withdrew it.

To use any of these rights, email Info@compfab.co.uk. We may need to check your identity first. We aim to reply within one month, and we do not normally charge a fee. If your request is complex or you have made several requests, we may need up to two further months, and we will tell you why.

11. Complaints

If you are unhappy with how we have handled your data, please complain to us first by emailing Info@compfab.co.uk so we can put it right. We will acknowledge your complaint within 30 days, look into it, keep you informed, and tell you the outcome without undue delay. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

12. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If we make a significant change, we will make it clear on this page.

Privacy Policy