B&Z Metalcraft Privacy Policy

Last updated: 23rd March 2026

B&Z Metalcraft Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use and protect personal data when you visit our website, contact us, or submit information through our website forms.

1. Who we are

B&Z Metalcraft Ltd
Unit O2, Cherrycourt Way
Leighton Buzzard
LU7 4UH
United Kingdom

Email: info@bandzmetalcraft.co.uk
Phone: 01525 373 018

For the purposes of data protection law, B&Z Metalcraft Ltd is the data controller of the personal data described in this policy.

2. What personal data we collect

We may collect and process the following personal data:

your name
your email address
your telephone number
your company name
any information you include in your message or enquiry
any files you upload through our quick quote form
technical and usage data collected through cookies and analytics tools, including information about how visitors use our website

3. How we collect your data

We collect personal data when:

you fill in a contact form on our website
you submit a quick quote request
you upload files through our website
you contact us by email or telephone
you use our website, including through analytics technologies such as Google Analytics and Google Tag Manager

4. How we use your personal data

We use your personal data to:

respond to your enquiries
provide quotations and deal with project requests
communicate with you about your enquiry or potential order
store and manage customer and prospect records
review uploaded drawings, specifications or other files relating to your request
improve our website, services and user experience
monitor website traffic and usage trends

5. Lawful bases for processing

Under UK data protection law, we must have a lawful basis for using your personal data. Depending on the circumstances, we rely on:

Legitimate interests – to respond to enquiries, manage business communications, maintain records, and improve our services and website
Contract – where processing is necessary to take steps at your request before entering into a contract, or to perform a contract with you
Legal obligation – where we need to retain or disclose information to comply with legal or regulatory obligations
Consent – where required, including in relation to certain cookies or tracking technologies

The ICO says organisations should decide their lawful bases before processing personal data and explain them clearly in their privacy notice.

6. Cookies and analytics

Our website uses Google Analytics and Google Tag Manager.

These tools help us understand how visitors use our website, such as which pages are visited, how users move through the site, and how we can improve performance and content. Google Analytics acts as a processor for its customers under GDPR terms, and Google provides controls over retention and privacy settings within the service.

Google Tag Manager is used to manage and deploy tags on our website. It does not itself replace the need to explain tracking technologies or obtain consent where required. Google also provides consent-related tooling for tags through Consent Mode.

You can control or disable cookies through your browser settings. Where required by law, we will request your consent before placing non-essential cookies on your device. The ICO’s guidance explains that non-essential cookies, including many analytics cookies, generally require informed consent.

7. Who we share your data with

We may share your personal data with trusted third parties where necessary to run our website and business, including:

our website hosting provider, SiteGround
providers of website analytics and tag management services, including Google
IT, email and website support providers where necessary for administration and security

We do not sell your personal data to third parties.

8. International transfers

Some of our service providers, including Google, may process personal data outside the UK. Where this happens, we will take reasonable steps to ensure that appropriate safeguards are in place so that your personal data remains protected in accordance with applicable data protection laws. Google states that Analytics customers remain controllers of the data they collect and that international transfer safeguards are addressed through its contractual terms and settings.

9. How long we keep your data

We currently retain enquiry and contact data, including submitted forms and uploaded files, for as long as necessary for our business records and administration. Typically we store data;

general enquiries: 24 months after last contact
quote/project files: 6 years after last meaningful contact or completion

The ICO says that if you do not have a fixed retention period, you should explain the criteria used to decide how long data is kept.

10. Where your data is stored

Information submitted through our website may be stored:

in the WordPress website backend
on our business email systems
on our local business database and internal systems

We take reasonable technical and organisational measures to protect personal data against unauthorised access, misuse, loss or disclosure. No method of transmission over the internet or electronic storage is completely secure, but we aim to use appropriate safeguards.

11. Your rights

Under UK data protection law, you may have the right to:

request access to your personal data
request correction of inaccurate or incomplete personal data
request erasure of your personal data in some circumstances
request restriction of processing in some circumstances
object to processing based on legitimate interests in some circumstances
request transfer of your personal data where applicable
withdraw consent where processing is based on consent

The ICO states that privacy information should tell individuals which rights they have and how they can complain.

To exercise any of these rights, please contact us using the details in section 1.

12. Complaints

If you have any concerns about how we handle your personal data, please contact us first and we will try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.

13. Third-party websites

Our website may contain links to other websites. This Privacy Policy applies only to our website. If you follow a link to another site, you should read that site’s own privacy policy.

14. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and, where appropriate, notified to you by other means.

Services